Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: 4ULexcJl/4edFBmwZgl7KJRBvpmyiJzKUwe5PPmMnjg=
Subject key identifier: 50:2D:ED:66:CE:1A:A9:6C:51:EA:4F:0E:E9:D6:42:27:59:44:E2:98
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 019D28845D91B0DDC2486DA69549EBA2DB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 05:00:56 +0000
Manifest this update: Thu 26 Mar 2026 05:00:56 +0000
Manifest next update: Fri 27 Mar 2026 05:00:56 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: vFIS2xrivZSRylYpnuqeOMoB0k5NTimPARWqZppWmGE=)
2: oT3Rxl2OFf4kaJDbTi8hc1n-RvM.roa (hash: U0lf5akSoaRZ7m2KsTwFQy8jypSmGTV7L8sismPyTHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:5d:91:b0:dd:c2:48:6d:a6:95:49:eb:a2:db:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Mar 26 05:00:56 2026 GMT
Not After : Mar 27 05:00:56 2026 GMT
Subject: CN=502ded66ce1aa96c51ea4f0ee9d642275944e298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:bf:b8:a6:95:22:2f:fd:88:5e:17:5c:7d:a3:
35:ff:83:fd:67:a5:bc:5a:97:94:3a:fe:f9:e2:6d:
cf:8f:87:7d:ea:a6:1a:95:4b:0e:e1:d5:31:b0:b2:
e3:17:dc:d7:c9:a7:9f:80:ac:05:d1:f1:83:41:bc:
7d:78:e5:38:4c:b6:10:3d:32:43:65:35:a9:58:4d:
b6:4e:58:10:1d:21:7e:0f:54:00:20:7e:d2:eb:68:
3e:14:0e:33:0c:83:bd:8d:46:02:dd:56:58:31:09:
e0:ab:da:e0:c6:84:08:a9:84:5f:2d:2c:66:db:a9:
f7:94:d7:d6:42:b8:55:9d:7c:52:ab:4d:3a:74:45:
b2:19:49:69:e6:e3:1a:f8:d4:e1:d1:2d:60:5d:f9:
2f:d6:d5:54:64:94:8d:58:c2:c5:d7:d3:6e:b8:f1:
7d:2a:d5:18:e3:e0:3b:61:13:45:a1:e2:65:4b:aa:
13:e9:95:1f:90:e2:57:0b:9a:05:2d:06:ad:e9:e5:
5b:37:2c:8b:c8:ad:bc:8d:07:6c:7e:88:b4:29:4b:
6a:ee:cc:75:6d:95:e7:5f:38:4b:ab:75:bf:12:2d:
e0:19:22:0a:a4:91:73:3b:14:4c:94:85:83:f6:8b:
e6:7c:fd:2e:e3:8d:8a:ba:ab:7c:ce:2e:ce:1d:88:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2D:ED:66:CE:1A:A9:6C:51:EA:4F:0E:E9:D6:42:27:59:44:E2:98
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2a:8e:1d:7a:92:ba:c0:8f:44:1a:d1:f9:b1:fc:c7:32:e3:
6a:92:01:3f:4b:b5:f3:ac:1b:6e:9a:20:b6:f9:be:81:94:46:
98:3a:75:41:96:9b:06:ca:70:69:10:ff:ca:be:ce:38:0c:2d:
bf:9e:72:75:50:12:a6:3b:84:ee:12:6f:cf:45:59:d1:be:2d:
6e:af:a7:87:9e:10:c2:49:e0:95:73:95:a4:2f:55:71:88:3f:
9f:ac:01:d3:fb:f7:a0:d1:5a:59:aa:60:e7:f3:d0:7f:d7:6b:
78:2f:d5:ad:de:86:fe:70:cc:b3:a8:65:53:a9:5a:07:65:bf:
89:9b:d2:98:b8:d8:af:a9:cf:bf:5f:ca:1a:7e:8a:3c:5c:58:
46:50:8a:5b:23:cf:8d:7e:bf:21:b1:2e:28:d1:ee:14:48:f9:
5b:18:f7:64:99:fd:93:ef:94:b2:9b:ab:46:41:f8:c8:3f:12:
84:08:e2:11:1c:3b:75:1d:d3:16:08:7d:3f:3a:03:04:56:94:
71:81:ab:76:11:40:16:95:5f:38:66:9e:68:82:87:e0:48:ed:
e2:e6:f6:f2:f1:74:41:2a:bd:e0:0e:07:6a:fb:01:1d:a0:cb:
bd:59:bd:d3:94:45:c4:3f:f5:eb:3d:d8:49:d4:ed:a8:ee:32:
75:0f:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:20 2026 by rpki-client