Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
File: _ieWxamFRTLp7WONHDmlQcLYlSw.mft (raw, json)
Hash identifier: ZHzMvYPaMep2JHfmcH8a8S3noYyKO2YY1SqV7xFTWj8=
Subject key identifier: AC:FD:99:37:88:68:57:28:6B:30:96:83:F3:D3:B3:B6:62:E1:1D:C8
Authority key identifier: FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
Certificate issuer: /CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Certificate serial: 019D27DF7BBFA05FF6C62E9CCF86154B2CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 02:00:50 +0000
Manifest this update: Thu 26 Mar 2026 02:00:50 +0000
Manifest next update: Fri 27 Mar 2026 02:00:50 +0000
Files and hashes: 1: 7GkwyhqrlyHfzlV-65vdln4ct9E.roa (hash: s/NkhsHZT4RkFY/uOZ3iGPCQESayKRGk801KSb+Zysk=)
2: _ieWxamFRTLp7WONHDmlQcLYlSw.crl (hash: vCX5mhhBHD3fF3Q6bJ+lJnBPHAbHhVZdFzaVyNTaOAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:7b:bf:a0:5f:f6:c6:2e:9c:cf:86:15:4b:2c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Validity
Not Before: Mar 26 02:00:50 2026 GMT
Not After : Mar 27 02:00:50 2026 GMT
Subject: CN=acfd9937886857286b309683f3d3b3b662e11dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:17:62:05:26:9f:20:b1:93:c2:b8:e2:0c:29:
e5:b9:66:9a:65:72:74:e2:be:9b:2e:d8:23:d6:cf:
0e:53:67:ce:2f:49:2c:9a:22:9c:8e:44:9f:92:6d:
3f:53:fc:36:39:43:c2:b7:f1:98:cf:5b:02:b1:4a:
a5:51:51:0e:eb:c5:84:5a:4b:95:96:24:c1:04:93:
20:85:30:5e:f4:c9:9d:00:75:51:20:3b:10:f5:72:
3d:50:91:55:6a:b7:b6:b9:96:3b:8a:04:0a:ca:a8:
b8:76:b1:9d:28:55:90:ac:22:a9:bb:f5:f2:e6:e6:
f0:96:17:52:b1:30:cc:cb:27:b1:04:e8:f5:0a:5d:
1c:4c:a5:9c:a9:d4:31:d0:98:5d:c5:51:f2:f0:06:
1b:0a:e1:a0:59:4b:f0:d6:66:03:fa:73:50:ae:25:
77:9a:53:0e:7f:09:5d:1a:83:9a:fe:3f:10:69:2f:
28:2e:50:10:e2:e8:db:ef:60:d8:d2:0c:75:d6:41:
30:d0:e0:1b:63:13:d7:71:a5:5e:e8:46:26:9d:47:
09:07:d6:ef:5d:6d:58:ae:ff:da:99:d1:db:5f:ed:
b9:28:0e:7b:56:a1:76:ff:b8:15:9f:d4:a2:d2:88:
3f:6e:02:58:ff:5d:06:b0:84:19:e1:7f:47:1d:06:
cb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FD:99:37:88:68:57:28:6B:30:96:83:F3:D3:B3:B6:62:E1:1D:C8
X509v3 Authority Key Identifier:
keyid:FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:00:04:c0:ae:45:29:4f:ec:f4:82:c1:79:9d:e7:41:2c:5f:
2c:4f:36:4f:65:5b:c9:70:55:31:53:59:28:98:93:ef:f5:f9:
e8:ae:50:21:28:b8:e4:93:39:fc:f4:4d:8e:73:f6:8e:fb:5a:
fe:a8:1e:13:8a:fb:20:4a:2b:eb:93:ab:60:d2:cf:89:05:e4:
52:f3:ac:4e:28:71:81:ee:48:26:6e:ce:66:27:21:20:ce:47:
bf:6a:36:36:fc:15:d4:d1:a4:d8:c6:c1:9e:94:b1:9c:7a:e5:
a7:60:ea:b4:51:8f:25:09:1b:c1:9d:29:16:86:e6:7b:ef:fd:
1c:eb:5b:12:e3:3d:2f:d2:de:ba:d0:64:de:e3:7b:cb:47:cd:
35:48:a1:44:05:96:e4:54:f2:87:18:09:95:5f:b9:de:ee:28:
b4:0c:a4:b3:50:44:aa:6d:08:d5:67:35:d5:5f:ee:7a:ea:a7:
57:8e:39:b1:cd:c0:c8:59:7d:4d:4c:9e:98:3c:9e:23:ed:0c:
42:1b:ff:6a:fa:a1:5a:a8:c0:5d:f3:86:43:8c:4f:bd:5f:e7:
eb:49:c5:18:90:3b:7d:14:05:00:45:83:f7:db:32:a3:ef:fb:
7f:bf:f3:2b:44:56:d9:fa:fa:8c:09:3a:46:fc:5e:8c:c5:f0:
17:87:9d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:12 2026 by rpki-client