Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: gDZ5yUYAtZ8QaMvkuZn/+ZVXbiPDpUPNBowMYe0Lh9s=
Subject key identifier: CC:DE:F3:4C:1D:34:B4:F4:39:DA:50:F3:C4:36:10:63:23:1B:CE:6F
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 019D27DF4F70AE782F85E5C8ADE755FB3EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:00:39 +0000
Manifest this update: Thu 26 Mar 2026 02:00:39 +0000
Manifest next update: Fri 27 Mar 2026 02:00:39 +0000
Files and hashes: 1: WBZ4Ns1KlqrebDqaMN4GOQg5rUw.roa (hash: yOstMXBtzsYtaixKzlv1YIAu5cES+ZEO3HPCVKprX3s=)
2: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: KzXtbh4OYXyA9iVTwFhCtHU9Vci6pKNm8owdFqfi+JM=)
3: y_vc6s_Py2qwffoPUemYyQ3C93I.roa (hash: jTDTDDTAp7a9jlbajKDV/IreUhiB7BfxphmCimNa3V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:4f:70:ae:78:2f:85:e5:c8:ad:e7:55:fb:3e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Mar 26 02:00:39 2026 GMT
Not After : Mar 27 02:00:39 2026 GMT
Subject: CN=ccdef34c1d34b4f439da50f3c4361063231bce6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:5a:b7:4d:7b:c1:f1:ad:09:c9:d6:bb:17:
9a:e6:e4:77:46:1e:bf:ea:b5:ee:02:56:7c:c8:f6:
00:00:80:84:8f:be:9a:9e:c0:8e:a5:0e:92:89:e3:
e7:82:eb:41:77:eb:5c:2f:7e:07:18:72:4f:58:5d:
f2:df:a5:a6:83:76:fb:dc:31:33:c8:e1:59:d7:93:
9e:7b:76:3f:75:62:1a:b6:01:51:c6:e6:3c:94:53:
ae:9a:42:eb:10:f8:a0:0c:5d:ce:54:21:d2:cd:17:
7d:a6:8a:e4:bc:a0:d2:b4:78:b9:6d:e1:bf:ca:7f:
b1:38:a4:51:6b:26:48:01:5e:6d:03:c1:ee:02:43:
34:09:cc:a5:9f:18:ce:18:e0:c5:58:f1:c0:6d:3e:
a4:af:c1:c9:75:8f:6d:31:30:8c:c2:dd:ff:dd:03:
9e:8e:88:43:57:ed:c9:cc:d3:b5:97:ca:75:14:96:
59:ad:d2:7b:28:53:10:33:8c:97:ca:62:8c:de:a7:
f8:ee:09:0e:95:8d:93:49:19:9e:61:ae:4b:2f:9e:
2d:55:b2:f9:6d:94:81:a5:07:83:12:9a:70:a2:50:
b1:04:86:66:32:fd:e8:f9:ac:9f:6d:f0:74:a6:e3:
3e:f2:03:ea:bd:eb:4b:a1:52:81:69:e7:0d:69:07:
4a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DE:F3:4C:1D:34:B4:F4:39:DA:50:F3:C4:36:10:63:23:1B:CE:6F
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:56:84:d3:58:a3:ec:d2:68:aa:e0:e1:23:0d:b8:ec:ad:fd:
05:53:b8:f4:0d:64:9e:94:b4:76:9a:f7:f7:ab:b6:3f:56:d2:
f9:33:e5:5b:10:a1:27:9d:6c:0d:b1:23:ea:92:e3:d3:8f:eb:
ee:25:e4:28:03:e4:f8:32:af:89:40:52:3c:7d:44:e9:ff:fc:
0e:ba:96:29:45:9b:b8:60:e5:f3:b7:0f:b2:e6:dd:bf:96:26:
94:3d:76:d5:cb:2e:b5:a4:ef:5c:ec:49:9b:b3:c1:53:ec:86:
1c:f5:cc:70:db:2e:44:40:de:54:61:68:8f:fa:ca:c9:0e:2e:
b5:96:1e:63:37:b4:ea:98:b8:73:65:2f:63:84:4f:21:e3:62:
f1:3a:69:23:dd:1f:98:78:e1:f0:03:42:72:9c:59:f0:db:12:
a2:08:15:45:a1:63:49:50:84:0c:a9:de:23:09:61:4e:3e:f8:
cc:72:b6:bb:5b:4e:1b:d1:82:ec:f4:f5:d8:6e:82:d2:9a:ca:
0b:9a:8e:54:e4:d1:f6:ff:db:72:22:67:40:d4:66:31:8a:26:
04:6e:ab:a9:31:23:1a:c6:98:63:7b:9b:20:ba:7e:ae:2c:24:
b7:1b:80:32:3a:8d:f1:f6:c8:b1:c7:b9:33:3d:60:ab:20:b3:
dd:f4:b2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:56 2026 by rpki-client