Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
File: t_bDO_udlL0PdKc45_FtDp2gw7k.mft (raw, json)
Hash identifier: aTxktw2KmASl3hOLLlTDhJv7fULw8Gwe05aBETk+Bwk=
Subject key identifier: 28:34:7C:CA:F7:25:F7:94:E1:D6:C8:B3:CD:A2:B2:91:7D:84:AD:D5
Authority key identifier: B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
Certificate issuer: /CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Certificate serial: 019D2772D958DC7EF60B90303F3B408F23AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
Manifest number: 1858
Signing time: Thu 26 Mar 2026 00:02:11 +0000
Manifest this update: Thu 26 Mar 2026 00:02:11 +0000
Manifest next update: Fri 27 Mar 2026 00:02:11 +0000
Files and hashes: 1: ETWKLbiwaKd1T35Ze_036LWsHsQ.roa (hash: 7vkox+mkRx1q7Rh8m9YqnWM2rr0RFAvagvKpfCifdZM=)
2: t_bDO_udlL0PdKc45_FtDp2gw7k.crl (hash: XcCpW+44IPR/kF6K62p01SScVaSmxsozMYvUBnP+FOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d9:58:dc:7e:f6:0b:90:30:3f:3b:40:8f:23:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Validity
Not Before: Mar 26 00:02:11 2026 GMT
Not After : Mar 27 00:02:11 2026 GMT
Subject: CN=28347ccaf725f794e1d6c8b3cda2b2917d84add5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:60:c9:dc:06:44:4e:98:ee:34:ca:29:28:
25:3d:ec:d5:a0:16:55:41:bc:9e:ce:54:79:f1:7a:
24:81:e7:4f:65:bb:99:37:64:5a:7c:b6:9f:26:cd:
db:2d:e6:77:81:1b:82:b5:82:1e:48:86:0d:da:db:
7c:48:af:0b:df:7c:eb:88:4a:5d:3f:aa:74:25:99:
13:24:26:a6:8c:25:2f:d4:98:bc:57:d3:3d:a6:c3:
7c:0c:f1:bf:e6:d7:3a:1a:e0:a1:f8:fc:f7:fb:7a:
23:01:bd:86:d1:1e:5d:48:9b:c5:12:5c:08:16:32:
9f:48:10:97:25:4e:c0:ac:4d:5f:b1:ef:b4:6d:6b:
c1:c8:0f:85:7b:cf:b8:33:2d:ea:ec:c1:2b:a1:55:
3a:e4:15:d4:c9:59:0d:c6:c8:0e:ac:d1:2d:99:d6:
57:3a:c6:46:01:7f:c9:e3:3f:06:ac:a4:14:e7:9e:
f3:01:6f:a7:14:7b:52:a4:ec:88:1a:d9:88:2a:e7:
7d:eb:be:22:52:91:48:9d:5b:c0:41:6b:d5:7c:e6:
fd:64:9c:6d:0a:1b:0b:87:27:69:31:6c:9a:5c:2e:
af:3d:30:c5:85:db:f5:7a:b8:32:f5:c8:19:22:82:
a8:51:95:50:4a:7f:0c:d3:e4:cf:0b:7c:2f:e2:71:
81:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:34:7C:CA:F7:25:F7:94:E1:D6:C8:B3:CD:A2:B2:91:7D:84:AD:D5
X509v3 Authority Key Identifier:
keyid:B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0c:a8:0c:81:2a:65:e1:fc:15:ff:33:0f:d1:1a:da:29:4a:
46:74:5b:68:d1:53:0c:18:50:e1:21:84:d5:db:a1:74:4f:7f:
ca:75:5e:12:0b:26:44:eb:19:8c:3c:a0:4f:f2:a0:75:d6:09:
cf:94:75:c3:bb:d0:d6:ba:86:71:05:58:33:0d:07:7b:f9:0c:
60:5f:cb:92:f9:55:3f:47:fe:ca:b4:79:4a:5f:8c:84:f3:3a:
07:c0:f3:9c:e7:5e:65:e2:ee:06:19:a3:72:b1:d3:de:f7:81:
1a:b5:bf:7c:ab:d5:d9:20:65:55:57:75:49:95:09:4b:78:e8:
4b:79:ec:a3:75:6d:fe:7f:67:f8:b1:ce:02:ca:70:33:60:6d:
d2:f3:f6:2f:ed:e9:c9:b3:c7:cb:c3:b1:39:96:d0:af:5a:d9:
68:32:c5:5e:ef:59:c0:5d:c7:84:23:2e:99:7c:08:e7:41:e0:
94:e8:50:54:db:55:15:fb:93:71:ed:3f:9a:68:1d:36:ed:c0:
e1:a3:c4:90:f7:a6:24:ee:f6:7e:3f:47:9e:94:80:86:c7:65:
ed:23:c2:51:c9:5c:a5:ea:c3:06:88:cb:7a:09:1f:ed:88:7e:
76:0a:6f:f2:c0:5a:30:d4:a2:f8:10:15:f5:7c:74:8e:ae:32:
81:c3:c7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:33 2026 by rpki-client