Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
File: _RGW2Y3s046wP18GtI5VbHTyMfQ.mft (raw, json)
Hash identifier: mTJldFbyhdNbDeOvO7WjBiWRDAtAKYFQbjcP7D495nQ=
Subject key identifier: 95:FC:88:3C:4E:38:24:DE:FB:B5:F9:65:78:83:08:FF:A0:07:D0:07
Authority key identifier: FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
Certificate issuer: /CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Certificate serial: 019D29CEA2208A8FF6AF2DA2910B9DC5BC24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
Manifest number: 1486
Signing time: Thu 26 Mar 2026 11:01:40 +0000
Manifest this update: Thu 26 Mar 2026 11:01:40 +0000
Manifest next update: Fri 27 Mar 2026 11:01:40 +0000
Files and hashes: 1: _RGW2Y3s046wP18GtI5VbHTyMfQ.crl (hash: yBrhSxnR05koXe8b2aB63aYIUlY1bkeIsvWDMJGiFWE=)
2: pAESyPqHIlN4NTJAugrXcjke2nM.roa (hash: eftVyacucHA1lYWjx3ZzoQjWGGcLhPcyZlIC+dbOdko=)
3: pYGDQP7z4knn6-l2OGShS12r9vg.roa (hash: OTzBNhKlo1pe/s0so9dkt15EFzXNXt7pIqKb4IqGORk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:a2:20:8a:8f:f6:af:2d:a2:91:0b:9d:c5:bc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Validity
Not Before: Mar 26 11:01:40 2026 GMT
Not After : Mar 27 11:01:40 2026 GMT
Subject: CN=95fc883c4e3824defbb5f965788308ffa007d007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ff:2c:5d:20:84:cf:37:94:a1:25:c9:67:c5:
93:af:98:b1:f1:d9:54:a7:38:20:3e:67:98:7b:e7:
b2:d8:f5:f8:84:b4:48:13:c6:f0:97:d6:d1:94:94:
49:26:ee:ef:22:f3:70:79:f6:8b:47:36:a2:f7:45:
8a:d3:04:74:3c:0e:69:43:7e:99:ad:bf:21:5d:ba:
29:c6:ec:3b:f7:7e:5f:18:2f:ad:16:af:e4:fc:66:
25:35:73:e6:92:97:97:0c:73:ea:a2:36:5e:69:92:
e5:bd:e0:65:df:05:20:60:2b:44:ed:b4:2b:dd:c0:
c0:4a:8e:ce:b0:37:56:48:c8:a1:3c:03:42:94:78:
81:d6:24:f2:2a:ea:6b:42:b1:5c:cb:52:c2:58:0b:
19:8d:2a:b3:e2:20:5f:1c:fa:09:0d:c8:0b:b8:9e:
9d:32:16:ca:57:70:e0:c7:ff:76:e1:24:8d:fa:5d:
d1:6e:ce:ba:1e:22:51:de:87:ed:51:22:b7:44:f4:
05:f1:c1:65:54:81:b8:b9:28:90:58:7c:44:9e:c1:
b0:c1:23:90:95:b2:2e:1d:96:55:de:ea:bf:20:0e:
8d:41:89:0a:75:f4:e2:9c:6b:25:f1:3e:aa:a4:62:
cb:b8:0a:59:f5:37:2b:81:0c:01:4e:7d:77:e0:b1:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FC:88:3C:4E:38:24:DE:FB:B5:F9:65:78:83:08:FF:A0:07:D0:07
X509v3 Authority Key Identifier:
keyid:FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:59:3a:17:0e:38:e9:4f:b2:02:09:c0:d2:cb:13:da:75:11:
c4:bd:f6:e0:97:dd:de:cc:53:74:da:95:02:d3:5a:6a:51:24:
8d:8b:3d:6f:1d:a4:ba:1f:0d:75:92:0d:71:02:82:03:fb:18:
b6:65:e5:88:78:c3:c7:1b:d2:97:d3:fb:b9:35:9f:23:3a:f1:
8a:1b:b3:a3:3a:95:15:5b:c8:ee:b0:b1:cc:b6:dc:97:cf:81:
2e:95:da:3e:36:bf:16:3c:81:50:df:26:bc:cd:f8:37:df:50:
d1:38:d1:6b:58:bc:82:db:0a:19:d5:bf:8d:a6:55:6a:09:ce:
92:0d:7d:bb:06:5e:28:52:cc:f9:68:4f:0a:a8:5e:90:78:a7:
2a:e1:52:7b:e7:66:14:1f:6e:e6:b6:5f:ee:bf:bc:f0:7b:3a:
11:86:53:0b:01:26:db:8a:a0:a3:4c:ed:7e:56:ce:6f:5f:ba:
32:da:4c:ec:42:95:d4:4d:ac:0b:1c:a0:75:7a:9c:09:dd:5c:
c5:b0:65:77:38:02:44:7e:9a:d1:27:2f:a1:a4:83:b6:51:96:
aa:c3:c3:87:c1:6c:af:eb:93:3c:48:92:ab:6b:85:bf:dc:bf:
3b:f6:e0:b5:26:83:93:74:2a:72:84:03:60:09:33:1f:2c:31:
b1:2b:de:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:05 2026 by rpki-client