Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier: NQ727rGmZIW/s+o1ezEiLiEDYHaOXdKAH2gClv1uBeg=
Subject key identifier: B6:00:FD:EC:79:10:3B:49:CB:F7:0F:EF:92:5F:83:5D:22:1E:71:87
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 019D29CE133E98C28928EF4A90C1332323F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 11:01:04 +0000
Manifest this update: Thu 26 Mar 2026 11:01:04 +0000
Manifest next update: Fri 27 Mar 2026 11:01:04 +0000
Files and hashes: 1: VuWfYezMuwuKUhdrekzuq4vKzXw.roa (hash: 9mN6oUykcmvDqkiR4AZJmp9qI5JmRegNOsGR4Bu/epo=)
2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: NaJLi1T+fyC7Oy2kbVMQHmsbG+4KJFLx7GioYru+iHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:13:3e:98:c2:89:28:ef:4a:90:c1:33:23:23:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Mar 26 11:01:04 2026 GMT
Not After : Mar 27 11:01:04 2026 GMT
Subject: CN=b600fdec79103b49cbf70fef925f835d221e7187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:bf:6d:63:a2:6c:6d:2f:e0:f4:e0:da:d3:
07:15:5c:39:50:16:1d:bb:81:e3:1d:47:77:7d:91:
eb:4c:61:89:0a:32:64:fd:f8:0b:60:07:0d:98:d6:
88:ca:05:f6:ff:c9:e8:88:86:62:f5:ef:28:a6:72:
b3:39:be:f2:ad:51:e0:6b:57:f4:a4:b9:f9:45:02:
23:4a:3b:9e:4c:2f:f4:61:07:75:eb:29:33:dd:06:
d4:fc:a9:cd:ee:39:36:a9:62:f5:dc:36:7c:a7:65:
ff:3e:75:88:b3:3a:fc:a3:bb:16:00:e7:2c:ba:b5:
c0:3f:da:8b:e5:20:27:04:b2:f6:5d:54:73:67:b4:
cb:b9:7f:3a:76:ff:01:fa:6d:c9:1a:59:b4:39:38:
a6:ff:0c:d6:7f:77:10:ac:9f:bc:f1:52:01:6e:e0:
b0:e7:d3:67:f0:7e:e3:64:da:46:a2:85:5a:b4:ac:
e1:1c:a8:57:a7:e3:25:d9:1f:96:7f:65:43:97:de:
d6:64:bc:f8:ce:08:c6:24:8c:75:98:87:76:06:03:
44:9d:91:ca:4c:ce:a8:b2:61:23:7e:36:ec:fc:88:
79:3d:78:0d:50:04:c7:94:2b:46:ae:a3:6f:31:e3:
b8:38:bb:b3:6e:9e:56:7e:03:f8:f3:59:98:a4:a3:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:00:FD:EC:79:10:3B:49:CB:F7:0F:EF:92:5F:83:5D:22:1E:71:87
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:10:05:62:6a:98:c9:a8:06:22:8a:63:1e:58:dc:57:c6:47:
79:b7:fe:35:86:95:e2:37:2b:4e:80:b7:62:af:b4:4e:c4:2a:
2a:f7:b9:bb:78:5d:d0:fd:9c:7e:68:87:45:dd:8a:de:63:b2:
f2:19:7b:d9:5a:9a:99:51:1a:17:b7:58:ea:19:6a:c3:47:6c:
2f:ee:8e:0b:41:3c:eb:a6:a8:a1:90:85:cd:d4:a0:e3:30:79:
3b:1a:97:cd:2f:c1:ef:f9:ec:9f:f8:a6:fe:cc:e4:0b:c5:1c:
0e:28:42:3a:e9:7e:60:64:c3:fe:98:3b:8a:74:75:1c:9b:e9:
34:84:42:f0:4f:01:42:b9:bb:1c:ea:06:b4:2d:99:2f:b0:44:
7d:00:70:2f:99:38:0e:4f:49:a7:0a:f6:3b:4c:cf:16:02:21:
bd:cd:e0:7e:88:d4:9f:71:76:31:27:72:01:c5:08:0a:63:d3:
1d:9f:64:e3:7b:dd:2a:fd:62:f7:5a:e6:0a:5a:b7:fa:00:4f:
a3:28:bf:1e:37:ee:29:71:8e:ea:11:70:54:e8:85:a3:f4:79:
76:83:22:bd:c6:1d:ef:65:bb:07:a2:7e:2e:e3:69:9b:7e:6c:
1c:69:8c:15:9c:2c:15:b3:3a:74:8b:23:a8:d1:25:eb:7a:6b:
37:e1:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:56 2026 by rpki-client