Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
File: 23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json)
Hash identifier: Ern82jG46U7yCC3OFIHTxSNvkntQ5g5bPtlsw04TxJc=
Subject key identifier: 4D:C8:CB:0A:DF:72:39:0B:E7:69:DE:AC:33:5F:07:41:AC:67:73:C5
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial: 019D2884443C796ABD1936485ACD24A57EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
Manifest number: 1539
Signing time: Thu 26 Mar 2026 05:00:49 +0000
Manifest this update: Thu 26 Mar 2026 05:00:49 +0000
Manifest next update: Fri 27 Mar 2026 05:00:49 +0000
Files and hashes: 1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: g0dfk+sPeGQYSNyxLCpCYoD1S0genLaxqdcoNbv0p5M=)
2: NRwgJUwXk3BWkcpGjCMp97lO_U4.roa (hash: cqI/kILVJcAeJ0Tz95y2zzvYBTUTuf7X5Zw7I2eBtl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:44:3c:79:6a:bd:19:36:48:5a:cd:24:a5:7e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Validity
Not Before: Mar 26 05:00:49 2026 GMT
Not After : Mar 27 05:00:49 2026 GMT
Subject: CN=4dc8cb0adf72390be769deac335f0741ac6773c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:91:0f:d6:45:7a:3e:5a:8c:02:50:12:87:
ad:6d:21:24:6a:02:d8:c1:7e:4f:ab:ca:d4:80:98:
a4:1d:32:53:75:c7:18:31:aa:ec:64:29:08:ba:2f:
d8:dd:25:0b:af:a1:ea:ff:63:b8:38:7c:e2:4d:5d:
17:42:53:43:7c:da:63:b9:03:8c:e1:d4:17:7b:1a:
69:65:f6:f2:cd:a3:43:93:5e:2a:7b:ca:2b:f9:e5:
a2:1f:ae:2f:74:56:91:f0:09:d8:3f:99:67:62:45:
30:99:e1:cd:9a:80:a5:67:ac:26:be:9f:aa:36:80:
a7:d1:47:56:42:82:bf:9e:5c:f4:10:7d:33:79:b2:
31:90:70:f1:b3:6d:24:8a:8e:6b:8e:20:23:3e:c0:
27:c3:5e:b0:35:1e:dd:02:16:68:06:15:ef:41:bb:
dd:c9:d4:f5:c4:63:c3:e0:3a:8f:b6:c2:9a:4d:29:
78:f0:8f:22:d3:a1:fd:07:cc:fc:83:bf:4a:64:58:
57:fd:c7:9f:f2:64:54:19:e0:76:4e:14:03:3d:52:
5c:70:f6:e1:0e:0a:f9:2c:46:14:a0:bd:3e:0c:a0:
e2:e5:cd:3f:81:dc:5f:fc:d1:05:72:df:2a:14:8d:
c0:38:f1:8e:0e:3e:b4:a7:78:a3:44:39:94:cf:95:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C8:CB:0A:DF:72:39:0B:E7:69:DE:AC:33:5F:07:41:AC:67:73:C5
X509v3 Authority Key Identifier:
keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:56:70:2d:6e:5f:64:b6:c2:e1:9c:35:a6:bc:12:8f:cf:6f:
d5:e5:3d:aa:d6:cd:d5:0b:01:b7:e1:91:e9:e4:3a:b3:6e:61:
ff:60:38:71:54:77:dd:99:26:ea:25:6b:81:3b:c4:8b:83:37:
ab:42:f7:2c:e7:70:40:99:2c:75:9d:e0:05:a9:aa:8d:2a:52:
d9:e1:95:68:8f:53:63:f4:ca:b7:62:d9:21:e1:7a:18:f2:69:
63:6d:78:76:46:73:45:b8:13:90:3e:df:a7:b7:4a:48:51:0b:
01:6d:2f:5e:d5:41:9d:3f:f8:68:2a:82:4a:b8:ec:40:da:ad:
83:73:61:12:10:a6:d1:a9:df:47:ec:38:46:19:b6:19:dd:cf:
12:17:17:e9:cf:13:43:dc:83:27:83:40:4f:be:f2:7d:a7:66:
eb:a1:f5:33:27:df:29:51:de:67:e7:dd:95:91:d1:47:49:fe:
bb:09:e3:e0:8a:e6:95:a0:54:49:5d:34:0e:18:d1:fd:94:b1:
fb:17:ab:cd:f3:73:32:b0:ad:64:e8:11:ad:ac:0d:f0:a2:af:
f9:79:24:08:73:57:20:c6:91:9e:f7:26:80:f9:9e:28:fb:ca:
bf:d5:d1:28:19:2c:31:0a:26:d4:3f:55:fe:47:48:ce:6e:bd:
36:d2:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:51 2026 by rpki-client