Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier: QOhFJ+LjWERuvS90lD9FKxarhTVaWlUGRqEMtdF8eME=
Subject key identifier: 93:BF:23:57:FF:30:9B:12:EF:41:6F:68:B3:07:AD:D0:DB:1C:B4:BB
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 019D29971FE30E5BA5BEDF2853BF002BDE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number: 189C
Signing time: Thu 26 Mar 2026 10:01:03 +0000
Manifest this update: Thu 26 Mar 2026 10:01:03 +0000
Manifest next update: Fri 27 Mar 2026 10:01:03 +0000
Files and hashes: 1: _Hegz1VVkQxT8dMR4TPbzXidnGo.roa (hash: wCUCX/ENynsQM4yWKSMGJBVSMGdPMxR8qubJ5kFNMNc=)
2: rBaBGD3me64LECmMKa6dKRV8Yy0.roa (hash: K+BptzFvZJeOeMKzMOMTcV3487VC0j+Wsdpi6o13OCY=)
3: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: 86+zQWudTEfFeCdlTiOkLjJW11xBl0PRzXgyFCDSwwA=)
4: vvTAvxdhx3NqRY7Mg6sIRjTavUM.asa (hash: B0okjC7PiUjc05N96TAWbJ82kV+SDnSQSBLWFMRkR/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:1f:e3:0e:5b:a5:be:df:28:53:bf:00:2b:de:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Mar 26 10:01:03 2026 GMT
Not After : Mar 27 10:01:03 2026 GMT
Subject: CN=93bf2357ff309b12ef416f68b307add0db1cb4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:ad:ef:91:ec:89:48:28:c1:2a:44:1a:97:
25:cc:ff:75:69:7e:17:6e:10:4b:0a:be:25:68:64:
7a:19:e4:b3:b9:5e:96:ff:16:f5:bc:3a:22:7a:dd:
df:07:54:6f:bf:ce:db:e1:a7:08:11:7f:c9:60:a8:
3d:98:26:d9:d8:b5:c6:34:7c:4d:ef:6f:bd:3e:4c:
0a:85:0c:43:11:65:48:0a:43:96:56:66:2c:d3:19:
a5:7e:5c:fb:51:7f:51:c7:ab:61:7a:cb:75:83:3e:
f1:4b:7a:e2:f2:3f:39:ff:8c:b6:c8:53:83:05:4f:
8f:38:76:e4:aa:be:39:04:c2:f0:fe:7d:c5:0e:25:
b2:46:ae:58:af:a8:0a:6d:93:91:ae:0a:6a:47:2c:
e5:c5:99:91:96:fb:c9:f7:6f:ff:d3:e9:9c:c9:6d:
1f:cf:85:1e:a2:fe:1a:f6:5f:bd:92:8e:92:40:57:
18:14:9a:70:46:6a:5a:9b:cc:b6:25:8f:fc:87:6a:
61:34:7c:6a:5a:04:fe:32:ca:2b:76:29:dc:c1:d7:
23:fd:7e:7b:a7:a7:0d:25:37:c1:85:ac:53:b8:12:
b4:50:0f:48:b3:05:6e:b5:91:b4:c7:3f:a1:8f:22:
1e:43:04:75:d9:fa:0a:aa:af:da:0e:01:23:9b:b7:
14:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BF:23:57:FF:30:9B:12:EF:41:6F:68:B3:07:AD:D0:DB:1C:B4:BB
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:49:6c:7b:3d:35:a7:52:92:6f:87:29:b3:45:10:b4:fd:1d:
cd:d1:cc:fa:57:b2:c2:14:f1:3e:ab:4f:7c:c5:a9:0b:4f:4e:
40:32:6c:f6:1e:fb:b9:93:d2:45:32:b8:72:94:fe:23:e7:ea:
5b:8e:b9:98:c6:12:37:ed:63:08:6a:88:ce:c1:41:58:6d:ed:
a5:38:20:74:08:2e:c5:b7:7f:a2:e5:7e:38:71:f8:be:3c:23:
38:5d:d1:97:5d:8f:d8:9e:cf:1a:36:99:da:e4:25:32:51:48:
1b:d2:91:3a:a3:e7:cc:67:e8:fc:b0:20:45:3f:89:ce:d5:c6:
5c:76:74:0b:8a:73:b6:0f:b0:b6:eb:4c:eb:45:be:c7:d9:22:
fd:e1:62:da:2d:10:b1:f8:b9:34:1c:b0:02:4d:11:78:d7:32:
34:fc:81:39:86:87:10:4c:58:7c:5a:d4:e6:30:6b:a7:db:85:
bc:1b:6f:91:a8:01:19:d6:89:64:2b:db:75:e5:25:b3:28:28:
bd:b3:3a:14:64:d4:23:b4:ea:41:e4:ef:f8:ca:4f:31:7e:b6:
d5:02:a7:2c:4e:c4:84:eb:43:3f:ff:e0:c2:cf:9e:4d:15:4b:
40:e2:c6:38:17:c9:a3:11:f1:7d:bc:1e:9e:91:17:15:1f:0d:
0b:8a:f2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:36:28 2026 by rpki-client