Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File: sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier: Ob43auEAVCqLF5QAc3cI6ERrnr1TtedQGwCl75qfiqQ=
Subject key identifier: BF:25:C6:A7:6B:DE:C1:7E:30:67:7C:21:CB:B0:B2:00:64:B7:F3:20
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 019D2BBBC472861FD003EB3FB89D0F982FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 20:00:18 +0000
Manifest this update: Thu 26 Mar 2026 20:00:18 +0000
Manifest next update: Fri 27 Mar 2026 20:00:18 +0000
Files and hashes: 1: Ve64xTr98MUDsiJSZXk12KQ3yVc.roa (hash: wfd77vHmSmUiY8IWmiT9ZwxLolfac6GRsY7+Cx91Rus=)
2: dN5Ucpkm5kNY0YR-q9sxfd6c9rc.roa (hash: ZLBcri8/aXQmB4WoSvVto5wYAi5xFB1PoBjafKyFXT8=)
3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: aB54VANjIEemYTqXuXCogAsotu7vfc5eB/HEcB7GtgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bb:c4:72:86:1f:d0:03:eb:3f:b8:9d:0f:98:2f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: Mar 26 20:00:18 2026 GMT
Not After : Mar 27 20:00:18 2026 GMT
Subject: CN=bf25c6a76bdec17e30677c21cbb0b20064b7f320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:46:58:c0:51:6c:06:a7:9b:4b:e9:bd:96:
7f:89:98:bb:24:7f:b6:d2:22:8a:d6:48:3f:d8:74:
9a:0b:1d:d8:65:98:aa:df:0f:fc:7e:c9:e7:0c:da:
06:3d:bb:56:58:3f:b0:c5:80:60:f9:ac:12:4e:07:
bd:99:65:fb:e9:62:a1:4c:cc:6a:2f:da:db:cd:34:
83:5f:8b:a6:a3:17:44:6f:e1:3e:9a:bc:a9:a8:a8:
94:cd:2b:bb:d3:e9:10:2d:6e:48:b8:85:de:2a:45:
c6:e4:3e:3d:9f:ff:7a:67:e7:91:0b:a8:e0:45:77:
fb:c3:cf:e8:98:7f:b4:5f:5f:35:e0:31:09:a2:09:
e2:d5:e1:46:45:3e:59:a4:62:70:1d:93:23:0b:fa:
96:3e:8d:04:98:bb:37:3e:f3:53:a0:a0:0d:61:35:
36:e8:11:79:0a:ea:6c:a3:ec:95:8c:37:12:d1:f6:
e6:3f:3d:bc:b2:04:70:92:fc:ac:3e:f9:c7:87:b1:
5f:b0:95:2d:81:64:d2:e9:7b:9a:07:90:8e:ec:65:
95:64:be:6f:c5:c2:0d:84:e3:ae:2e:09:08:66:49:
94:66:7c:54:f8:bb:66:d3:2d:e1:df:e6:90:5d:43:
e3:9d:90:ab:7d:1f:db:20:84:cb:71:49:f4:72:f6:
88:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:25:C6:A7:6B:DE:C1:7E:30:67:7C:21:CB:B0:B2:00:64:B7:F3:20
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1d:4c:a9:a0:1f:5c:b7:3d:c6:7f:21:7c:90:06:0d:57:8b:
f6:fe:20:37:93:94:45:ab:00:83:bd:1f:9c:e3:55:6d:95:ee:
76:ca:bf:77:fa:fc:92:62:02:e7:4f:f9:ee:7b:fa:86:c3:f6:
80:65:77:6d:f7:79:75:bf:1c:1f:1d:9d:25:d1:50:4b:97:df:
88:d4:ef:43:bd:e2:70:7a:64:ff:c3:c8:d3:be:de:69:ff:f7:
43:0b:1a:8a:b0:48:8a:15:e0:13:63:5b:e5:cd:1d:99:34:bc:
b0:db:25:8c:45:9b:de:d2:7c:51:65:1f:53:2f:4d:9e:96:97:
2d:fe:64:e2:09:f7:ab:53:39:b4:ba:c3:ea:b3:4a:88:f8:74:
19:9d:78:12:0e:e6:d8:9a:c9:6d:9a:55:b9:9c:e9:5c:62:16:
8d:93:37:12:e6:dc:38:a5:7b:a7:24:71:a8:8d:d9:61:05:9e:
ac:6f:11:d8:3c:76:df:9d:17:cd:0c:b0:fe:56:75:78:2e:4c:
99:3b:d0:40:c2:87:c0:b2:e6:0c:f0:04:a1:65:2c:f1:de:b8:
4b:07:5c:89:17:ca:09:cf:40:fd:10:07:a2:af:43:ee:39:93:
58:e8:ea:9a:e8:f3:b2:34:26:fb:d4:43:e0:7d:24:30:94:a7:
62:0e:33:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:01:04 2026 by rpki-client