Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: xAkc4AnoFz040NOrk4ZPJ2jqULiSlZrextU/61Ia9Ak=
Subject key identifier: 3D:26:03:B8:38:F0:0D:91:FC:68:F2:5F:BE:93:78:F1:FB:DE:B9:2A
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 019D2D3C5B766DE0E0ED9FDAA7A1941D7A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 1887
Signing time: Fri 27 Mar 2026 03:00:23 +0000
Manifest this update: Fri 27 Mar 2026 03:00:23 +0000
Manifest next update: Sat 28 Mar 2026 03:00:23 +0000
Files and hashes: 1: mRAbVrC4vL4GmozrjHi2i0Iaytw.roa (hash: vC24nQiiHK47q4YRBJHF/HkE+eYaEpAw6ZvG99eAnwU=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: 4m9IObMxi+cY/uBQUXs6wU6S5jk1Phng5jB2mQ2e1WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:3c:5b:76:6d:e0:e0:ed:9f:da:a7:a1:94:1d:7a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Mar 27 03:00:23 2026 GMT
Not After : Mar 28 03:00:23 2026 GMT
Subject: CN=3d2603b838f00d91fc68f25fbe9378f1fbdeb92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:94:b7:72:96:87:92:c5:61:67:4a:b8:4f:
ef:b3:73:c9:6c:6f:c5:71:35:72:39:12:4c:8b:5f:
7d:22:53:ab:88:eb:56:ee:ae:cb:bc:55:78:ab:d2:
25:74:92:bf:7e:d4:ee:76:64:61:24:82:2d:e6:f0:
6e:8b:ca:4a:06:a7:bb:33:b6:38:84:82:ef:4e:71:
b5:d6:18:dc:2d:b1:43:0c:01:05:64:e9:c5:04:c8:
43:51:53:88:17:a4:a8:ea:d0:74:ce:b1:e4:79:05:
48:bd:56:7c:9d:9f:2b:14:d5:18:ae:a2:3b:44:b1:
b4:c1:a2:c4:a1:b1:c7:ff:01:3f:6b:e2:ec:a9:c9:
61:ef:17:e8:a2:f6:1c:07:1b:ec:0a:9b:42:77:75:
ec:78:a3:d7:4f:b8:09:69:e8:df:53:05:ee:c0:b4:
8f:4d:33:ee:6d:db:b2:c7:d7:3f:c7:63:59:b8:3b:
3a:4b:a8:e1:15:e7:d1:ba:21:a5:a3:1e:6b:26:56:
78:ea:c5:6a:18:a8:ab:aa:1f:3e:f7:48:d1:45:c7:
38:e6:a9:c7:ef:c1:ea:99:80:cf:58:cb:5b:75:1c:
8a:e0:8f:88:e0:ab:89:8a:09:19:d1:89:1e:86:05:
f2:c4:a9:63:2b:76:06:cb:de:35:e6:b1:e0:30:b1:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:26:03:B8:38:F0:0D:91:FC:68:F2:5F:BE:93:78:F1:FB:DE:B9:2A
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:79:ec:e7:f5:5e:35:7a:4b:04:8a:47:7e:9d:4e:b5:85:9f:
3a:27:fa:a6:36:c5:25:e6:57:d3:0c:d1:27:c0:fd:31:b4:c2:
07:69:6c:80:cf:b4:f4:9d:ba:c1:c0:93:95:19:3b:3b:3a:6f:
c9:2b:18:ce:86:b5:ad:92:03:21:a6:18:d6:1c:1b:c4:b1:61:
75:3c:d1:4e:f3:bc:aa:ab:fe:b2:e1:77:7a:da:1b:8d:3b:da:
8b:a2:f6:6e:05:48:02:cc:34:6f:5a:4a:17:9c:ce:d3:c0:8a:
79:fc:2e:f8:8e:6c:ee:45:b1:d3:1c:75:04:02:e7:81:68:61:
29:35:25:fd:cb:a9:5e:e1:03:a0:26:83:f7:35:1d:a5:23:c6:
3e:65:26:50:14:96:10:d5:e1:0a:38:9c:e7:25:63:90:20:5f:
73:a2:75:eb:dd:6d:7f:93:9a:3e:b9:1c:39:49:43:1d:89:5a:
06:f6:bd:c2:1c:ba:dc:b1:c3:e7:cf:cb:bc:9d:bf:d2:13:22:
99:89:3f:4b:ac:c4:9e:7b:44:07:bb:32:94:ae:02:7d:fe:d5:
25:4b:04:e8:6a:96:f7:3e:35:0b:42:10:da:f2:9d:76:1c:6a:
9d:32:ef:67:94:f7:f4:b8:e5:2f:82:71:fd:22:16:93:36:1b:
08:10:9d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:13 2026 by rpki-client