Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: NDQpzMWXsI50tB/e9TlLfMr0tMMMBDradO+3wTJXmsY=
Subject key identifier: 3B:0C:D4:39:B1:98:8F:11:66:2C:10:93:29:91:9A:B9:0B:9B:9F:B8
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 019D292993AE3650D860D89BA631C63DA2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:01:23 +0000
Manifest this update: Thu 26 Mar 2026 08:01:23 +0000
Manifest next update: Fri 27 Mar 2026 08:01:23 +0000
Files and hashes: 1: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: TTV/iZVNUhDejFpLHxTK0tgWc0FkHa1wYd5P7rP6wk8=)
2: X22P1NloWugtV33VklnsZASB77I.roa (hash: RELi8S+QmS5zizjTXUSelucOgYS8Q6L5FGNYX0riiUs=)
3: qZ8lYrTAES5IWyxZQZaEefS3YC0.roa (hash: TigOEyk/IxeMvvOho4DCoJ6pinlkySdim2c4kDHjteo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:93:ae:36:50:d8:60:d8:9b:a6:31:c6:3d:a2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Mar 26 08:01:23 2026 GMT
Not After : Mar 27 08:01:23 2026 GMT
Subject: CN=3b0cd439b1988f11662c109329919ab90b9b9fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:bb:bb:9a:6c:91:1a:32:c4:f3:00:c4:c8:
1d:ba:15:d5:17:7b:6a:dc:ba:3c:50:f7:4e:82:37:
10:43:a9:b5:b8:18:14:ee:4c:f1:67:20:f8:f3:8c:
07:78:c3:99:aa:12:1d:27:2a:3b:9e:b8:8a:ba:bd:
7f:43:a7:01:1c:5c:7e:82:f3:fb:a8:b4:eb:71:58:
8a:ae:89:03:6b:40:86:95:d1:02:ff:99:0c:35:7f:
0c:fe:10:9e:3d:94:a0:dd:d6:36:b3:47:63:7e:f5:
04:76:8d:8a:3a:5b:72:7a:88:5f:70:5c:ea:c1:bd:
06:91:61:36:f7:e3:48:c8:b8:c4:77:fb:7d:ff:93:
d2:78:98:87:30:74:82:0f:13:c3:f3:12:df:0e:c0:
72:38:30:00:fb:ba:fa:94:32:e6:f3:78:cc:83:b9:
37:12:75:37:38:d1:56:e8:2b:ef:f5:c8:0f:c1:01:
4e:1e:5b:c2:e1:52:ec:2a:7b:a2:c8:c5:a8:2a:87:
6b:12:30:19:0a:90:a8:e3:03:30:db:ea:01:02:0c:
b6:ce:ae:3c:b0:e4:55:30:67:b9:a4:21:84:b2:32:
7a:fb:a9:1a:85:03:4b:db:82:55:92:68:f4:7e:2d:
50:aa:99:44:bd:40:7d:b2:db:b5:60:30:3e:b3:7e:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0C:D4:39:B1:98:8F:11:66:2C:10:93:29:91:9A:B9:0B:9B:9F:B8
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:88:52:35:99:b0:c8:07:15:ac:90:79:97:2d:54:ba:39:37:
ae:79:e9:82:dc:6c:43:b0:71:27:12:90:17:08:d5:47:7e:e2:
5d:07:f8:02:14:87:c7:3c:e1:a6:b9:72:d9:a6:8d:19:7e:0d:
56:12:cc:89:87:91:8c:75:ae:5e:6b:c0:d6:55:b0:c6:d6:72:
69:0d:4a:c0:89:21:2c:80:d7:73:3d:5e:9c:7e:f3:9a:1d:1b:
f0:cb:b0:66:1e:28:40:1a:f3:95:9b:8e:e6:00:38:07:34:41:
05:54:9f:2b:d6:d7:1c:ce:f4:97:1a:c9:52:8e:24:10:c8:f3:
c7:1a:63:de:cc:c9:00:80:d6:0e:8f:1a:ca:c0:cc:44:72:03:
1e:4d:f2:f0:7f:e5:00:c1:37:f8:50:00:22:05:6f:3c:67:64:
06:cf:a9:37:70:d9:ef:e5:ec:b2:45:d9:f4:f4:60:6c:dd:61:
d9:bd:f5:2a:f2:50:4c:de:00:e0:2e:6f:61:ff:57:b0:f2:56:
fd:89:47:6a:c9:02:67:58:5e:2e:1f:68:3f:34:35:81:c9:78:
93:4b:9d:60:b5:61:29:c1:d4:df:12:c1:08:e1:6b:61:1c:7d:
84:2e:83:71:41:9a:99:87:2e:9a:3f:d6:05:54:96:14:0c:a1:
dd:d7:19:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:16 2026 by rpki-client