Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
File: _j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft (raw, json)
Hash identifier: aJbrN9cWCcnjlWQs3+5fb8FGJQpCpDtBYGe2LE2v0d4=
Subject key identifier: EE:A6:6F:DD:8F:D6:0F:D2:2D:C8:E5:7E:7C:52:99:F4:DB:61:38:2E
Authority key identifier: FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A
Certificate issuer: /CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a
Certificate serial: 019D28F2634A1EF5026A2A1ABBC42515ACFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 07:01:06 +0000
Manifest this update: Thu 26 Mar 2026 07:01:06 +0000
Manifest next update: Fri 27 Mar 2026 07:01:06 +0000
Files and hashes: 1: 61G1xNRDvH1XYvJBYKDXMWttruI.roa (hash: c0Pq8BpZyzyUlkI2f8VEllZFV6S5xxWWsguU+52QGmo=)
2: _j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl (hash: zCFfk+VtXMi7FMIAWbTg87/ZqtJMKs+lwSLIZ1OvLYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:63:4a:1e:f5:02:6a:2a:1a:bb:c4:25:15:ac:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a
Validity
Not Before: Mar 26 07:01:06 2026 GMT
Not After : Mar 27 07:01:06 2026 GMT
Subject: CN=eea66fdd8fd60fd22dc8e57e7c5299f4db61382e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6e:db:bb:8e:b0:cd:09:de:02:3b:04:2e:da:
c0:9e:3a:da:13:ef:33:c3:4e:7a:bf:37:a6:5f:f9:
9f:01:09:90:63:33:49:a6:b3:c7:50:e1:6d:ad:40:
7d:3b:08:c9:01:ff:ef:e8:7a:5d:cb:5f:a7:e2:0f:
22:f7:51:88:97:d6:99:8b:e9:6f:29:0d:29:2b:a8:
9e:88:80:93:05:27:a2:e5:10:cd:7d:90:75:79:39:
e5:78:40:7e:05:f8:cb:4f:b8:f4:71:a8:c2:fb:4c:
d1:f2:3d:8c:33:4b:41:4d:0c:0c:e2:1d:87:c3:92:
f3:ff:77:3a:4f:14:b9:49:99:0c:44:0f:b5:fc:ab:
80:f0:96:b7:77:85:06:0d:e0:56:6c:25:10:4d:db:
8c:df:e0:ef:dd:23:3a:59:d6:d9:36:43:97:f2:d7:
c4:5f:87:3c:42:17:27:e8:4c:56:28:d5:a9:59:bd:
71:1b:66:ff:41:02:9e:bf:f7:b6:9e:0c:e8:fa:4e:
d1:37:0d:17:2c:3d:48:74:80:14:44:17:f0:db:b0:
f4:43:8f:c5:6a:d3:a8:0f:a8:8a:5f:38:01:63:fc:
5a:43:8f:9b:a6:a5:0b:fd:d9:97:c7:76:73:e8:d0:
3e:5b:9e:8c:35:b5:9f:71:98:9a:d0:11:59:dc:70:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A6:6F:DD:8F:D6:0F:D2:2D:C8:E5:7E:7C:52:99:F4:DB:61:38:2E
X509v3 Authority Key Identifier:
keyid:FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8b:df:30:55:e9:c1:66:58:40:97:5f:97:7d:f1:7f:6a:98:
c3:23:17:d1:0d:aa:e6:a5:39:2d:9d:dd:6a:38:e3:86:1f:d9:
e2:e1:50:b3:e1:ca:fd:7b:33:af:8d:8b:df:15:6c:60:17:d9:
78:c0:eb:ef:58:93:c7:8b:c0:2a:71:df:b7:08:e5:38:b8:9a:
28:25:d0:76:96:5f:24:f8:4b:a8:f8:ba:3d:9a:88:f9:46:c2:
dd:69:0c:01:4b:9c:c7:1f:4a:d9:b1:84:cd:c5:e2:12:53:c8:
47:24:ce:de:e4:2c:21:a8:b5:72:cb:01:39:ff:2a:32:ff:df:
63:93:62:41:dc:84:3e:51:74:33:5b:22:d8:04:f8:68:9f:4c:
0e:a9:aa:0b:15:33:f1:a9:8b:98:33:05:d3:60:f0:cf:17:46:
6e:a7:89:f3:41:04:75:95:38:4e:a2:49:0a:1c:bd:a2:ef:de:
63:d0:e7:c6:08:ba:cd:ef:46:5e:51:98:5b:79:c3:a8:39:f7:
ed:5d:da:09:36:61:09:bd:5d:0c:83:6d:19:da:0e:c6:94:56:
3e:87:c0:c7:c2:d7:aa:5e:4f:82:6c:85:67:5e:b7:05:60:c5:
22:a2:10:4c:4b:2d:cf:b1:25:88:19:92:6e:67:20:23:0a:53:
43:71:cc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:54 2026 by rpki-client