Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
File: _sY8Uk5V3zS_dYKCd1PnenaZx6I.mft (raw, json)
Hash identifier: dnwYJ5TSiDjy52O+PddzOAJEFMTb/zx5mpudkQVeIco=
Subject key identifier: 1C:46:A4:8A:E1:46:C9:7D:33:EF:60:7B:18:5F:A7:04:F8:75:93:FE
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial: 019D27DFA5E314274382DAB2FF7F2BE5BA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
Manifest number: 148D
Signing time: Thu 26 Mar 2026 02:01:01 +0000
Manifest this update: Thu 26 Mar 2026 02:01:01 +0000
Manifest next update: Fri 27 Mar 2026 02:01:01 +0000
Files and hashes: 1: PDlzLdRSfiCWn5Cn9n1N3CZ3lEA.roa (hash: EEEk6xoAWgV2qpYCMx9BhEvvCT14wds/MjLsIpjnFvU=)
2: _sY8Uk5V3zS_dYKCd1PnenaZx6I.crl (hash: qPfXA7oV9jD+HIn2lJbhpJ3gTW9b1Z50XvKs3pyr3YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a5:e3:14:27:43:82:da:b2:ff:7f:2b:e5:ba:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
Validity
Not Before: Mar 26 02:01:01 2026 GMT
Not After : Mar 27 02:01:01 2026 GMT
Subject: CN=1c46a48ae146c97d33ef607b185fa704f87593fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:ad:63:07:14:26:45:96:5d:e6:b4:a7:0b:
57:d5:37:55:85:c3:2a:3e:8b:d4:95:22:12:46:73:
a3:74:27:fe:69:31:04:4d:b8:50:ec:43:02:d1:a3:
96:52:73:d8:e6:9b:88:f7:9b:4f:13:d0:ab:d1:51:
c9:ec:25:93:02:37:24:e1:2c:c2:fc:1b:55:57:d5:
32:2b:4a:bd:04:07:16:49:ea:3b:ac:e4:87:7c:f8:
cc:e0:19:ab:d7:30:ff:2d:8c:3f:a6:d8:20:d2:a8:
71:d5:1a:9b:9b:7f:4f:05:19:0a:75:61:89:03:ea:
f3:e0:18:c0:87:1e:ba:1d:74:29:2e:45:cd:14:04:
ba:10:e8:c6:6c:6f:c6:58:7c:10:e9:f3:c6:4e:2e:
11:6a:5a:dc:b6:51:88:b8:fa:0d:11:f7:dc:56:a6:
b1:0b:58:97:09:98:b6:df:c2:79:aa:bf:ff:4b:f9:
d7:e1:bd:be:67:53:2e:83:27:3d:49:f8:5b:9f:d5:
36:fc:46:15:cc:73:56:7c:bc:14:7d:29:ce:c2:b4:
72:bb:7b:0d:25:55:38:c4:19:a6:21:54:41:35:75:
e2:d0:ce:8a:a7:8f:8d:86:77:48:e0:03:60:80:56:
13:3f:03:0d:60:f4:40:05:88:d7:a3:25:c1:f5:50:
58:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:46:A4:8A:E1:46:C9:7D:33:EF:60:7B:18:5F:A7:04:F8:75:93:FE
X509v3 Authority Key Identifier:
keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f3:d7:c8:26:a2:07:a4:cb:43:25:3e:02:22:a1:ac:85:91:
c4:47:45:d1:c5:b9:5c:87:77:ab:5c:57:3b:2a:e7:bc:13:1b:
8b:9f:2a:c4:56:55:59:6c:6b:b5:48:de:06:a2:0e:88:f5:c1:
66:59:88:87:39:ed:ff:59:fa:7c:a3:f4:bd:bd:8a:9a:60:f8:
31:3a:b3:71:8e:e4:74:f9:60:a4:95:7c:d0:e6:b9:49:d1:86:
b8:82:d0:5d:ec:e1:19:e2:37:3a:2b:47:5a:15:e4:52:5a:c3:
de:db:36:9d:25:16:18:88:05:2c:c0:9b:2c:44:bb:79:92:83:
f4:32:d1:27:4b:5d:66:a3:93:dc:a3:6a:ae:4c:d8:6b:50:b3:
39:66:77:bd:90:27:5b:21:e5:12:92:1e:5d:5f:b9:3a:02:88:
6d:57:8a:d8:d8:96:b3:11:af:61:ff:3b:3a:e5:4e:4d:dc:4e:
94:b5:68:4a:9a:e9:37:dd:79:75:e0:91:57:3d:c0:40:b6:8c:
7e:e2:b6:b2:7b:ca:c0:13:75:d4:29:88:44:c6:22:ab:50:40:
22:07:d7:50:83:68:67:b2:c9:30:97:0d:69:14:a8:5a:bb:0b:
b5:6e:44:a3:c3:17:0f:a3:ab:28:8c:0d:73:ed:47:33:2d:b9:
3b:d3:e7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:41 2026 by rpki-client