Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: RQLwiQGfUfMFgnPmHyMIZRm61kvw8oaVTN1yoVB1+AE=
Subject key identifier: 76:1E:07:8E:27:DC:9B:25:ED:EE:65:B9:79:6A:38:DA:D3:59:E0:22
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 019D2816E2CBE2BF637A8F4E67426DB1A0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:01:21 +0000
Manifest this update: Thu 26 Mar 2026 03:01:21 +0000
Manifest next update: Fri 27 Mar 2026 03:01:21 +0000
Files and hashes: 1: 440C9nJzfAwzFQHbbTSsKGKGkig.roa (hash: 9GaUDae42NdjzGOSW1+fUpuBNX675/CDIy2pT/BeZSI=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: w6P143S2Q4G2XCVXqBcOb9kSd8eKCqCjPvdFxbHUfQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e2:cb:e2:bf:63:7a:8f:4e:67:42:6d:b1:a0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: Mar 26 03:01:21 2026 GMT
Not After : Mar 27 03:01:21 2026 GMT
Subject: CN=761e078e27dc9b25edee65b9796a38dad359e022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:f5:dd:9f:e4:e0:45:77:c9:0d:50:36:0a:
fb:3e:da:19:88:35:d8:c0:c8:17:4d:87:ec:f9:4f:
0b:7a:f3:b5:58:1e:06:0e:3c:81:12:ec:1e:4e:28:
8d:e6:19:e6:fd:a8:5e:bc:cf:d5:38:4f:d7:d0:63:
f8:dc:93:51:64:eb:26:ad:4c:39:d5:25:30:52:4b:
2e:de:d8:9e:2a:e0:4d:20:c7:95:b7:7f:75:de:ef:
ff:5a:07:eb:0e:aa:35:cc:be:38:bb:0b:fc:30:39:
13:89:c7:03:06:71:02:cb:03:66:4a:3c:ed:6d:7e:
63:49:3a:5f:33:14:30:8e:e6:ef:95:94:7b:0f:fd:
7c:d4:84:6a:40:eb:79:2d:ba:29:b0:3f:fd:ca:7f:
7a:c1:fa:24:58:eb:10:eb:3c:c3:1b:5f:65:de:cf:
57:18:98:28:ca:88:ec:70:f3:c4:12:20:5b:29:18:
00:90:29:66:bf:09:42:e3:5d:43:f4:e2:51:7c:45:
1a:d5:cf:ef:9c:c0:c8:38:57:b3:3e:69:c3:36:55:
6b:c6:22:2a:d2:01:a8:4d:ad:1d:c4:9e:19:a7:72:
d4:b3:91:58:24:d1:bd:3e:74:d6:8c:39:28:35:b6:
75:75:39:02:a6:aa:21:a8:f8:fb:9c:3d:16:9f:fd:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1E:07:8E:27:DC:9B:25:ED:EE:65:B9:79:6A:38:DA:D3:59:E0:22
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2e:83:18:0a:43:95:52:3c:d4:d3:2b:db:6d:83:42:32:c5:
c3:53:e4:bb:24:95:10:e5:90:97:4e:53:de:62:4a:de:ab:61:
97:6a:78:85:f6:14:19:7b:81:71:44:33:2c:72:36:e2:22:d1:
e5:c7:11:32:71:bb:f2:41:e9:47:dc:12:d4:d3:8b:50:d4:52:
67:5d:f4:f0:8e:a6:8d:74:ef:71:84:6d:f7:f8:85:67:2e:5b:
b1:17:56:8d:29:fe:1f:30:c9:47:fc:96:f0:b9:cc:ab:16:8c:
05:b4:ba:80:d1:6f:1b:03:19:09:5f:e9:38:db:0c:71:59:a9:
68:4c:06:42:4e:d2:f2:d7:bd:b1:0a:9e:30:45:94:00:1b:8a:
e8:0f:2d:5f:9f:4e:a4:a9:96:9e:b2:9a:54:78:6c:bb:04:be:
46:13:86:98:da:de:c7:61:e2:19:d5:2a:23:8d:8c:6f:a1:57:
53:b1:93:cd:90:9a:2f:3a:bf:8e:ea:3b:82:4e:0b:c6:93:e1:
7f:35:bd:87:fa:7a:8a:a2:fc:9f:80:46:b0:22:68:a2:c3:68:
80:69:56:0b:35:f9:b3:4c:20:1a:0b:c3:c9:08:3a:44:b8:39:
53:69:96:83:54:67:b1:9b:72:3d:ee:be:e7:98:ee:b5:17:9e:
88:7b:b4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:17 2026 by rpki-client