Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
File: 93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft (raw, json)
Hash identifier: tfFb2rn5+xiENGdW1UrQfEk2fI3k3y2bDUVa0yQpBME=
Subject key identifier: DB:AE:E1:60:C8:E5:19:C4:7C:3D:6E:3C:09:7D:D0:90:B2:18:5F:E1
Authority key identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
Certificate issuer: /CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Certificate serial: 019D29970C1D54F0524E2A5CDA3E4E981155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:00:58 +0000
Manifest this update: Thu 26 Mar 2026 10:00:58 +0000
Manifest next update: Fri 27 Mar 2026 10:00:58 +0000
Files and hashes: 1: 93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl (hash: xUfDPpsngFxAW7G5dVvYvybMDbtEhU/N3v4KmeGuG/o=)
2: AtMRbaWIM3vKIPajxlWDipBHtFE.roa (hash: /F0mb64f4GvsT0V2gdRErVQNX5I6/07wWVDekslaiTQ=)
3: turqiMI7RCL64rtwabusAU3h4Y4.roa (hash: D8Hw63u312sddbf+MqkyGnEXwFYQiMq9Y7E4Hhv9r4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:0c:1d:54:f0:52:4e:2a:5c:da:3e:4e:98:11:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Validity
Not Before: Mar 26 10:00:58 2026 GMT
Not After : Mar 27 10:00:58 2026 GMT
Subject: CN=dbaee160c8e519c47c3d6e3c097dd090b2185fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:88:eb:a8:03:f7:66:d4:53:ef:7d:d4:fb:
fe:ff:cb:2b:88:6c:36:a8:a2:db:c0:9c:aa:bf:57:
de:ca:76:89:6d:cd:9e:b0:c3:a9:f8:5a:44:5e:59:
e4:ac:2b:54:74:04:d0:3a:3e:2b:1a:bf:0c:f9:1f:
e4:f1:39:26:93:c3:d8:1f:8a:93:6b:a1:3b:90:68:
74:d2:24:93:0c:2d:24:2f:c8:c4:4a:0f:23:df:67:
a0:db:75:d0:12:d0:76:65:34:30:ee:de:fa:50:ea:
ac:af:fa:0c:b4:7c:01:1c:e5:6a:c3:ad:a3:f1:27:
64:4c:56:13:18:a6:82:93:fe:8e:0b:2b:e5:07:78:
12:7d:51:55:8b:12:aa:80:66:6b:10:c4:e6:19:39:
15:d8:68:7b:0a:1d:ab:c5:a9:24:12:52:bd:ac:3c:
3c:5b:96:89:ac:73:ce:a2:2a:81:2a:e8:5d:a7:64:
55:52:5d:8a:42:aa:3d:01:c0:26:2e:ce:31:14:a8:
a0:96:e3:71:f8:16:12:cc:b1:c4:97:bf:82:2d:e6:
9a:f4:21:1a:e8:76:1e:b1:d4:18:02:23:d5:ef:7e:
4c:09:1a:99:26:bb:12:68:29:1b:78:4d:38:2f:b4:
7e:9f:e0:36:63:aa:36:8a:ec:b4:90:10:08:1c:dc:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AE:E1:60:C8:E5:19:C4:7C:3D:6E:3C:09:7D:D0:90:B2:18:5F:E1
X509v3 Authority Key Identifier:
keyid:F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:60:a5:62:90:32:2e:b3:95:4f:52:a1:a7:70:78:e6:b9:28:
3b:49:44:22:bf:2e:ec:14:13:99:88:ad:a9:7c:d1:53:07:cc:
0c:91:02:25:e4:29:ec:43:11:df:f1:25:2b:da:51:f7:89:a2:
90:b8:be:71:77:0d:4e:4e:e7:36:4a:58:2a:54:60:0d:b4:1e:
c8:50:0a:fa:d6:bf:7b:17:71:cc:64:ff:ca:2f:ff:cc:29:7e:
7f:90:66:7e:64:7d:f0:8e:05:56:15:d9:cc:d2:23:14:52:bb:
ad:1b:ae:a9:ab:88:08:99:1e:ef:04:6e:e6:9c:31:8a:de:8a:
ba:1e:22:6a:9a:73:46:6b:3e:30:e7:b5:dd:1e:99:4b:4a:ee:
1f:ae:a5:60:14:f7:4e:1b:58:b2:e3:47:3a:ec:26:4d:f4:d1:
f8:50:20:7e:66:cb:e2:55:44:96:aa:20:c3:d6:1f:a6:b8:74:
f9:dd:bc:76:c6:a3:13:a2:e7:93:25:0d:ee:59:eb:6a:03:f7:
49:59:a8:ac:27:dc:bf:12:ef:46:9f:4d:ce:b2:86:c2:ed:1f:
ca:6a:dc:31:54:3e:a7:49:74:d9:25:37:15:e2:69:19:2d:46:
5f:66:54:29:49:33:4e:22:f8:2d:06:94:0d:4b:9e:91:6a:58:
ba:73:dc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:19 2026 by rpki-client