Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: Ho6VVsH8QeblDfFfubeSKazdr9wa6CcD+NGLJ2Rw7W8=
Subject key identifier: FF:6E:D5:9A:1F:E3:5F:C6:83:27:94:15:36:B7:C3:04:9C:11:BD:2D
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 019D2704A08F530C11453BA6C3F82B660DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: EguoIPg4SD+Wq943bjH/tXw+vuhsVVOrATBpyfVlGdw=)
2: iyOoKbcuiPTHCLxMCiy7DxXr5rk.roa (hash: PXqcza2cwz/3mR448+fTEDzYFSGuytoJUnD8yJR22Mo=)
3: rjqoaksN8bIK2O4SRzuLcMffaQQ.roa (hash: YtctfngTDGfahIUPg5R6y0N3cZYKDE1Tr+6r4LZlIhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a0:8f:53:0c:11:45:3b:a6:c3:f8:2b:66:0d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=ff6ed59a1fe35fc68327941536b7c3049c11bd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:39:30:01:fa:05:00:98:45:6b:41:ad:5e:
14:24:7c:88:61:b7:01:05:36:2f:67:05:39:ce:b4:
0b:34:2a:d5:a9:88:e9:69:e5:d8:2f:09:5e:f6:fd:
0d:70:57:a4:9e:08:52:61:e7:49:aa:b2:fb:76:13:
98:79:f5:8b:c2:14:f6:04:fd:6e:36:16:4f:10:6a:
69:15:55:1b:2c:ba:cf:3e:71:cb:c2:a7:18:6c:28:
68:07:59:83:d4:35:56:d8:18:35:5e:f5:68:b9:4a:
37:8f:ab:64:00:d5:50:69:00:d7:c0:78:e4:6f:29:
01:2e:a8:d7:5c:7d:d3:43:9f:9f:50:a9:ac:5f:ff:
fa:90:6d:9c:87:aa:52:32:e0:9b:21:2f:9e:41:26:
55:80:97:eb:1b:11:34:e0:92:76:6c:96:84:d6:ec:
02:16:59:c4:4d:90:d0:06:75:36:14:2a:89:3a:26:
f8:32:62:ab:b0:ac:02:bc:0b:1c:5a:13:78:1e:55:
59:bf:61:52:e0:0a:92:7d:26:98:76:fe:b3:4f:f1:
78:90:8e:15:22:b3:2c:38:b2:dc:54:c9:6e:5a:e4:
1e:e0:e6:35:14:d9:ff:3d:2a:dc:6d:e2:fa:cf:50:
56:12:44:bd:99:ee:9d:e3:aa:a9:26:ee:e2:03:65:
e3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6E:D5:9A:1F:E3:5F:C6:83:27:94:15:36:B7:C3:04:9C:11:BD:2D
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:58:e0:45:90:9e:cf:53:df:69:b4:32:fa:74:b3:27:02:6f:
09:d0:a2:f6:e3:62:86:ba:c3:5c:29:8b:0b:c4:2e:e8:21:4b:
72:97:43:0b:e1:fe:8b:9f:26:83:98:28:84:0c:7d:a5:76:9b:
9b:c3:4e:9b:80:ed:0d:a6:5e:f6:11:8c:86:a1:61:89:5d:93:
6c:55:c6:aa:e0:25:fa:92:dd:dd:5c:b4:ac:10:7d:5f:17:2d:
a3:01:0b:ea:7e:b6:e2:02:2f:a4:a7:fc:0a:1b:82:6d:3d:9b:
a2:dd:f1:53:54:9d:cb:4f:9c:7b:de:ed:3d:15:88:c3:e4:73:
d1:f2:fc:96:2d:ed:70:43:a7:bf:75:1e:7d:cb:b5:3c:fd:90:
e8:7b:89:72:94:a8:50:19:46:7c:11:ce:d1:77:06:f1:f2:33:
26:52:a7:7d:b5:d1:f7:1f:f9:ce:c7:b9:85:c8:3f:0d:dc:d7:
a8:6d:e3:7f:b2:fb:b2:dd:63:6e:98:ed:eb:7c:86:cc:eb:6d:
5a:c3:ee:b5:ac:16:08:b9:6e:3d:7c:46:a9:d3:50:79:d7:cc:
3b:22:77:a7:e4:d2:6f:c6:53:6d:98:f5:32:8b:82:67:af:39:
b1:e4:62:54:26:df:78:c0:dd:c8:d0:24:30:3c:02:c9:2f:73:
71:8f:76:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:03 2026 by rpki-client