Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier: /lMV81Vzs55GObKmH4noEl9oDT8x2/XZAPPI1KHRtms=
Subject key identifier: 5A:C9:71:17:49:BC:ED:D6:D9:91:04:84:F8:1B:7C:44:39:8C:83:6F
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 019D265FDDA319523E40059D8BFD4C9749E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:49 +0000
Manifest this update: Wed 25 Mar 2026 19:01:49 +0000
Manifest next update: Thu 26 Mar 2026 19:01:49 +0000
Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: 4dDL00NuDqGYWoJDH9C56lEc9aTW9/Jhxo4PlMt126w=)
2: LNdrd32mL4o15Pj5JcWmBKR2Q2I.roa (hash: hLgQdqBGoRGoVp14crN6xd2B0BaQtU78dsrL7Dz6tOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:dd:a3:19:52:3e:40:05:9d:8b:fd:4c:97:49:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Mar 25 19:01:49 2026 GMT
Not After : Mar 26 19:01:49 2026 GMT
Subject: CN=5ac9711749bcedd6d9910484f81b7c44398c836f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:f3:31:11:f8:ea:9f:00:15:73:25:f4:bd:
48:73:86:fe:c0:a3:7a:2f:6d:c7:b4:b0:e1:1a:09:
3f:c6:b7:92:d4:21:8e:64:f1:42:63:d1:f5:70:ee:
7b:3b:d8:1e:af:c8:2d:2b:0d:e4:67:64:ce:2c:b2:
80:82:16:3d:92:79:27:f4:c5:b6:8e:b5:4e:ca:13:
27:7d:b9:21:b1:46:2e:c8:cd:1b:91:e6:46:a9:ad:
12:e4:3b:6b:e2:a6:76:0d:b3:dd:78:07:ad:a0:c5:
ae:72:55:19:06:09:90:e4:3c:58:85:04:ab:14:e5:
7a:ac:45:a0:ee:4a:af:b2:45:d4:48:a3:f7:f7:24:
05:ee:00:25:38:38:1e:bd:82:a5:05:8b:d8:2f:91:
98:aa:78:5f:a2:e9:11:f5:75:60:74:14:33:7b:3c:
0e:c1:5c:d4:fd:ec:d9:08:45:90:78:94:89:42:67:
93:a4:75:ac:f4:ef:cc:b9:6f:26:f4:dd:08:85:46:
fe:3a:a5:35:a5:3f:2e:d7:3f:05:71:62:c3:c5:b2:
d3:56:00:a3:e9:02:01:87:cf:87:97:96:bf:14:e6:
24:7d:60:d3:0d:4b:5c:00:fe:4e:59:61:70:23:27:
67:20:72:92:cd:3d:04:24:84:e1:9a:f6:5d:ba:3e:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C9:71:17:49:BC:ED:D6:D9:91:04:84:F8:1B:7C:44:39:8C:83:6F
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0b:6a:89:38:ff:e2:f7:9a:8f:42:96:70:9d:25:fb:e4:5c:
0d:8e:90:9d:bf:7d:dd:44:51:89:85:94:0e:84:d9:67:fa:00:
10:69:15:1f:93:12:76:39:5b:99:0d:fb:35:31:0b:41:1c:ba:
49:72:3e:92:ca:e8:1c:08:ed:7c:a7:01:a4:9d:73:f7:5a:02:
8c:d3:be:3b:5d:6c:02:42:1d:18:fa:06:f4:21:43:a2:5e:4f:
34:d5:5b:f2:15:7d:34:2c:fd:6f:cb:99:c7:a5:24:75:52:28:
73:d3:12:01:01:27:bb:8c:0b:09:c7:a6:be:ff:13:3e:e8:34:
0b:ad:dd:a2:47:60:c1:4b:5f:bc:5e:fe:97:fc:8b:6a:56:ba:
d4:dd:60:e0:8e:2f:2a:89:43:b9:f2:f8:22:4c:99:73:fa:bf:
dd:63:ca:99:04:81:32:0a:ff:dc:e9:d1:ce:df:a7:04:2e:09:
18:33:a6:e1:b2:e2:10:60:f6:b0:fd:3e:45:ed:f6:a7:98:b5:
c2:58:2f:84:17:0a:0d:5a:8c:06:2a:67:53:8b:1c:34:f4:a0:
2d:14:71:20:83:6d:ab:3f:51:6d:22:a1:2f:50:82:dc:f6:83:
7d:bf:ee:40:d1:d3:c4:1d:ec:7b:9f:96:6f:1a:1e:e9:4c:97:
7c:44:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:22 2026 by rpki-client