Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier: Opci7CLLFsAPmJ2U9Gdp8W/fLdKkAv/qs0f6SmYlfE4=
Subject key identifier: D3:2C:DC:F9:C0:63:DF:5C:10:6C:C2:5B:F0:E2:38:C5:67:B1:CD:75
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 019D26CCEFB7F4ABAA6E91ECC8CD7857A6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:00:57 +0000
Manifest this update: Wed 25 Mar 2026 21:00:57 +0000
Manifest next update: Thu 26 Mar 2026 21:00:57 +0000
Files and hashes: 1: P_jLMjRudiodEgP9kGrX8xlbrMY.roa (hash: pHZFqcdySsOo+3kqKRPv2p7vAXOUuXEA4zp+BKSFMns=)
2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: 6ITgU1T88eusuYVNnqdaZz8qBcPJbIUoVBFldxTZ+RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ef:b7:f4:ab:aa:6e:91:ec:c8:cd:78:57:a6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: Mar 25 21:00:57 2026 GMT
Not After : Mar 26 21:00:57 2026 GMT
Subject: CN=d32cdcf9c063df5c106cc25bf0e238c567b1cd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:ef:a7:31:31:ab:db:ea:3d:90:14:68:c9:
e0:1b:01:f3:eb:e3:07:12:31:71:69:66:9d:15:1c:
c8:77:d1:c8:d4:c8:0f:cc:dc:74:3c:58:95:23:14:
c8:36:a5:9d:34:61:19:c1:f8:14:e6:a9:c0:2a:f0:
28:f6:fc:63:98:97:d3:be:41:d7:98:8c:12:e4:65:
a3:c6:ed:bb:d0:61:d2:28:96:4d:14:b0:65:c7:09:
73:95:38:36:97:7a:83:e2:5e:cb:46:8e:ed:9a:85:
48:7c:ce:52:2d:89:72:8c:49:1e:55:e4:0a:fe:58:
60:24:7a:c9:b6:05:22:fa:4e:ad:49:a3:f1:ca:43:
3d:43:33:a9:92:7e:04:3e:07:0d:ee:da:9a:6f:67:
cf:90:54:1e:41:e2:e8:a1:11:fa:af:e1:69:0c:b5:
8f:8c:76:67:58:45:2a:c8:8b:5b:28:18:ff:0c:65:
af:6f:87:c4:2a:cf:b6:25:86:4f:bc:c2:af:c0:4e:
52:94:0d:d5:7a:d9:7d:ed:48:b1:55:00:28:46:5e:
f6:42:dc:52:7e:73:c7:6a:b8:ec:47:34:c2:de:4a:
c6:01:90:03:1d:55:f9:ba:9c:58:1a:57:9f:07:77:
84:9b:33:27:78:b1:bc:49:dd:72:ce:a7:ef:e7:6c:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2C:DC:F9:C0:63:DF:5C:10:6C:C2:5B:F0:E2:38:C5:67:B1:CD:75
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:5a:0f:86:5d:34:7d:b1:4e:5b:f0:7b:0e:92:8f:f0:13:aa:
bd:01:c6:98:98:55:7b:47:24:c3:09:b5:d6:c0:35:c6:7c:a9:
98:6e:f6:17:86:e6:2e:60:4d:c1:00:25:b7:34:b9:6e:5f:2d:
b2:09:18:3e:f0:d9:a6:69:2a:0a:22:5e:f0:13:0c:2e:92:3f:
f3:fd:86:f2:9e:8b:39:70:26:95:a6:db:a3:dc:f7:d0:0f:e8:
a8:b3:86:0b:d5:04:6a:96:d8:8e:c4:be:6c:1a:48:e9:54:6c:
a7:42:a7:b7:68:51:9d:90:79:51:47:2b:66:1c:cf:20:6d:ed:
ae:2c:f9:e0:da:68:dd:b5:2a:57:ef:0a:ba:19:71:ae:a3:35:
09:bf:8b:a7:89:3f:3f:b0:a0:fb:16:fa:70:c5:68:ad:da:27:
b7:6a:da:5a:e2:b4:17:fe:3d:d0:24:e1:25:d5:33:50:d5:0f:
ea:20:e0:a0:7b:eb:51:ab:f2:cb:a5:28:aa:fc:f6:32:5a:7a:
61:98:4b:f0:57:f7:de:52:d5:05:ac:2d:1c:96:2d:17:b7:b0:
cf:89:cf:46:63:1d:07:30:af:2f:d5:ad:3b:b7:20:fe:4c:35:
d4:d1:ec:6a:9d:cc:4e:d8:94:34:d2:72:44:73:d9:9a:f4:9b:
f6:8e:e9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:33 2026 by rpki-client