Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
File: d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft (raw, json)
Hash identifier: 6MgzfBopIh0gmtVntZtSftPxDe59z18qmVO9ZcFEtc8=
Subject key identifier: D2:0D:FE:56:4A:ED:99:EB:89:AA:6C:78:80:68:A2:80:80:2A:37:65
Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
Certificate issuer: /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Certificate serial: 019D2772CF8215274CDA0528FBED3E4984A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:02:08 +0000
Manifest this update: Thu 26 Mar 2026 00:02:08 +0000
Manifest next update: Fri 27 Mar 2026 00:02:08 +0000
Files and hashes: 1: GdUUpV1tSpa6dExv6OdPOPN3bMo.roa (hash: JEBXOLiUs8+kGojQx9pRr2R8TcsHWxkp8T4KQDmx6n8=)
2: d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl (hash: VniWkGX2LkZga3lCZKOKIfmvak6mJgBUoZuxGEzDs2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:cf:82:15:27:4c:da:05:28:fb:ed:3e:49:84:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Validity
Not Before: Mar 26 00:02:08 2026 GMT
Not After : Mar 27 00:02:08 2026 GMT
Subject: CN=d20dfe564aed99eb89aa6c788068a280802a3765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:95:36:e0:bc:5f:fc:bd:5e:94:6f:60:45:
b8:5a:7d:9d:63:4f:79:75:dd:cc:4f:2b:04:39:ef:
e6:23:ed:cd:fd:3b:fe:f3:b6:db:cd:88:e2:f5:45:
3b:c8:c2:40:c9:8e:c0:14:91:28:fd:f2:34:a8:ac:
7c:28:63:d1:4b:bc:63:47:63:92:9d:f1:cc:b9:8f:
66:4b:b4:18:e2:ba:ae:b3:01:63:75:3c:0a:90:3b:
17:7a:cc:e1:07:d0:e3:19:ef:0f:10:38:86:fe:36:
25:26:7a:70:e3:b0:13:1b:be:9a:97:22:4a:6e:3c:
eb:65:7f:ea:2b:9b:4a:e7:9f:00:b6:d8:57:62:78:
d3:eb:aa:7b:68:d0:d5:b8:e2:45:4e:ea:a0:99:57:
0f:b4:7b:b8:3a:dc:0e:00:3e:2f:a7:28:35:92:b4:
50:cb:bb:fd:e4:5c:45:17:a6:e6:91:97:68:a8:7d:
24:6f:a9:6e:70:b6:fa:21:34:a2:eb:50:55:f1:8d:
a8:00:f2:3d:8d:7c:42:ae:c5:fb:0e:b8:62:3e:69:
3b:e0:60:69:94:20:ac:bc:cd:88:4e:a4:f3:ba:db:
56:97:e0:86:89:80:e6:f1:39:31:bb:7c:26:f8:ce:
1e:c0:f0:f9:1d:cf:0e:8c:26:c6:2e:e7:cf:c2:da:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0D:FE:56:4A:ED:99:EB:89:AA:6C:78:80:68:A2:80:80:2A:37:65
X509v3 Authority Key Identifier:
keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:ed:01:5d:80:6e:2d:2f:fa:96:d6:2b:8d:57:89:f9:04:39:
08:b9:c1:d8:1b:e4:14:8f:02:8d:4d:b4:49:f2:6f:35:91:ac:
10:36:c3:55:a9:c5:99:6a:07:60:63:5b:ff:61:7a:61:d2:1a:
05:f7:17:36:0c:14:17:fd:76:4f:e6:29:7b:26:c1:a7:fd:98:
5e:65:6f:42:b9:8a:a4:7a:50:72:75:5e:19:9b:7e:47:fb:9a:
b7:45:2e:41:af:06:a2:5d:13:7b:15:80:eb:ac:35:97:67:f6:
ab:d6:1f:d9:3d:d2:9e:ce:e7:93:eb:51:c7:0a:b9:8d:1a:7d:
03:7b:ad:68:7d:43:ff:dc:2d:cf:bb:58:78:0a:e6:6e:b7:4d:
07:3d:0d:69:c8:cd:11:29:c9:6a:77:1b:31:f9:be:02:e6:1f:
65:62:ee:42:36:75:ea:b4:c3:ca:5c:9a:60:d3:e3:cc:b0:f9:
76:cd:ee:a6:a3:b4:9c:60:cb:38:81:c3:52:33:cd:d4:92:1e:
bc:cc:46:c9:05:05:d8:70:9a:24:79:fa:bb:2c:92:27:48:c4:
56:95:39:26:41:7c:46:3f:55:5c:aa:e5:ed:0b:72:72:e2:4b:
1b:3d:64:88:35:51:ab:98:6e:31:19:ed:d7:01:96:6d:c2:48:
f5:7d:d6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:43 2026 by rpki-client