Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
File: rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft (raw, json)
Hash identifier: WoFH1o/4HZW5YTGvxGRC9PQykFJs2Fv0nRdyAuaLNcg=
Subject key identifier: F1:92:CD:59:39:DB:F6:59:71:87:DE:7F:4A:58:B1:20:0F:1E:70:DA
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial: 019D284DE74A435B75441564757A54D964B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:27 +0000
Manifest this update: Thu 26 Mar 2026 04:01:27 +0000
Manifest next update: Fri 27 Mar 2026 04:01:27 +0000
Files and hashes: 1: Z12VW2Oj1RQBcgh65gRC_a1KwqE.roa (hash: /a7senBqK2MBRmr1Qn/8yhUtEA4NdcKwqwCyWHEGON0=)
2: p4p1Pk1qfU_SW9Ve8k8RIi63JWc.roa (hash: Wra3ytDrU1p2ihMOSoZL7h8AIxob8hYx1NIw6YWVOAs=)
3: rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl (hash: ZXVY2mAabBl/HTcDHsqf2KEhVJGXDiaUjBrJkyfehTw=)
4: vKrnz1PqS6qb2zcTLwUYNYqlKd4.roa (hash: 1IT80fZU/ax5KvjXCy5/nxPjuHIDLBfsXUQ0YfHBn7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e7:4a:43:5b:75:44:15:64:75:7a:54:d9:64:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Validity
Not Before: Mar 26 04:01:27 2026 GMT
Not After : Mar 27 04:01:27 2026 GMT
Subject: CN=f192cd5939dbf6597187de7f4a58b1200f1e70da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:e2:fc:7f:61:1b:9f:f1:c1:68:4d:12:d3:
6e:bd:7e:ee:34:bd:58:30:40:1c:f5:dd:71:a2:f3:
9f:e3:46:51:40:2f:4a:96:ee:0d:59:d6:c5:aa:7a:
c6:c7:51:76:e6:19:89:13:1e:94:0e:7e:7d:51:74:
f8:40:47:ba:f8:e5:15:a2:d1:97:d9:7e:83:b2:c9:
fa:89:14:1d:c3:88:00:11:bd:c4:02:98:95:d6:8f:
28:b2:15:c6:d8:8c:d8:be:07:53:4f:4b:87:44:95:
3a:0f:df:4f:3e:e3:96:f1:0b:18:7b:1d:25:bb:8c:
8e:ea:50:93:d5:b7:6f:4e:86:8e:2b:c5:fc:80:3b:
b6:71:0e:56:21:a4:8b:43:55:94:99:5c:b3:9b:74:
21:cd:62:a0:42:c2:f9:6c:0b:17:3c:a3:c8:df:75:
ba:0c:3a:a4:37:f3:07:a1:ea:b6:c2:19:f9:16:95:
a3:70:5b:92:71:08:39:9e:84:a6:d6:ce:13:5f:ec:
36:80:9f:11:bd:77:f8:4e:6e:18:a1:cd:8e:71:a3:
dc:e0:1d:f1:5b:5e:7a:1f:50:e1:58:01:52:ef:de:
0d:19:33:73:77:76:a2:0c:63:71:45:1e:99:23:39:
55:df:b4:2b:98:20:c5:54:02:9a:fc:a3:07:6f:5d:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:92:CD:59:39:DB:F6:59:71:87:DE:7F:4A:58:B1:20:0F:1E:70:DA
X509v3 Authority Key Identifier:
keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d0:11:ff:67:b9:6c:85:09:dd:d2:e9:6e:fd:99:c8:ce:ce:
68:7a:94:ff:8c:9b:75:ec:f2:3f:ce:0e:2a:62:c6:31:cd:18:
a2:bf:7b:a6:27:51:b9:39:bb:bc:99:3a:9d:d8:dd:f3:fb:31:
0c:6a:1d:29:47:f6:51:5b:57:48:e9:2a:36:20:f5:02:b1:c4:
77:60:bf:c7:69:2b:e1:c9:99:b2:2d:09:6d:1b:84:bf:8b:ed:
0e:9f:7f:0d:4b:a4:a4:9a:08:8a:25:8a:6a:1b:81:7b:8e:b8:
4d:db:8f:34:29:1a:64:bc:fc:be:93:28:c2:d9:cf:94:18:9c:
e7:30:83:f0:16:09:e3:93:3a:b5:85:6d:66:f0:4b:e9:ad:2e:
7f:f5:c7:36:44:81:9d:84:26:32:60:ea:c5:0c:4e:e4:ba:82:
7e:81:20:25:4d:9a:63:28:46:72:2c:64:1d:48:ee:e7:58:62:
81:4c:fd:36:2f:d4:1a:ab:1a:fc:a7:fa:a4:38:d4:77:7e:e4:
bf:1c:dc:06:a9:c6:00:3c:cf:f7:f7:aa:fe:44:94:26:0a:1e:
43:58:01:74:f4:df:81:4e:88:3f:f2:db:21:3e:88:04:e7:68:
b6:20:9e:0f:2e:f8:31:1d:0e:e7:44:21:fd:82:0d:58:63:99:
f8:c2:f1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:01 2026 by rpki-client