Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: ACS5HxKn2kECiaaBmIOg/ZB84FOl/Zu7hex6LI716SE=
Subject key identifier: B2:89:C3:A1:45:06:36:C7:11:18:10:6A:EF:4A:D4:2C:F7:C6:D0:BA
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 019D25F143DD17688710074998F4F8FA8B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:01:01 +0000
Manifest this update: Wed 25 Mar 2026 17:01:01 +0000
Manifest next update: Thu 26 Mar 2026 17:01:01 +0000
Files and hashes: 1: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: rr/qEdZuCXGBt4R/LCa8dtaE6XwG2nILixgTEgIvvCM=)
2: k9c2O8_Xy_eChgcz-yhyQZaZprY.roa (hash: +knLZsYjdnVF7uKOf0qT11DuyDMhYqWK5WJnzaJ/tgc=)
3: r4XvX6Ei1LluIE8pavjpEdLLxJ4.roa (hash: KL22Fozq8IVy1aV+io1l46k9R+MjRQle/pBvY+h3kcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:43:dd:17:68:87:10:07:49:98:f4:f8:fa:8b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Mar 25 17:01:01 2026 GMT
Not After : Mar 26 17:01:01 2026 GMT
Subject: CN=b289c3a1450636c71118106aef4ad42cf7c6d0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:ae:f2:3f:ff:16:d0:3b:5c:8c:fe:99:75:
a7:f2:4c:96:a9:6c:f9:0f:7d:ce:71:ef:69:81:b6:
23:7f:ce:65:03:b7:1d:5f:6c:b6:35:84:66:6d:25:
54:ff:f5:e0:a0:49:59:a4:4b:54:3d:6e:4f:10:02:
0c:0b:83:dc:57:ad:fc:ec:1e:98:e2:1c:51:00:ac:
65:14:51:24:8c:22:ac:24:36:aa:0f:54:8e:57:11:
19:e7:49:cc:1a:7a:72:9f:a0:97:ab:a2:a6:a4:ce:
05:06:46:9d:82:b5:9e:4f:18:57:1c:cc:81:81:78:
a6:3e:5f:e4:93:5c:9b:76:80:7b:46:93:da:73:4b:
e7:c8:63:99:a0:18:f9:dd:43:40:c0:38:eb:70:50:
f2:05:9a:2f:7d:48:33:b6:32:54:19:d8:1e:24:82:
27:e0:c5:9d:07:e7:4e:30:47:2a:7b:ce:c0:42:2e:
33:fe:29:db:4d:f3:60:d7:be:a8:50:14:a5:e9:89:
d1:c9:1a:69:2a:c9:d1:46:03:c5:5f:04:b1:ee:4b:
d4:41:fd:10:76:a5:7e:81:cb:9d:84:09:fe:15:68:
82:a5:fc:d2:32:9e:c3:8e:5b:7b:19:9e:a8:36:d6:
05:f3:0d:41:d4:4a:4a:d2:1c:b1:e6:5b:60:e2:1a:
1a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:C3:A1:45:06:36:C7:11:18:10:6A:EF:4A:D4:2C:F7:C6:D0:BA
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d9:54:cd:5a:03:0c:7d:87:1f:f5:c8:17:31:69:2c:51:8d:
f6:19:19:ea:bf:ba:31:cf:57:a3:26:21:38:36:d4:c7:69:b8:
3d:a0:06:46:bf:94:89:8e:03:54:b2:45:13:c3:0b:0e:ca:b7:
da:a1:49:b8:00:c7:72:99:98:88:67:68:ba:00:47:14:fc:e5:
ee:28:12:36:f3:a5:5f:d9:1b:66:7e:5c:17:d9:0f:64:4c:92:
78:81:e7:26:e3:5e:8b:0f:39:73:b6:4d:ff:6d:29:32:f1:b0:
9f:9a:92:a1:a4:01:63:1d:33:2f:ab:f9:57:5c:b9:02:d4:eb:
65:78:38:55:3b:04:37:22:6f:90:03:15:24:96:fb:1c:80:f8:
b9:1c:61:05:d4:31:3c:85:79:2e:86:a8:48:85:1f:b8:fe:15:
7d:68:5a:4a:ce:9c:47:c7:89:c9:ed:d3:8b:27:4f:3c:6b:9a:
57:9c:ec:a8:33:75:b6:be:3b:41:cd:14:c3:23:68:53:ae:43:
16:c1:2a:7c:fd:f7:4e:9d:da:1a:99:72:0d:2e:c8:50:ed:83:
20:fd:f0:f7:53:ce:7e:1c:c0:27:65:0e:1b:a1:91:94:24:bf:
8a:a7:97:42:d2:92:a1:ac:aa:c6:41:a5:c4:c2:e9:26:98:fa:
4b:ec:41:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:43 2026 by rpki-client