Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
File: rN4jWPV0OcRPaxZi9VYVoKq2uss.mft (raw, json)
Hash identifier: idZYQXhlcmt1vQJpBcO6LvlcbaO/cgRxiVp/Fm9lccE=
Subject key identifier: 93:5C:CB:99:04:FE:97:D8:CD:E7:DF:94:F5:0F:37:6D:CF:67:F5:C4
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Certificate issuer: /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial: 019D28F2134BF533F3ACF4E90F0C19ED80C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:00:46 +0000
Manifest this update: Thu 26 Mar 2026 07:00:46 +0000
Manifest next update: Fri 27 Mar 2026 07:00:46 +0000
Files and hashes: 1: DKnBvGIE9iqjrZPZMqeWH0unajs.roa (hash: TT/s0k//yUcEj92PO7ED9oag8g35ZTDpkDcHBo8y524=)
2: p4WliZo-ae5PgJyIeuO1e3wlvlI.roa (hash: ombqIru3embeAfMDx9DKYU09jpQfC3EPauM5pHbeNC4=)
3: rN4jWPV0OcRPaxZi9VYVoKq2uss.crl (hash: Gd08+BMqx8AzF/IHwDZcipnBhgUmR/XubanylKlk5S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:13:4b:f5:33:f3:ac:f4:e9:0f:0c:19:ed:80:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Validity
Not Before: Mar 26 07:00:46 2026 GMT
Not After : Mar 27 07:00:46 2026 GMT
Subject: CN=935ccb9904fe97d8cde7df94f50f376dcf67f5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:34:07:35:b0:1c:94:c0:22:d9:fd:47:d0:
53:69:9f:fb:6f:61:c8:1f:3a:21:4b:5f:20:5b:2c:
03:e9:86:05:bb:23:4c:68:27:61:45:fb:eb:0c:fb:
da:4c:27:d9:54:05:bc:e5:d9:8d:1b:82:7e:46:49:
3a:f2:86:8f:68:95:dd:6a:31:c1:dc:df:20:9b:1d:
dd:89:e3:6d:83:a9:43:27:b4:b4:88:0b:0b:f4:99:
d7:8d:36:82:cb:04:e2:6b:30:b2:7a:68:88:83:0d:
a8:1f:be:89:bd:c7:48:b7:df:3f:94:fe:1c:e6:84:
05:60:e5:63:47:0a:93:a5:1d:df:c8:e0:cf:f6:e9:
55:01:1d:be:62:35:13:8f:cc:95:7a:c6:9b:8d:9e:
5a:6c:ac:fd:94:5e:2d:92:a8:27:09:27:9b:f3:e9:
5e:ab:02:4b:a3:75:fd:35:e9:32:a6:83:ef:5d:6e:
01:61:47:cf:29:42:32:5c:cf:a8:fd:ff:0a:a8:a2:
d4:06:1e:11:cc:2d:57:ef:bb:fb:e1:b1:17:fd:29:
aa:cb:9b:76:7a:69:32:e4:04:f2:35:6b:6b:8d:b1:
05:d7:57:5e:3c:63:34:21:b9:8b:2d:fc:8e:50:6b:
0a:01:9a:44:31:99:da:57:f6:10:f5:1e:26:20:f5:
16:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5C:CB:99:04:FE:97:D8:CD:E7:DF:94:F5:0F:37:6D:CF:67:F5:C4
X509v3 Authority Key Identifier:
keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ce:2a:71:b8:ee:c6:37:a6:e8:c7:62:70:80:1e:97:40:c8:
c1:3d:28:7d:eb:d3:62:ed:26:13:47:af:e9:4a:e1:f9:2f:a4:
15:be:9b:8d:1b:de:9c:85:8b:52:13:5e:b7:b8:96:45:e0:f7:
44:59:b0:04:77:20:ee:a5:d1:82:95:b6:01:71:f4:91:ec:72:
37:dd:1a:0b:90:7e:3e:af:24:7f:88:02:6a:aa:35:63:e1:8c:
98:87:d9:f4:5e:c1:58:6b:5e:e9:a5:c9:1a:e9:3a:8e:f2:0e:
92:19:c6:25:60:0c:36:81:ef:d6:f6:84:ea:7d:07:cb:45:27:
b9:b6:93:b5:e5:85:6e:d5:e9:44:f1:f7:c2:41:3d:0a:75:2b:
5f:55:b2:ca:6d:a5:c3:64:ab:74:c8:8a:dc:0d:12:6c:38:eb:
59:22:88:69:e9:ae:30:2d:9a:e2:13:d2:58:0e:9e:89:00:6e:
ac:3c:92:90:bc:87:88:82:60:af:9f:00:ed:b5:69:46:22:b7:
af:42:9d:d4:de:4c:92:a4:6c:7d:7b:78:3d:96:c2:14:7b:d9:
ef:15:55:23:f0:f7:a6:58:d1:30:8f:4f:67:99:ff:25:01:5f:
af:9b:a0:d9:64:8d:83:8b:6d:cd:fb:22:34:6f:23:56:47:a7:
67:24:34:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:07:36 2026 by rpki-client