Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier: XM9OlsPbm1cfyFCaCesfLSfaYgCLMWgkGdk+Xn9amPI=
Subject key identifier: 50:91:AE:BD:79:47:83:6F:F4:02:AC:EF:3D:8F:81:64:88:29:12:C8
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial: 019D2996D0EA57B984F0919451751B0C578A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:00:42 +0000
Manifest this update: Thu 26 Mar 2026 10:00:42 +0000
Manifest next update: Fri 27 Mar 2026 10:00:42 +0000
Files and hashes: 1: FjK0gZzIRFGA1r0HMqyZjh1eSaU.roa (hash: 5jTPa/LgCeRZQvqoHjBqfoQDZ2FKgfEuFxlRAqDizkI=)
2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: 7vfkBPj19RR+ZsmwRFDefYAwrAeb1xMKAdYjO3sVBF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:d0:ea:57:b9:84:f0:91:94:51:75:1b:0c:57:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
Validity
Not Before: Mar 26 10:00:42 2026 GMT
Not After : Mar 27 10:00:42 2026 GMT
Subject: CN=5091aebd7947836ff402acef3d8f8164882912c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:d9:94:25:dd:dd:de:82:07:e8:5a:b1:2a:
95:4a:07:25:bd:c4:37:a3:98:5e:b4:bb:51:c4:c2:
d3:a2:4c:21:b3:85:72:cc:dc:f6:39:51:9d:62:11:
c3:35:bd:fd:72:1e:f7:87:47:72:90:3b:33:91:5c:
85:ac:3d:4e:8f:af:8b:7b:51:15:1f:dd:31:b6:c2:
7a:61:a3:f3:2f:75:4a:89:4f:06:57:f0:c2:9e:a4:
ad:37:e6:dd:dc:d1:4d:97:5f:b3:c2:62:2f:6d:29:
92:6b:e0:3e:4b:e5:0e:a1:1b:65:fb:46:d3:98:53:
e3:a3:5e:23:6b:0b:ff:20:b0:22:ad:bd:54:4a:b6:
cd:76:b2:3a:eb:3e:38:c8:9e:12:7c:77:e9:00:b1:
92:ed:7b:58:60:59:24:66:6f:91:ad:bb:8f:eb:13:
c9:3b:84:a9:63:4e:c6:f0:ac:ec:a9:be:ae:03:80:
29:36:af:f9:dc:ec:a2:f8:55:9e:f3:0d:31:c6:a2:
30:f7:d7:f7:d8:76:d3:9c:08:f1:2c:18:ae:ca:81:
56:b4:75:09:71:10:26:d9:aa:1a:a5:22:19:0d:67:
ca:23:4f:df:95:d3:67:c5:70:99:eb:84:63:68:57:
18:2e:3f:c8:9e:60:38:2d:6c:b2:18:03:73:30:3b:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:AE:BD:79:47:83:6F:F4:02:AC:EF:3D:8F:81:64:88:29:12:C8
X509v3 Authority Key Identifier:
keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e1:ec:88:fe:ef:8d:c3:30:c7:04:50:8f:5c:2b:41:1e:58:
a4:9b:8f:4f:cc:d9:9d:c4:9a:da:11:26:21:61:4f:78:a4:0a:
65:c3:54:66:ed:64:16:69:2f:8e:33:1f:38:41:ac:2e:f8:37:
86:e3:cb:a6:26:27:e4:eb:07:65:40:ab:1d:a7:f7:34:a7:83:
b5:72:a9:c8:7c:f5:1f:e8:01:cb:0e:40:69:c3:97:36:fe:f4:
6e:3c:9a:8e:d9:f7:fb:24:ab:1c:21:a1:c6:dd:9a:c6:16:26:
e0:88:c3:0f:7d:4d:33:7c:19:b4:64:6c:ac:9e:84:14:d3:c1:
29:87:c5:95:ed:81:1b:61:f5:f3:ee:6b:f0:dc:22:9d:5f:57:
30:8d:30:62:b1:3d:56:d7:fa:69:48:03:51:6d:35:9e:e7:ae:
fb:4a:71:99:fd:ba:4c:49:02:6c:8b:7e:99:e3:42:50:6e:2f:
82:a3:d5:3d:f4:fa:9e:77:38:aa:8a:78:09:18:84:14:fc:99:
cd:ef:71:9b:0f:c7:5d:be:e5:30:06:b7:30:30:e5:6d:d6:2a:
e6:42:10:55:0e:74:2b:83:fa:ba:67:17:58:e3:0d:8c:53:24:
7d:47:dc:f2:db:d7:68:8a:fe:79:9f:79:f7:e5:ad:14:a0:95:
07:db:6e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:17 2026 by rpki-client