Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: sZR1vTxuGZ/qTDxZmt1YF2AZGfMYXXdnlUGRyqVvEtk=
Subject key identifier: 42:E1:F4:51:77:AB:A2:25:77:3E:20:08:37:47:4F:5B:1F:C5:E7:80
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 019D2B8583045F3CD621F1BE63F9E338EE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 19:01:03 +0000
Manifest this update: Thu 26 Mar 2026 19:01:03 +0000
Manifest next update: Fri 27 Mar 2026 19:01:03 +0000
Files and hashes: 1: 3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa (hash: AEuGhXQguRSp/ih8O+939bXs6UO6yS5s6bISurK2/Vs=)
2: 6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa (hash: WC0gwtiT4OCWAekCe2z7fiG7BMx8NcVUB2W69nAJWQM=)
3: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: kPRHBVBqZLZ3lay5OhtxcCQRprwtKD8NodZYxjSXsCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:83:04:5f:3c:d6:21:f1:be:63:f9:e3:38:ee:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Mar 26 19:01:03 2026 GMT
Not After : Mar 27 19:01:03 2026 GMT
Subject: CN=42e1f45177aba225773e200837474f5b1fc5e780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:91:11:28:2e:34:cd:ce:a1:53:71:12:3b:
1f:da:76:03:95:61:3f:cc:12:1e:36:ba:d4:50:c7:
1f:8c:c9:1c:2e:06:09:eb:f6:4c:b2:2b:9d:a5:5e:
4a:fd:10:14:68:cd:02:f1:ee:45:dc:7e:9e:c9:e0:
3a:50:fb:93:f9:f3:2f:be:fb:b1:4e:74:ed:c3:99:
77:20:d4:02:32:0a:0e:a7:22:25:11:0d:2c:54:4f:
7e:4c:ec:f2:bb:46:58:bf:5a:be:b2:d5:c8:1d:77:
b0:85:6d:48:d8:d1:19:53:3c:ff:76:63:69:85:7b:
3e:81:27:7c:44:95:63:14:a8:2f:5f:ea:85:1c:57:
d4:8f:a3:b2:1d:8f:97:59:3b:eb:47:26:43:e7:4d:
f5:85:71:4f:3d:87:29:cf:c6:ef:ea:0c:6e:e5:1a:
5b:8e:48:f2:f4:9a:c5:3f:62:63:7d:7d:66:46:14:
6e:26:d3:a2:3a:bc:cd:ba:fc:71:e5:4f:fe:8d:6b:
f1:b0:58:a5:38:db:e7:41:a0:81:0f:d4:ab:88:1d:
85:d2:48:bc:4c:f5:ba:97:0a:dc:5a:6e:84:ed:b8:
00:67:22:ac:80:80:cb:96:a3:01:65:f5:b1:7d:67:
8e:89:b4:b1:2e:20:2d:10:ef:8f:25:10:1f:22:70:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E1:F4:51:77:AB:A2:25:77:3E:20:08:37:47:4F:5B:1F:C5:E7:80
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:06:31:03:9a:3d:64:a6:c2:f3:c4:31:9a:44:16:07:6f:dd:
45:01:76:9d:8a:75:f9:55:fb:32:98:0a:cd:fe:ef:38:3b:b9:
bf:dc:c5:e2:71:7f:5a:b3:8c:fd:6f:7d:bc:33:94:96:44:b4:
5b:36:c3:fe:73:fe:25:88:db:ce:60:73:e8:24:a5:24:9b:2c:
12:e0:69:0e:aa:fc:5a:61:7e:43:7c:7d:72:8d:0c:6d:46:5b:
55:79:c2:2d:76:bd:18:09:29:3b:ac:fd:99:54:cb:46:b9:4c:
5b:00:06:ce:23:03:b0:ef:f2:4e:f2:f7:0b:80:53:7c:25:d0:
69:fc:ad:31:ae:83:a9:e2:15:51:11:25:ac:52:c0:b5:b4:9d:
46:4f:fc:53:e6:4a:ae:8b:72:e2:75:c2:e5:c3:19:bf:53:cb:
54:c7:2a:3e:07:da:d7:77:60:c6:5c:3a:2e:7c:4f:67:46:58:
a4:a6:05:6d:54:db:7b:e0:b1:06:f5:75:d2:66:a2:0f:13:e8:
3e:11:35:5f:e2:0c:1f:0e:9c:d3:32:ca:42:5f:fc:b4:1b:17:
c4:af:32:3a:6c:8e:45:bc:54:76:f4:a7:e6:f5:39:05:8a:c5:
92:03:bf:a5:0e:24:e9:b7:52:16:90:dd:8c:8d:55:ce:a4:2c:
d1:48:d5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:49 2026 by rpki-client