Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: w0yocfMJjHbPt9ETCyuCG6ZDTnpzp3yQfDgp/2CwOJQ=
Subject key identifier: B2:D9:4B:69:DD:06:62:5F:62:E8:AC:28:84:7A:19:C0:15:FA:33:FF
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 019D27E046CB764B90FFB275499B5C305CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:01:42 +0000
Manifest this update: Thu 26 Mar 2026 02:01:42 +0000
Manifest next update: Fri 27 Mar 2026 02:01:42 +0000
Files and hashes: 1: Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa (hash: QbDgZoN3ZU6/bS/m4FLoXm7lSijDZPcbyRN3YX/mppU=)
2: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: 7/lYPyZUlc8tTagnA4ySF0PV8Q/SeD3kurr46tVkiJE=)
3: hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa (hash: ZhalI/LOgKiAuv67zXxSUEKRpEQkU7//oKdzXd9ydyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:46:cb:76:4b:90:ff:b2:75:49:9b:5c:30:5c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Mar 26 02:01:42 2026 GMT
Not After : Mar 27 02:01:42 2026 GMT
Subject: CN=b2d94b69dd06625f62e8ac28847a19c015fa33ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3f:44:ce:d3:32:eb:81:73:ab:31:8e:83:9f:
79:5d:47:cd:29:a9:1e:f0:95:14:38:5f:ef:ef:07:
f6:f1:1d:60:55:ae:4e:bf:1c:72:1e:f4:9f:f5:b5:
ad:42:76:d1:35:95:15:af:00:1a:ed:e5:16:b8:5d:
2f:ab:76:65:f5:c1:7c:1a:b9:30:f4:49:d1:ef:f5:
15:f3:0f:8b:f8:73:57:ce:f2:e4:3a:04:3e:bf:6b:
91:b2:9b:c8:3a:ca:eb:41:89:70:87:df:21:f1:b2:
d7:89:0e:91:89:fc:b0:b0:71:b8:74:bd:49:2a:0c:
73:d3:dc:d8:63:66:aa:09:29:91:e9:b1:95:10:8a:
f6:a9:d4:8f:3b:05:5c:50:d9:1e:1f:a1:70:1d:87:
6b:b9:9f:3b:f0:10:ff:cb:c3:5b:67:dc:e6:a9:33:
92:44:a1:ec:30:bb:7c:ac:e4:50:e6:83:80:9f:67:
b9:14:f7:52:f0:ec:f4:c9:a6:fc:da:fd:7a:b0:8e:
22:72:8a:e4:98:23:43:5d:a6:27:7b:43:28:2f:89:
c7:63:bb:19:aa:75:f2:db:9d:eb:6c:80:c0:a3:cb:
0c:e6:df:05:ae:7b:40:6f:e7:4b:09:f7:ea:b5:5a:
35:88:c3:f8:77:2c:e9:c5:68:e6:3b:7c:e3:4a:07:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D9:4B:69:DD:06:62:5F:62:E8:AC:28:84:7A:19:C0:15:FA:33:FF
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:21:53:9c:c7:3a:4e:92:dd:87:37:6c:11:e3:26:f8:9e:ea:
27:93:be:5f:a2:4d:13:2d:3d:4d:c8:ec:68:22:b5:82:f6:17:
06:d4:01:5b:36:3b:09:bc:4d:ca:aa:aa:12:25:7e:e6:23:0f:
78:08:98:fd:04:87:67:2c:d6:f2:7f:f1:c2:54:90:19:6e:1c:
c4:0c:8f:e8:4c:34:f8:13:cc:13:49:f7:74:fb:31:04:29:60:
4c:f2:05:4a:ea:b5:aa:2e:4f:6f:16:45:40:88:d9:94:a2:59:
1d:aa:8d:a1:09:0c:7e:83:df:93:19:f4:33:80:88:85:5d:1d:
e1:45:0a:4d:d8:dc:17:12:53:2d:2d:66:1e:ed:ad:3c:fc:d1:
8b:5d:85:99:64:fb:e4:51:9e:51:2f:f6:c7:60:91:dd:3a:a5:
27:13:a9:ad:c5:c7:59:94:1a:c0:d9:eb:df:04:ce:5f:86:9c:
0d:64:ec:0a:88:03:da:1d:e8:65:85:d2:19:22:c0:85:c0:56:
ee:83:40:ab:45:f1:e2:a8:c0:0c:a8:fe:97:64:5b:37:09:15:
30:65:32:9a:44:4b:bc:c2:de:cf:31:b4:85:57:f4:82:80:50:
88:1d:2c:00:7a:a2:1f:88:96:86:dc:f4:f6:cc:43:3e:c8:35:
70:20:0f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:03 2026 by rpki-client