Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: 8nmPGuOK5U+jA5CJs/hNrb3/kog342B2sNOlSwiPNy8=
Subject key identifier: A9:DD:03:BC:44:AE:3D:32:F1:1B:0D:A8:79:7C:3E:F5:89:BC:6D:6E
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 019D27725936C03D8C6921B0E6B31E06F0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:38 +0000
Manifest this update: Thu 26 Mar 2026 00:01:38 +0000
Manifest next update: Fri 27 Mar 2026 00:01:38 +0000
Files and hashes: 1: Ra_O1tJPqxceyq_rAhiwFMOrKjw.roa (hash: Rmyhdy6TeiiXlYpWyq2MVfXDcJgMeLMhA0axqCrhBSg=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: l+FalcRsT9JY0fSPICH7e7QJ+L73Lb30FIHhZiPw1WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:59:36:c0:3d:8c:69:21:b0:e6:b3:1e:06:f0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Mar 26 00:01:38 2026 GMT
Not After : Mar 27 00:01:38 2026 GMT
Subject: CN=a9dd03bc44ae3d32f11b0da8797c3ef589bc6d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:21:1b:b3:5f:e1:e5:4d:38:70:51:08:22:c6:
b3:94:c7:5a:b9:02:47:79:f6:f5:8a:82:02:6b:16:
cf:c3:29:29:56:d7:d6:2c:3b:96:c4:16:47:4c:39:
22:54:24:71:35:48:48:f7:30:94:2f:2a:f2:d9:8d:
2e:a3:46:00:a5:71:76:4b:c2:0b:29:d9:e4:0d:2a:
be:4e:78:a8:aa:eb:cf:fb:60:44:28:c3:ed:9f:b5:
cf:aa:3b:8c:8d:4f:ab:5a:63:91:70:18:89:3c:76:
8b:92:bb:e1:bc:71:24:73:f9:02:58:a8:b7:95:03:
19:a4:3f:8d:c0:9f:70:78:33:0c:7c:34:1b:c7:99:
fe:6d:6f:ea:ef:2a:81:2b:8d:25:c9:b9:90:c7:cf:
f1:27:91:4d:fe:44:26:31:00:39:d2:09:c4:17:a4:
fd:06:52:b8:5e:1f:49:97:dd:57:fe:bf:56:86:6b:
06:b4:f6:e9:67:e2:7d:52:9f:f7:59:c7:c5:54:c7:
5d:e5:e8:a0:d4:e0:e1:18:72:07:9c:45:ce:1d:f8:
7d:0e:60:c0:30:46:af:32:74:62:1e:5f:b8:c3:93:
35:f1:d7:d1:10:e0:70:bb:d4:c0:c1:44:f3:fb:5b:
fc:a9:48:20:01:b8:22:6e:fd:2d:3b:f7:e6:c3:e9:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DD:03:BC:44:AE:3D:32:F1:1B:0D:A8:79:7C:3E:F5:89:BC:6D:6E
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e5:36:f5:5b:f1:ec:6d:59:f1:97:a5:cc:6c:75:34:b0:66:
4a:10:50:7e:90:ef:2a:6b:74:dc:84:76:01:f9:30:ba:fa:3b:
ec:8d:b9:bf:d4:e9:7c:0c:79:91:3e:05:66:dc:28:ff:0a:5b:
dc:5f:88:77:a4:cd:36:c8:7c:b9:b5:08:3f:24:b2:17:ec:35:
e4:14:07:89:6c:b9:04:5a:c2:e8:4a:6f:17:58:9f:22:c0:58:
cb:88:c8:3c:70:d6:d0:58:bd:69:ed:01:bd:c8:f5:4c:6b:a0:
d2:1e:56:2a:de:d9:9a:b6:f5:07:da:76:9d:07:23:ed:b0:0c:
41:9f:e4:cb:57:38:42:50:e2:21:e8:c8:f3:9d:2e:aa:d0:06:
88:8c:4d:7d:da:29:f9:a5:6a:ee:66:f6:21:95:85:21:82:bc:
8e:f4:cd:7a:b0:6b:d1:78:f8:02:2f:e3:d3:ce:dd:55:83:b8:
98:c8:54:74:1d:9b:7c:6f:88:3c:9a:25:98:4d:7a:27:36:cf:
88:ad:cb:2a:89:52:3c:25:8a:4d:f8:45:34:9e:67:cb:b1:55:
00:0f:2c:22:3c:94:78:2e:95:00:f4:97:f2:1e:55:27:e0:67:
86:e1:85:2a:3a:02:79:74:41:73:00:1c:36:52:2a:1f:85:67:
a9:c3:ad:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:05 2026 by rpki-client