Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File: 41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier: YKMa5n4Gbu6ShjJhw9xIK0m+uqRMhje5n66/gTDwFLo=
Subject key identifier: 9F:AD:BA:F2:1C:B1:58:BA:F9:2D:B4:10:FB:F7:8B:BA:3F:31:76:8B
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial: 019D2771BCB587C44CC6AD303009E6A6863E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:00:58 +0000
Manifest this update: Thu 26 Mar 2026 00:00:58 +0000
Manifest next update: Fri 27 Mar 2026 00:00:58 +0000
Files and hashes: 1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: 5RqxgF5szLfrlyjwbAu8ALVW78gdKfUMi53psRDoidA=)
2: 6L2DF24h5kP__h0ZXcHhhgUtOHE.roa (hash: k3rPz38ZgJPfjpSFDtarFqrK6I1kr4U/pIOZrMPrf6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:bc:b5:87:c4:4c:c6:ad:30:30:09:e6:a6:86:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Validity
Not Before: Mar 26 00:00:58 2026 GMT
Not After : Mar 27 00:00:58 2026 GMT
Subject: CN=9fadbaf21cb158baf92db410fbf78bba3f31768b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:68:36:ca:45:7b:b3:08:64:56:5d:74:40:b2:
33:ad:60:f4:3f:57:af:df:13:1f:7b:4d:05:9a:7c:
17:99:ac:dc:8d:2e:e2:c0:e6:2c:71:fc:af:80:f0:
22:6f:ec:2f:5c:39:05:30:97:48:df:85:39:ba:cc:
37:4c:59:c8:8e:56:e2:c6:de:39:05:76:5f:57:9b:
cd:5f:00:b3:b8:40:72:80:4c:f3:4c:dd:5f:03:49:
73:a0:80:34:7c:08:14:d9:53:bf:41:d0:89:2e:e3:
16:56:e0:93:2e:e9:0a:8a:5e:1e:ad:c2:fb:db:a8:
48:9e:a6:c6:fe:9e:69:b4:76:19:96:ef:4a:47:43:
74:a7:2d:da:0c:77:33:b6:1c:17:47:7e:70:cc:88:
a7:9c:13:40:cb:a1:2b:2c:3c:5c:6a:4f:85:59:39:
7f:02:5c:36:c8:a0:01:b0:bf:94:13:25:31:02:21:
25:27:63:7a:fd:50:dd:32:ef:d5:61:ef:fe:f5:88:
c8:d8:3c:09:f6:c1:70:1b:ab:89:f6:87:ae:d9:7e:
d2:9f:60:50:4d:8a:a9:42:c8:c4:6a:e8:65:91:8c:
4c:33:67:38:ba:14:88:e7:22:78:d7:e2:32:fe:14:
e5:88:61:7e:bb:f0:ec:74:0a:1f:f5:11:01:66:aa:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AD:BA:F2:1C:B1:58:BA:F9:2D:B4:10:FB:F7:8B:BA:3F:31:76:8B
X509v3 Authority Key Identifier:
keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:64:69:3c:84:e0:9e:57:5f:40:fc:3a:ac:01:45:51:e0:eb:
43:93:6e:0d:f8:68:48:bd:8e:73:e8:93:a5:9c:87:9a:2b:db:
23:b4:82:d3:9d:5b:33:93:f0:34:9b:a0:87:d8:64:0f:d8:6d:
45:3e:a1:72:6b:c1:16:10:be:17:31:7c:83:c3:1a:cc:cd:4d:
ca:2f:9b:8f:fe:1a:15:e6:92:37:a6:85:69:c8:ff:4a:37:49:
75:5a:2b:20:8b:50:96:71:9e:3e:c3:7d:01:bb:bd:e4:42:86:
01:8a:ee:fd:48:d0:b8:53:4f:98:c3:ac:1a:6a:99:6d:0c:12:
71:bb:10:ed:1a:4c:a5:b9:93:a7:3a:12:f3:da:a9:87:21:4e:
82:b8:63:e7:51:31:eb:16:b1:14:3c:52:5c:11:99:e0:a6:d6:
e1:48:39:21:37:33:80:6a:dc:a4:64:e1:6e:db:66:56:77:d5:
5b:36:a4:ab:ff:39:24:e0:1e:7f:97:3d:89:33:e9:15:d5:35:
7a:9f:78:3e:ab:91:7d:1b:78:19:d4:f4:68:3b:e9:e7:79:c8:
27:f9:08:4c:c0:60:bf:a4:dc:7c:23:19:77:c3:f4:f9:c6:41:
65:e0:45:2d:e6:60:d4:af:08:40:df:3e:17:16:2c:f3:75:73:
ac:96:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:03:42 2026 by rpki-client