Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
File: d0TGtvujc4EeAL7khOIkxrbiP9I.mft (raw, json)
Hash identifier: z/SsdsuMksPsf6x8bXARz3lGMMhBejiIJVpEwXwlGuI=
Subject key identifier: D0:76:18:81:BF:28:84:3F:7A:57:6C:E9:0A:8F:20:79:20:61:19:7A
Authority key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
Certificate issuer: /CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Certificate serial: 019D26CD2DA5CE5211E33CA62665FCBA1263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:13 +0000
Manifest this update: Wed 25 Mar 2026 21:01:13 +0000
Manifest next update: Thu 26 Mar 2026 21:01:13 +0000
Files and hashes: 1: d0TGtvujc4EeAL7khOIkxrbiP9I.crl (hash: x3/XaD+JmOYxkAufnfCBlY6gHCsD/eXYxzEK+TWVesw=)
2: heI6_nt9P_HwBy_T8oGJnHTTh5g.roa (hash: u5XqVFg6oCgpt4OHeWuXYXSoPOakGmDYPh6j3OSR1w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2d:a5:ce:52:11:e3:3c:a6:26:65:fc:ba:12:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Validity
Not Before: Mar 25 21:01:13 2026 GMT
Not After : Mar 26 21:01:13 2026 GMT
Subject: CN=d0761881bf28843f7a576ce90a8f20792061197a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:fe:3c:34:ac:85:db:43:2c:c1:7c:22:8f:
48:c4:af:28:9f:b4:90:ea:81:3e:0f:7b:b2:47:4c:
41:18:69:31:1d:e7:76:b6:41:1c:b9:dc:19:4e:ca:
8a:94:91:34:b0:91:a5:77:e9:89:af:8f:e2:e8:bc:
32:e4:92:29:e9:6a:d5:ca:f9:50:dc:3b:4e:05:52:
11:42:3a:14:47:9c:d6:11:8c:fe:c7:82:81:68:92:
63:cc:cf:bc:55:09:36:76:e1:91:76:aa:d5:7f:da:
72:6e:83:8a:91:b7:96:35:82:13:26:b3:5e:07:ed:
d3:33:a3:df:56:d4:ea:e6:e3:dc:e5:af:4e:8f:de:
c1:4d:ce:0a:6e:cd:0b:3c:57:5b:05:f0:91:92:6d:
08:8b:c4:b0:12:41:50:08:89:1d:5f:79:b9:ce:89:
1f:6a:5b:01:95:aa:31:d9:87:c0:85:c6:33:1e:13:
3b:56:cd:53:0e:3b:13:fb:8a:75:45:df:a3:87:2f:
f5:94:02:89:99:fd:9b:5d:39:b3:2b:f9:b0:29:b9:
99:ae:8a:7f:dd:eb:c7:a1:6d:a2:b7:7b:12:84:ac:
00:a4:e8:7c:cc:8d:75:fc:76:4c:a8:6e:4e:16:e3:
69:54:9f:64:5a:6a:7a:8b:d2:5e:ba:b4:c7:90:d0:
bc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:76:18:81:BF:28:84:3F:7A:57:6C:E9:0A:8F:20:79:20:61:19:7A
X509v3 Authority Key Identifier:
keyid:77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7d:a3:a9:36:62:c8:04:ac:b2:09:54:2b:01:b5:e8:4d:21:
8f:30:e7:d1:81:3c:77:be:53:6e:c7:40:63:32:f7:12:3c:85:
a4:1c:49:70:dc:07:bd:e4:10:e7:ed:26:76:db:f6:42:35:34:
7d:a7:f4:c5:f5:a9:d9:3c:a5:2d:47:2a:32:5e:f8:81:cd:db:
a2:d0:d5:4a:78:f7:31:66:f4:ca:51:58:12:08:84:7b:c4:0f:
01:c2:6a:62:5e:62:ec:d4:2c:20:ad:12:ee:1a:87:15:ac:c2:
f4:5b:60:84:13:02:2b:dd:25:87:4e:b5:43:9f:81:bf:c3:12:
4d:0c:68:2c:f2:c6:46:1d:c8:6e:62:a0:ea:da:22:bb:57:b8:
2d:41:bd:2b:e3:6f:38:62:03:45:77:28:92:cf:bf:59:f8:c7:
d8:c4:11:d3:ee:f8:5c:7f:89:9e:2a:29:fd:45:12:a6:75:92:
50:09:91:23:d9:94:cd:f2:11:91:55:67:0b:35:b2:c2:55:1c:
78:55:27:ab:5a:e2:3d:be:0c:51:c9:b9:c6:8a:53:f5:68:2e:
a4:ae:91:2d:2c:73:26:0b:96:e8:9f:55:4f:63:6a:7c:85:bd:
ec:7d:14:ee:1a:4e:dd:3a:ee:3b:e6:1a:8e:b5:b4:dc:fc:41:
92:f7:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:12 2026 by rpki-client