Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
File: rdbXV2zSgkXGefmvNXXANbiiLJ4.mft (raw, json)
Hash identifier: szBtpechz+mvy+lr6sYwnme6iKd5KIjudxndfby6Cx8=
Subject key identifier: BE:E0:97:AD:F9:FA:03:27:1C:3B:26:DF:F1:8F:77:1F:4D:8D:BD:49
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 019D27E0334DCEA70908F2883F5CFB626EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:37 +0000
Manifest this update: Thu 26 Mar 2026 02:01:37 +0000
Manifest next update: Fri 27 Mar 2026 02:01:37 +0000
Files and hashes: 1: joEsumTHciP98sJSMtMVqKDplEM.roa (hash: ZNbfRxAe2BDrdXHR4GglfBv9LGkAz/jS+0EycaNDrzI=)
2: ndNvMD_GDyNAhabTWw8ewxtAhqA.roa (hash: hQpqZkD2p1H85fPt4GP6Omlnztm1FgKn0n0N3ljTpv0=)
3: rdbXV2zSgkXGefmvNXXANbiiLJ4.crl (hash: 3GLiQoDzgVXtMktGzgZnE3YbuabiJ0MQXZd3ejZyxow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:33:4d:ce:a7:09:08:f2:88:3f:5c:fb:62:6e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Mar 26 02:01:37 2026 GMT
Not After : Mar 27 02:01:37 2026 GMT
Subject: CN=bee097adf9fa03271c3b26dff18f771f4d8dbd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:bc:f8:f3:d9:d5:01:71:e5:6e:ed:0d:28:
16:bc:9e:69:67:5d:11:b4:df:0d:34:f8:ab:45:63:
65:36:ab:b1:cd:33:17:54:fa:19:d1:f4:44:d4:a7:
8e:45:cd:37:57:a2:6f:a6:c5:16:e8:ba:65:19:7f:
37:55:1c:59:4a:e2:a8:e7:87:28:50:58:90:fb:8c:
f6:78:83:b1:11:bd:3f:f3:2c:a1:4f:81:f5:4d:81:
21:f8:1b:9a:f4:a1:40:6f:b5:cb:58:ff:5e:f1:e0:
ad:ac:bd:a6:f6:c9:00:19:0b:71:48:ea:ac:bb:76:
1a:04:97:1b:47:58:bb:f5:0a:54:86:29:91:af:0a:
f2:61:7b:48:e3:23:d4:c7:4c:a8:77:ce:bb:f0:15:
c8:26:28:9b:9c:79:ad:a9:4f:c2:25:05:37:04:43:
ca:86:33:ee:5d:61:93:fd:ed:43:0d:f6:70:a2:1e:
26:d5:14:a2:7e:4b:83:be:28:63:fe:08:25:4a:f9:
6d:d1:01:b9:f9:a3:a2:74:c1:3e:08:e5:94:1b:eb:
e6:b2:e5:db:22:35:02:0e:e4:71:19:d5:aa:4e:91:
20:75:95:06:9a:c2:0f:af:72:90:b7:2e:0d:68:d1:
75:ef:03:e4:19:cd:f7:c5:a7:36:ea:b3:2f:f6:e5:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E0:97:AD:F9:FA:03:27:1C:3B:26:DF:F1:8F:77:1F:4D:8D:BD:49
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a6:d7:fa:7e:6a:2d:d7:57:8b:e5:43:b8:35:e7:fc:0b:5e:
91:69:ad:ea:ad:31:f4:3b:58:bd:a7:a4:ba:74:35:f2:b8:e5:
ea:8c:67:6d:4c:fd:ba:c8:97:95:15:4a:de:9f:91:2d:6d:d8:
27:7f:88:f7:34:47:b4:47:c2:e1:7e:f6:c3:fc:21:08:2e:89:
2a:a2:3d:b9:11:69:e8:af:6b:97:d6:3d:bd:77:f8:df:b3:4a:
fc:9b:66:09:ee:d5:fb:18:d4:84:2f:34:2c:75:39:8a:47:74:
39:ab:4d:6f:b6:a1:a0:59:89:1f:6d:7c:6a:c2:ce:cb:d4:12:
ec:24:fe:3d:d2:49:a9:58:8e:2e:1d:a5:f3:83:34:76:eb:af:
1b:c3:b3:95:62:6d:43:41:ff:45:a8:8b:13:fa:a9:25:84:08:
33:42:04:f2:56:41:0f:fa:43:76:06:f1:57:db:77:4c:c2:a9:
06:fc:44:0e:7e:3c:67:02:51:0f:3a:e8:ce:22:78:5d:61:ba:
61:20:76:e6:b5:e6:0e:e0:d8:56:8f:4c:1e:ce:fa:fb:49:ec:
95:88:59:fc:34:86:ab:75:1c:24:45:0c:2f:6e:6f:95:d0:92:
60:46:e3:ff:e6:2f:7c:84:20:4e:8b:6c:06:54:c7:dc:cc:a4:
c2:67:c5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:02 2026 by rpki-client