Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
File: diI5iTgH6wmEboKXJ9cakuljp8g.mft (raw, json)
Hash identifier: Wah6bcwTBAdaDyivgDQRjmQq5td8L4aZP3SyywZWBN0=
Subject key identifier: 86:B1:E2:DF:59:D0:FA:5A:0E:98:25:D3:BF:FD:97:B0:48:54:29:A8
Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
Certificate issuer: /CN=762239893807eb09846e829727d71a92e963a7c8
Certificate serial: 019D27A901A372FA81A1F8DD11BF075D83A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:01:20 +0000
Manifest this update: Thu 26 Mar 2026 01:01:20 +0000
Manifest next update: Fri 27 Mar 2026 01:01:20 +0000
Files and hashes: 1: diI5iTgH6wmEboKXJ9cakuljp8g.crl (hash: 7cVDx20AZ4f/dlh4fPnIIJLAgkPtTHzfT8+cEQCGAog=)
2: xmOzcr6lxPTRPADy6CpR95O7sF8.roa (hash: XkTf2vdpptILRuqJJs0WI2X+ppey6cgWY94/Zljo9tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:01:a3:72:fa:81:a1:f8:dd:11:bf:07:5d:83:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762239893807eb09846e829727d71a92e963a7c8
Validity
Not Before: Mar 26 01:01:20 2026 GMT
Not After : Mar 27 01:01:20 2026 GMT
Subject: CN=86b1e2df59d0fa5a0e9825d3bffd97b0485429a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:a9:ff:20:7a:9f:e5:8a:e8:11:e0:c8:71:
f6:1c:9a:9c:38:b4:04:34:f5:af:a3:4a:8f:c2:64:
f6:94:c5:9f:ff:b6:f0:85:b8:4a:bc:bf:54:81:a9:
be:74:32:a9:5c:98:b5:64:78:e1:3b:f8:08:0b:54:
47:86:15:6b:9a:0e:18:ff:ce:4d:d9:e8:8c:e5:41:
c8:54:cb:9b:37:31:0d:b6:de:2c:a7:7d:78:fa:ea:
9e:38:07:20:7c:25:86:5d:ce:9a:fe:f0:86:7f:20:
1b:5a:7d:fc:a2:46:ac:c5:18:24:3f:f0:0b:49:aa:
68:30:9e:48:99:6b:6f:fd:20:de:85:26:55:7a:d2:
0e:11:32:6f:08:37:ac:b4:ab:8c:dd:79:98:e7:56:
55:b2:15:5c:ce:ec:5b:09:da:65:46:65:e3:2c:e2:
f6:6b:f0:ca:76:48:00:94:4a:1f:2d:3d:02:95:0d:
88:9e:7b:96:ba:72:9c:99:6d:d3:e8:84:15:6c:46:
5b:94:9e:da:98:df:8b:85:de:71:98:0c:e3:5f:95:
e0:99:57:d7:fa:24:1f:fb:73:b5:6a:9e:7a:14:08:
2b:a4:d3:63:4c:61:72:44:b6:d7:90:54:22:8a:e0:
a2:2f:91:87:23:eb:56:21:49:9d:7f:b2:02:d3:41:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B1:E2:DF:59:D0:FA:5A:0E:98:25:D3:BF:FD:97:B0:48:54:29:A8
X509v3 Authority Key Identifier:
keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:77:5f:9f:f7:0e:7c:71:6c:10:fa:4a:26:53:c5:dc:1c:87:
5c:e0:3e:09:f2:84:67:6d:23:55:50:8c:d4:37:6a:08:c2:90:
86:85:d6:78:53:96:fd:73:81:06:35:65:9f:97:16:73:7a:90:
3b:8e:2b:f6:2f:a9:90:c4:c4:25:6a:58:05:31:4d:ab:cb:9e:
73:cc:4e:b8:e6:98:81:a3:71:2e:ee:e3:4c:b1:68:1e:33:51:
eb:02:62:19:ff:a2:cc:4d:f2:ca:19:d7:04:23:eb:e9:68:13:
c3:44:da:18:2c:2d:cc:83:14:2c:94:12:3e:2b:e9:f8:55:98:
2a:c0:8d:02:99:8e:35:90:61:31:af:f2:5d:7b:56:16:1f:2b:
be:a1:b4:a8:5c:c4:d5:4f:96:c8:4a:49:6f:f2:52:78:19:d1:
5f:10:b6:25:24:22:90:fc:6b:bb:9a:18:d5:0d:7b:b4:36:5c:
6e:19:29:01:6a:57:d3:a0:76:33:19:51:d9:cc:be:ac:a4:ae:
d4:2f:34:09:6b:83:f6:cb:2f:7b:b4:1e:fa:a4:ab:16:4f:1b:
b4:4d:f1:90:b5:a5:7a:b9:98:6c:8a:3d:df:91:5c:7f:9b:88:
e9:ea:70:02:fd:38:06:62:76:c6:35:f1:f6:6f:cd:ce:5b:83:
96:4c:8f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:15:19 2026 by rpki-client