Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: l7AAdFqyeuSkMiyCrN7C9aX2bhZYqMxfQEJXsIyaqmQ=
Subject key identifier: 12:34:51:C0:ED:87:C1:66:4F:A0:35:3D:9B:57:55:9E:A9:98:BF:D0
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 019D251672C1DBD19A5921294474D533E819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 13:02:01 +0000
Manifest this update: Wed 25 Mar 2026 13:02:01 +0000
Manifest next update: Thu 26 Mar 2026 13:02:01 +0000
Files and hashes: 1: as_rlXqJ-9X5yyFioptlwk_3ywE.asa (hash: WOqxDpfG0009xOfBOkYF5jMYghhxHEkdiXrFFzH+iVs=)
2: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: uDx36AKavZFPZ0vbLyam4UEsTTXHcAyaGqZ4Caq8iSU=)
3: mCi8IXM78zEe8k6a11x1wQYJJHk.roa (hash: XXRc/LdihJuiCQ6i4r0S3QErFt5j7/TSAtBg4nnm1BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:16:72:c1:db:d1:9a:59:21:29:44:74:d5:33:e8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Mar 25 13:02:01 2026 GMT
Not After : Mar 26 13:02:01 2026 GMT
Subject: CN=123451c0ed87c1664fa0353d9b57559ea998bfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:f6:88:6c:6c:61:89:1c:da:9f:be:12:a7:
dd:5c:d2:6d:3e:59:44:ae:2e:86:8b:d8:36:49:8f:
c6:d8:37:2b:5a:0b:03:85:c4:14:53:e4:17:e7:b9:
ee:86:46:40:30:cf:24:4d:32:74:d6:a5:ac:98:7c:
da:12:42:e8:b2:6d:a7:ba:b2:55:f7:18:91:16:dc:
be:6c:1a:ae:4b:e5:f9:30:ee:d7:7f:94:de:d8:e5:
d5:56:af:a0:e9:e4:1b:0d:93:5f:dc:d5:65:10:c8:
6c:85:1a:eb:93:56:d8:cf:37:d2:4b:49:5e:07:a2:
11:72:3c:68:61:34:1f:90:77:8e:6b:d0:9f:eb:86:
70:5d:5c:48:d4:6c:43:a8:86:ce:0f:8a:4a:da:f9:
fb:16:5c:5f:a3:87:ed:16:1b:76:31:92:51:83:f5:
4a:8b:63:56:f2:6d:0c:61:d0:8f:38:54:2f:86:89:
48:4c:be:13:0e:7a:ed:d2:9f:51:a1:50:5c:55:27:
5f:49:3e:2c:e1:c3:6b:e3:23:bb:c4:13:0b:92:0f:
d1:50:fd:ce:92:e1:a9:1e:06:e7:2c:6b:98:e5:a1:
13:4c:0e:92:ee:b9:73:91:d8:d2:55:63:fc:ec:9f:
29:0e:b2:a5:79:6b:4d:f1:16:3c:43:8b:f9:cc:42:
18:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:34:51:C0:ED:87:C1:66:4F:A0:35:3D:9B:57:55:9E:A9:98:BF:D0
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:33:ad:5d:b8:87:a0:c2:03:bf:82:be:8e:fa:79:83:37:dd:
61:17:e1:30:c2:16:70:5d:1a:73:1d:24:9d:d4:30:49:3f:d4:
50:7e:b0:e5:aa:e3:9b:f4:c9:dc:35:ed:18:b4:1f:33:cd:45:
8a:36:4a:cc:15:36:db:80:ae:de:43:9b:78:be:52:65:f8:ef:
92:b1:79:8a:cc:20:a3:51:1e:72:26:35:70:08:25:e8:d8:3a:
ec:ab:3c:8f:c0:24:5c:88:b7:33:00:c9:b6:04:d3:a9:15:ae:
42:d6:5f:e2:0d:5f:99:05:c2:d6:f8:97:d3:f1:bb:29:4a:e2:
1d:53:48:86:eb:d2:0b:32:e0:33:4d:e0:9a:be:e7:06:52:6b:
32:f0:5f:af:1d:75:ad:33:03:08:4c:ab:60:fe:ec:d2:e5:7f:
f4:08:74:95:22:32:92:c8:c4:7f:c2:37:8f:39:cf:2e:d1:53:
21:dc:db:2d:ef:57:40:fb:b1:b3:ac:66:c8:fc:6c:69:56:6b:
5b:29:b3:4e:59:33:d4:dd:79:2e:f8:07:58:c0:f4:76:06:75:
6e:ff:bb:30:f5:1f:e6:b0:3c:35:61:bb:31:f0:a6:3a:cb:76:
73:5b:f7:86:03:11:b0:e5:b2:20:b4:4e:ba:b7:28:cc:14:22:
e9:04:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:40 2026 by rpki-client