Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: MZBF0I/zxBIP5iMa7LHzBTSbVqwLrkNMvqit2AikCxE=
Subject key identifier: A4:07:8B:CD:55:2A:75:E4:F6:10:10:FD:DB:E5:8A:BB:04:E5:5A:9F
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 019D2628329AC1CBB5D13A28E55F4D757FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 18:01:01 +0000
Manifest this update: Wed 25 Mar 2026 18:01:01 +0000
Manifest next update: Thu 26 Mar 2026 18:01:01 +0000
Files and hashes: 1: H7fYzgAywiwtcT8-20X5WOux6fs.roa (hash: h+Uh5Kz1qJdgzCKaZAX98ps/QJeCnLPBc45Zv+eXiYA=)
2: cHfaPvW5Vud_9pj79Xxvj7kuddE.roa (hash: bGFOgs4ZrshgcJyva0SGzm2fyOyJP6p6s4rmZXREF64=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: dhl3ZG1H+9N91yX04Gj4oDlPFQymtVxC2thaFdF00XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:32:9a:c1:cb:b5:d1:3a:28:e5:5f:4d:75:7f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: Mar 25 18:01:01 2026 GMT
Not After : Mar 26 18:01:01 2026 GMT
Subject: CN=a4078bcd552a75e4f61010fddbe58abb04e55a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:fb:4e:f8:57:50:37:f7:f0:68:72:b8:56:
f6:b1:4e:ea:d5:e5:eb:db:c7:42:35:ca:15:ee:f2:
c9:f4:aa:c5:24:26:a6:9d:52:7f:33:fd:68:06:14:
2f:c7:3d:50:f9:09:4a:0f:d8:e6:22:c7:d0:07:5d:
ec:a6:9d:36:91:ac:7e:ed:48:ac:8a:51:f6:c2:75:
c3:9e:3d:3e:99:87:9a:0c:9e:a8:d7:35:4a:36:8d:
9e:d8:e1:f1:1f:04:cd:fb:12:32:a8:ef:a8:11:81:
02:b2:19:1a:d3:86:56:b6:db:ab:f2:84:41:a8:67:
fe:38:0a:ff:be:16:17:af:93:04:d1:75:f2:0a:ce:
74:bf:4b:9f:c9:bf:37:1e:97:59:12:9c:93:58:2c:
05:50:45:b9:6f:87:74:f1:ea:4d:b3:3d:4a:78:cb:
0c:dc:54:9b:8f:e9:08:ee:ee:1a:73:19:47:06:52:
7d:75:42:d3:aa:4c:49:0d:a2:71:e3:48:20:fa:4a:
83:e6:7f:c0:11:38:29:03:c7:90:a2:66:1a:11:a7:
d9:4b:61:4e:30:2f:ee:8d:fd:e1:0a:08:f5:8c:a9:
ac:eb:91:76:a1:45:87:2a:b3:41:9e:ef:74:1a:21:
08:05:29:7d:1f:40:f9:b8:f5:42:a7:e2:47:87:ec:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:07:8B:CD:55:2A:75:E4:F6:10:10:FD:DB:E5:8A:BB:04:E5:5A:9F
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2e:e8:cf:fd:d1:7d:24:79:8c:cc:46:85:6f:80:44:b9:d1:
cc:48:bb:c3:3c:66:ff:e5:dc:0d:61:eb:3e:10:10:ab:d5:86:
88:87:72:26:6b:1e:11:35:58:2e:0b:e9:f6:67:fd:2c:a9:43:
7c:3c:46:62:65:fc:0d:1a:8f:02:ed:00:47:c0:2b:18:55:02:
ef:ac:ee:db:3c:5b:88:3b:74:45:47:4e:b9:24:96:a8:3a:52:
86:56:47:88:d5:47:d7:35:50:69:3d:3d:79:86:aa:83:19:b3:
f5:d4:3b:b4:ea:e1:91:48:06:5a:ab:c5:5c:87:fc:09:d4:99:
43:09:27:25:45:dc:12:86:2c:2a:c6:02:b0:62:7b:fe:0d:9b:
db:2e:c0:79:1b:c7:6f:3b:40:0b:79:4a:0b:6b:61:62:3f:ac:
23:a4:e5:ad:67:70:7f:38:34:76:a3:40:ce:c7:16:d1:64:83:
29:53:92:2b:09:e3:2d:e8:46:a9:24:52:ed:1b:5b:05:30:7d:
ef:96:ea:0c:1b:d2:86:52:b5:dd:fe:c3:7e:84:1f:d4:e8:eb:
34:13:26:88:30:00:d0:de:55:07:5b:9f:60:61:f9:f5:e6:84:
1b:07:ba:d7:d6:9a:f5:f5:e2:dc:01:3c:ed:dd:40:d3:51:2f:
46:33:4c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:16 2026 by rpki-client