Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
File: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft (raw, json)
Hash identifier: pDp3w9BHVTchjMR+EXlW6w3MwkTln08JbcZFZAmpHuM=
Subject key identifier: F7:42:1D:19:4E:93:04:3A:05:F5:B1:FC:0D:2D:E7:92:AF:72:AA:92
Authority key identifier: 46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A
Certificate issuer: /CN=467350d5975a272a88bfb8810af45981cd55935a
Certificate serial: 019D29CE089F586B5330FECF9479F0492BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
Manifest number: 1183
Signing time: Thu 26 Mar 2026 11:01:01 +0000
Manifest this update: Thu 26 Mar 2026 11:01:01 +0000
Manifest next update: Fri 27 Mar 2026 11:01:01 +0000
Files and hashes: 1: HoLUKNiHefs7C839qM4kpC7iogo.roa (hash: 4W1sL873O1FNcwjP+lR05LZ1odW83y0n+qfD07LPf8E=)
2: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl (hash: gAXMn6170j8d/JHT8s2aWQeMnF1CDIBZCYaJCfkuMpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:08:9f:58:6b:53:30:fe:cf:94:79:f0:49:2b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467350d5975a272a88bfb8810af45981cd55935a
Validity
Not Before: Mar 26 11:01:01 2026 GMT
Not After : Mar 27 11:01:01 2026 GMT
Subject: CN=f7421d194e93043a05f5b1fc0d2de792af72aa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:54:fe:1f:94:b5:72:9e:86:e1:d8:36:d4:
2e:3a:d7:9c:b3:c6:c7:f8:33:c0:f5:b1:46:80:2a:
49:8f:40:c0:85:a1:57:27:be:46:0a:85:9a:41:33:
41:e2:87:68:72:66:56:f0:97:20:0e:6b:48:f0:83:
6b:a6:db:63:6e:6d:d5:a6:f6:03:69:5e:8b:e8:2c:
48:6e:75:ae:31:6d:86:2b:17:73:05:47:87:62:f4:
07:38:55:e1:f2:75:aa:f3:ea:12:cd:b0:d8:4b:af:
07:de:3c:21:bd:60:8c:9e:95:a2:d0:2e:b9:21:41:
21:6b:0a:4c:88:51:c1:96:5c:f2:ef:9e:d4:de:2a:
6d:bd:2c:95:bc:42:c0:1d:77:cb:d3:cc:54:8f:69:
0c:c2:e6:38:78:f5:20:d6:21:c9:af:82:01:b1:32:
f7:b1:f3:34:51:8a:2a:c5:1f:dc:2c:1a:57:13:85:
54:80:28:b7:a4:46:f6:9c:27:d5:3a:8b:6e:77:f3:
12:06:e1:ba:d4:46:fa:23:3d:68:b9:92:5d:b3:66:
85:84:b0:38:4d:8f:25:76:3f:15:81:c7:29:96:89:
9c:73:74:dd:26:a1:fb:b9:33:a5:bb:51:d3:1c:ce:
06:99:f9:ce:32:f5:3f:16:45:c1:f0:30:19:c9:b5:
47:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:42:1D:19:4E:93:04:3A:05:F5:B1:FC:0D:2D:E7:92:AF:72:AA:92
X509v3 Authority Key Identifier:
keyid:46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c9:59:6c:9b:a3:f3:c5:9c:7a:58:e4:78:69:e6:38:65:b9:
2b:51:80:a8:de:f7:d0:b1:01:f0:31:f0:ee:65:30:e1:ff:74:
61:19:54:ce:9b:e9:f8:f8:42:c6:21:83:1a:23:9d:43:84:b9:
ea:81:87:32:33:bf:51:a3:48:af:0e:f8:e4:19:0b:9d:fb:a0:
6d:ab:15:63:9c:b3:67:de:f1:0f:f2:2b:a0:2b:e7:19:69:1e:
56:b1:e9:81:92:50:77:bd:3b:bd:de:1b:d9:60:5e:84:4c:5c:
4f:58:bf:70:e7:3a:20:d4:61:fd:55:13:22:2e:1e:68:5e:4e:
65:8f:72:5d:d6:38:53:17:52:77:a5:3a:a5:44:48:45:86:00:
20:0f:fc:7e:79:1c:a4:c1:70:62:ec:87:61:73:c2:3f:06:c6:
16:91:6e:2d:f1:1a:5b:ff:c1:c0:46:da:00:45:00:ff:88:67:
5e:a6:3f:c4:0b:a1:4e:c2:82:2b:16:6c:60:b0:5b:f3:99:d0:
ed:d8:d3:3f:d3:63:34:8d:30:7b:27:9c:94:66:7a:75:41:c7:
5d:dc:c3:aa:75:b7:dc:60:ed:e0:eb:d3:3c:1f:1e:94:1c:07:
a4:e5:62:5d:c3:30:2c:00:f8:76:40:40:06:24:aa:04:db:a9:
0c:cc:1f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:05:33 2026 by rpki-client