Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier: 21yxxAMd4TZ9hro86vMUY57Xs2kM5CXJpb95MmoQ15U=
Subject key identifier: 1D:EA:44:03:F7:A2:99:2A:4D:AF:9E:DC:C7:D6:27:DF:DC:6D:9A:BB
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial: 019D25F12953D17AEB799FF93D8B3AB86AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 17:00:54 +0000
Manifest this update: Wed 25 Mar 2026 17:00:54 +0000
Manifest next update: Thu 26 Mar 2026 17:00:54 +0000
Files and hashes: 1: _Pwzr4JbDzClR-Oc7yMcLt0gzyw.roa (hash: fAUaNNrGBFLsb8ziuClrT7k1PRw95F5PlNscHyG0c24=)
2: bFNRQE3pxcA4g-Rg8277J0Pfyvg.asa (hash: SZ5vK0kMUed0BXVDFve+JxQjn9uHdMp5dF2f6Za79JU=)
3: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: 9Dq1hDx5f6ANQU/OHctPTpDdlvEXu9rOYQM+esxH5HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:29:53:d1:7a:eb:79:9f:f9:3d:8b:3a:b8:6a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
Validity
Not Before: Mar 25 17:00:54 2026 GMT
Not After : Mar 26 17:00:54 2026 GMT
Subject: CN=1dea4403f7a2992a4daf9edcc7d627dfdc6d9abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:cb:1c:7c:42:fe:55:e2:3f:44:bb:fc:db:
04:f0:cf:a9:63:a1:04:22:3f:a0:3d:bb:ac:1c:d3:
5f:87:9f:cc:5b:ab:98:3d:34:a8:5f:eb:3b:0b:43:
2b:cf:9b:ff:f0:9e:ad:e7:77:31:9a:9a:a4:0e:89:
ee:6a:42:6b:5d:3c:ac:28:e1:ae:37:ee:bf:80:13:
b2:47:9b:9a:39:87:56:80:0e:28:94:dd:6c:72:c3:
41:52:a1:77:4b:a6:99:0a:aa:a5:d2:39:5a:c1:6c:
dc:c2:de:87:11:ec:77:ad:35:4d:c4:bf:bb:83:01:
99:2a:51:e8:58:14:2c:0d:2f:6d:70:c2:d8:57:ab:
83:e5:83:96:12:5e:f1:27:57:3c:05:e2:0e:78:44:
de:d3:3f:28:1a:a3:2d:dd:3e:88:52:c6:60:47:35:
13:57:5f:eb:ee:55:08:27:61:b5:a2:01:c3:8a:af:
0f:0c:2b:9b:2d:09:69:04:68:47:50:05:4f:8c:25:
e5:b0:99:5d:f8:09:88:41:4d:54:be:69:83:92:be:
c9:04:95:a4:98:7a:50:af:31:3f:5d:c1:c7:16:41:
c0:26:82:7c:37:5a:53:5f:11:e2:c5:db:c2:0b:fb:
58:f6:92:15:d8:3b:8f:39:57:5c:d0:d4:80:85:ff:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EA:44:03:F7:A2:99:2A:4D:AF:9E:DC:C7:D6:27:DF:DC:6D:9A:BB
X509v3 Authority Key Identifier:
keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bd:04:f8:1b:cd:7b:c0:30:48:2c:5b:eb:63:06:c2:ce:4e:
30:33:25:2c:13:da:f5:92:5b:27:85:7d:7d:7c:33:5d:ab:ea:
c7:db:92:fc:10:0e:2f:c8:97:2b:65:ee:fc:39:91:75:fa:44:
3f:4d:a1:51:aa:cf:5c:b2:54:e9:a5:40:da:09:32:1d:09:eb:
33:73:ea:dd:a0:7c:c4:48:0a:12:e1:80:e0:4b:42:9a:c9:3c:
a3:7b:3a:d6:c0:22:64:51:e6:78:9e:b9:30:85:e9:d4:bc:97:
26:4c:5b:32:34:69:5c:9e:f7:c6:19:c8:41:1b:6d:59:35:4e:
ae:61:6a:3b:73:cb:54:1a:1a:1c:50:c8:3f:91:6c:2c:ca:4a:
86:ea:95:68:22:11:9d:88:b7:f5:62:59:74:91:fb:ae:06:ec:
57:64:fe:08:3c:55:44:78:3b:8d:be:cb:eb:93:24:ee:d0:8c:
57:2c:1e:d1:6b:8b:43:d7:cd:0c:a9:a9:c7:90:7d:0f:00:5e:
24:c3:0d:1b:27:78:84:c1:6b:fc:a8:0c:0a:1d:90:57:dc:cb:
ab:c8:ce:2c:8f:f4:14:49:30:f6:a2:d5:f9:ca:63:b9:e2:d1:
d6:60:15:a4:6c:4e:48:0f:66:e8:2b:bc:d7:fc:90:73:c1:e5:
8c:25:8a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:51 2026 by rpki-client