Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
File: _l28QbEed7xEvSxzVVS1tCWNDDM.mft (raw, json)
Hash identifier: avvsC+jL1O7wmevvzh/KbsqTQd1TbUP7FNxiRBZbFf4=
Subject key identifier: 86:C8:0E:03:F3:02:84:53:8C:3C:DF:E9:69:EA:BD:B1:41:D4:74:41
Authority key identifier: FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
Certificate issuer: /CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Certificate serial: 019D28F2DE98A5EEEEE6A6CF7E161912CBA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 07:01:38 +0000
Manifest this update: Thu 26 Mar 2026 07:01:38 +0000
Manifest next update: Fri 27 Mar 2026 07:01:38 +0000
Files and hashes: 1: _l28QbEed7xEvSxzVVS1tCWNDDM.crl (hash: ro+7ehvV5iWiiGYlSUaFG/PoK74S6vAj9ja9nXKFtv4=)
2: vzX0LpiRwEQlpNTtMNXqGCdmemM.roa (hash: KNuGavq6SzPf6J1CyBPc8g7thzHVaBolgWDilffZwwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:de:98:a5:ee:ee:e6:a6:cf:7e:16:19:12:cb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Validity
Not Before: Mar 26 07:01:38 2026 GMT
Not After : Mar 27 07:01:38 2026 GMT
Subject: CN=86c80e03f30284538c3cdfe969eabdb141d47441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:20:08:3b:40:96:a0:93:ba:3c:fa:93:31:
9d:56:ec:e3:9a:30:fe:d2:07:4e:87:26:f6:8e:58:
af:5b:c8:85:e0:02:25:dd:7c:17:44:56:28:74:4b:
f0:7c:fa:f4:97:39:94:34:aa:7f:36:df:90:b5:07:
b8:27:0d:e7:cc:e4:cf:94:f6:6a:e5:bc:1a:ca:2e:
e9:e5:0f:b2:a7:a3:e1:46:b7:b4:9f:b3:da:0b:0c:
05:96:ac:f8:b6:71:75:e1:76:a7:cd:5d:d3:8d:24:
d1:6a:34:f2:89:ff:1c:7f:89:88:13:ab:9e:50:7d:
b7:ca:61:1b:04:e8:04:b0:d9:d0:a5:b6:08:0f:a8:
86:d8:b8:97:03:8e:7d:77:9d:59:1c:eb:6b:05:7c:
d5:f0:bb:7d:95:a2:11:e6:3c:33:e5:84:ab:d4:36:
be:19:09:59:62:07:27:60:7e:9d:ad:0f:97:7d:9b:
db:49:70:1c:34:ec:28:90:98:17:9b:f3:06:02:b7:
9a:01:8a:9a:d8:c3:00:aa:02:52:7a:10:13:f2:6d:
7c:97:b0:97:0d:74:2d:51:2f:63:e8:0f:72:40:79:
32:e2:b8:73:c3:e5:6f:a6:c0:a9:fe:fc:19:0e:6d:
e1:8b:fd:ac:9a:43:cc:85:d8:6f:d3:a1:90:ed:1c:
9c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C8:0E:03:F3:02:84:53:8C:3C:DF:E9:69:EA:BD:B1:41:D4:74:41
X509v3 Authority Key Identifier:
keyid:FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9e:04:4d:3e:d1:ba:33:c8:db:70:69:9f:59:7d:72:e8:8d:
98:d4:d6:21:a9:64:8f:11:91:13:b0:00:3c:1b:3c:e0:39:b1:
38:dd:79:09:7f:eb:9e:08:bd:dd:da:5f:ba:84:9c:18:8a:b9:
86:6d:9d:b6:ef:11:fa:24:4a:a7:af:46:58:28:06:a6:46:6c:
6e:8f:50:be:bc:fb:41:90:77:da:85:a6:e6:3b:16:92:cb:bc:
99:ee:26:fc:2c:c8:b1:41:a2:44:0b:6a:71:44:87:9d:ad:3c:
5e:3c:03:76:5b:84:0b:1d:93:85:08:ec:ab:06:c9:b5:27:44:
df:5d:a2:da:68:c5:03:5f:76:94:0b:ab:06:45:05:5e:35:6a:
11:3a:88:e2:8a:1a:94:89:ad:ce:9e:bf:64:2a:64:5b:9f:a2:
4e:8d:82:60:26:b8:3b:9f:24:cf:f4:af:14:5d:e6:3a:9f:77:
aa:11:a5:0b:8e:68:64:97:85:18:9f:fc:e9:2b:a5:5c:66:a5:
0e:74:11:72:6d:fe:9c:cc:8f:04:01:8e:c2:de:02:7c:bc:d1:
d1:46:09:66:2b:eb:2d:1b:bd:d8:71:54:e5:c2:c1:d6:91:83:
a0:8e:37:b1:83:c4:65:53:54:2f:09:87:f2:09:42:32:9d:b0:
5d:81:ce:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:37:01 2026 by rpki-client