Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier: BSLLLzJQgpqKehXDpHA+lvHebGaOa3ewl6UuyHCdvsM=
Subject key identifier: BD:12:2C:B8:94:B9:4C:B6:AE:2E:9B:D5:27:3C:96:C5:FA:D7:E8:BF
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 019D273AC38BF1E9C01A80D0A20D3C1C097B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:00:55 +0000
Manifest this update: Wed 25 Mar 2026 23:00:55 +0000
Manifest next update: Thu 26 Mar 2026 23:00:55 +0000
Files and hashes: 1: 73A6WhDa3wlQfJZrJ4S5PeiZvCA.asa (hash: tBmvBR7N9kmQj/BVxuXrieLkXDqq6lxu2Xvh+wlDPa0=)
2: OTWhYyuLQkjCKbz9jUHCD19EFpo.roa (hash: vWGmjIJCSNv5fdFMpQ8zZyjmVzro4Z5X4Sdye++7cOU=)
3: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: zzyUxfGbVOSGTRCYJoKE2Hfwgx7o9HPh1LuhOSKwJPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c3:8b:f1:e9:c0:1a:80:d0:a2:0d:3c:1c:09:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Mar 25 23:00:55 2026 GMT
Not After : Mar 26 23:00:55 2026 GMT
Subject: CN=bd122cb894b94cb6ae2e9bd5273c96c5fad7e8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:a9:ac:17:97:81:f2:bd:ef:a3:89:79:0c:
23:25:00:e3:2a:5f:28:b1:2b:37:b7:22:12:ec:e7:
00:b5:11:29:7b:45:31:04:30:48:e1:a2:f4:ea:b0:
c1:b6:4d:24:32:33:35:19:f9:f7:6e:35:65:4a:05:
a5:ee:ea:19:54:a1:bd:0c:3d:37:eb:5b:54:ae:b8:
4d:94:b4:50:8c:83:d6:25:4e:fa:c8:ee:94:a2:c2:
c5:a2:e6:47:3d:15:ed:b4:7c:9d:e0:e6:3f:4e:6e:
84:b7:6d:e1:bb:ff:e2:8a:8a:6a:33:94:d6:77:12:
89:08:e7:d5:8f:02:94:64:de:68:03:9e:b3:1d:6d:
d0:b7:68:a0:6e:9d:64:dc:7f:25:99:23:aa:f4:fb:
4c:06:cb:d9:42:0d:28:dc:93:2a:f3:b3:13:0c:8d:
2f:99:2c:08:bf:ea:0b:5d:61:df:9a:c1:ed:2d:f9:
19:3a:bd:67:fa:3b:aa:de:9f:e7:2d:ae:6b:f1:3e:
c7:9d:f1:ff:f4:8f:9d:f3:d9:8e:77:82:a8:29:d9:
5c:b2:69:29:90:89:2e:21:72:c4:47:59:14:ce:c8:
c9:a3:5a:3c:2e:8c:73:83:44:c9:37:50:ba:fc:a3:
4e:02:f9:40:0b:57:80:79:73:67:de:e9:5e:7e:06:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:12:2C:B8:94:B9:4C:B6:AE:2E:9B:D5:27:3C:96:C5:FA:D7:E8:BF
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:43:a7:9d:61:35:b2:e2:1e:3b:17:c7:19:52:71:c2:f8:af:
39:c1:4c:5f:cc:39:c8:71:4c:6b:1b:a8:ed:26:54:09:21:da:
7b:ff:d7:c6:bc:05:79:00:0d:b2:ce:c9:c9:01:fc:32:8c:a9:
a1:93:0e:1a:6f:6a:60:a9:8e:f7:a0:37:58:41:1b:70:31:94:
e2:58:bc:e8:d1:4b:20:e6:50:ae:0f:c9:50:9a:cc:35:eb:96:
73:b4:99:12:c5:da:a1:7e:fd:a1:7e:7c:18:cc:c2:bd:6a:17:
c3:42:ec:7a:5b:9a:e9:d2:87:4c:81:09:35:d1:83:16:e8:68:
91:5c:2f:7c:3a:81:11:14:15:0a:95:7f:7c:2a:c6:ff:34:1c:
83:85:a3:7f:28:45:ff:95:96:7b:47:94:d5:b7:d7:e9:21:f2:
ea:3d:82:23:f3:ed:64:91:1d:72:4b:34:99:92:6a:35:ae:82:
36:c4:78:73:ea:a9:fc:77:74:fb:61:9f:3f:1d:32:fc:4e:4f:
25:cd:60:2a:79:d9:50:b6:8f:1e:fa:01:ca:d9:15:94:5e:98:
29:5d:20:ef:85:f0:6d:16:5c:f1:11:06:fb:f4:81:23:b6:be:
69:56:36:e6:d0:c2:ae:cf:9d:7d:41:d6:3a:76:dc:bf:2b:ff:
ea:fe:6c:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOsOL8enAGoDQog08HAl7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGFlYTUzZWY2MGY4YThhOTM0NWU1ODI5ODJhOWE1OWJj
MTM3NjcwHhcNMjYwMzI1MjMwMDU1WhcNMjYwMzI2MjMwMDU1WjAzMTEwLwYDVQQD
EyhiZDEyMmNiODk0Yjk0Y2I2YWUyZTliZDUyNzNjOTZjNWZhZDdlOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue+prBeXgfK976OJeQwjJQDjKl8o
sSs3tyIS7OcAtREpe0UxBDBI4aL06rDBtk0kMjM1Gfn3bjVlSgWl7uoZVKG9DD03
61tUrrhNlLRQjIPWJU76yO6UosLFouZHPRXttHyd4OY/Tm6Et23hu//iiopqM5TW
dxKJCOfVjwKUZN5oA56zHW3Qt2igbp1k3H8lmSOq9PtMBsvZQg0o3JMq87MTDI0v
mSwIv+oLXWHfmsHtLfkZOr1n+juq3p/nLa5r8T7HnfH/9I+d89mOd4KoKdlcsmkp
kIkuIXLER1kUzsjJo1o8Loxzg0TJN1C6/KNOAvlAC1eAeXNn3ulefgavuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0SLLiUuUy2ri6b1Sc8lsX61+i/MB8GA1UdIwQY
MBaAFHRK6lPvYPioqTReWCmCqaWbwTdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZDM4Y2MtYzBmNi00MDE4LWI5Mjkt
OWI2NGMyNTE1NmI5LzEvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy82ZDM4Y2MtYzBmNi00MDE4LWI5MjktOWI2NGMyNTE1NmI5
LzEvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0kOnnWE1
suIeOxfHGVJxwvivOcFMX8w5yHFMaxuo7SZUCSHae//XxrwFeQANss7JyQH8Moyp
oZMOGm9qYKmO96A3WEEbcDGU4li86NFLIOZQrg/JUJrMNeuWc7SZEsXaoX79oX58
GMzCvWoXw0Lselua6dKHTIEJNdGDFuhokVwvfDqBERQVCpV/fCrG/zQcg4WjfyhF
/5WWe0eU1bfX6SHy6j2CI/PtZJEdcks0mZJqNa6CNsR4c+qp/Hd0+2GfPx0y/E5P
Jc1gKnnZULaPHvoBytkVlF6YKV0g74XwbRZc8REG+/SBI7a+aVY25tDCrs+dfUHW
Onbcvyv/6v5suQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:34 2026 by rpki-client