Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
File: No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json)
Hash identifier: jcqt3L0+rGi/mWfSY0Suoy1ctltzcwabXRP8Sudrc7k=
Subject key identifier: 45:02:5E:C0:5B:15:0A:A7:62:F1:7D:90:9E:4F:C6:87:06:44:F7:8C
Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Certificate serial: 019D2B8513F917B4494D3A708F055487A758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 19:00:34 +0000
Manifest this update: Thu 26 Mar 2026 19:00:34 +0000
Manifest next update: Fri 27 Mar 2026 19:00:34 +0000
Files and hashes: 1: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: 1+4Wzis5SisbhnrnJAN2eakGwkgIBHYJf/KfyoUbRmo=)
2: oDdOV619IIidVtQMM95kbm0cDIM.roa (hash: 2Y37aAuGl7F6czPU7t6gdZkIffZAHGFmwGBIrR4PFQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:13:f9:17:b4:49:4d:3a:70:8f:05:54:87:a7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Validity
Not Before: Mar 26 19:00:34 2026 GMT
Not After : Mar 27 19:00:34 2026 GMT
Subject: CN=45025ec05b150aa762f17d909e4fc6870644f78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:7e:f6:d5:b9:b4:0b:83:a9:10:0e:55:a5:
ef:7f:d4:be:d8:eb:06:1a:b9:fc:49:3f:34:f0:09:
7f:d6:cb:63:48:6f:cb:06:9c:42:c5:7f:bb:0d:4f:
50:82:44:fd:57:46:20:c6:7b:c7:dd:10:43:de:22:
4d:66:1c:86:a6:2f:76:70:86:94:7f:04:28:c8:70:
91:79:5e:1c:64:32:e1:a3:77:f0:dd:2c:e9:de:f3:
df:2c:c4:50:aa:53:67:3e:bc:e3:c0:1c:f2:80:bf:
25:5f:ad:1b:94:24:cd:33:74:4d:e3:61:7a:dc:5c:
8f:a1:e1:81:65:ec:02:fb:ad:4e:80:63:99:fe:4a:
71:24:90:6e:6d:af:f0:a3:63:fe:3c:9e:3c:33:26:
ed:0c:e1:aa:f0:a0:bf:a2:e2:e3:5e:08:02:32:e6:
c9:d5:c1:fe:3c:74:ee:c5:bb:9b:a6:65:c3:bc:97:
0f:78:a3:85:ad:b8:a4:8d:4f:06:e5:49:09:2b:44:
5c:ba:70:ef:10:e8:5a:c2:c1:7b:c2:39:2a:b0:66:
8b:90:7a:35:64:16:ce:52:02:cd:f1:ca:e8:89:dc:
2b:f3:6a:9d:14:26:b5:ad:fc:90:ef:3e:68:53:a9:
f4:92:da:49:3f:01:98:c1:55:66:1b:c2:ce:f4:6e:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:02:5E:C0:5B:15:0A:A7:62:F1:7D:90:9E:4F:C6:87:06:44:F7:8C
X509v3 Authority Key Identifier:
keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a4:d9:5b:0e:07:0e:77:95:b2:08:21:4f:69:7f:fa:45:9c:
ad:65:0c:3c:00:53:9d:b5:c3:a0:27:45:78:cd:2e:33:db:97:
48:cb:60:49:9f:23:f9:5e:ee:be:ad:e2:8d:03:7f:1d:3d:d3:
4a:86:55:f5:37:52:06:2d:46:89:9a:39:f9:52:51:cb:d4:86:
b3:97:36:00:33:bb:f3:f3:97:b6:2f:b7:8b:44:e4:19:41:43:
54:22:cf:76:be:5b:59:96:fc:6a:8c:64:21:71:bd:05:3d:c4:
3d:bf:d0:00:86:c2:4f:7f:bd:18:9b:12:57:d3:b3:87:21:17:
e3:a0:98:69:33:c7:54:1a:25:80:51:05:ea:80:bc:72:82:50:
92:24:33:49:cd:cd:15:24:74:3e:3e:f5:93:8f:1b:25:8d:29:
68:59:19:dc:b8:1a:05:5b:97:12:48:72:fe:f7:da:8d:46:7c:
53:41:90:e4:9e:2b:d7:0d:39:2f:0c:47:08:bb:74:ab:36:ca:
bf:f8:56:aa:85:e0:dd:36:36:5b:0b:92:92:93:cb:78:7f:f6:
dc:cb:33:a1:a0:dc:61:95:ec:8f:33:d1:ff:6a:68:d9:d6:ee:
54:ca:70:b7:f7:2f:d0:69:aa:37:46:32:af:cb:34:cd:b0:4f:
54:2c:3e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:31 2026 by rpki-client