Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: dk885XQyQxlGccURii3zxRfFDyibwud1URuSEG1ETtM=
Subject key identifier: 89:27:9A:D5:FC:CA:9F:66:A4:7A:F6:9B:7B:F4:43:E4:77:57:71:DF
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 019D284D2D5D6A42D38CE657192B39EE307A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:00:39 +0000
Manifest this update: Thu 26 Mar 2026 04:00:39 +0000
Manifest next update: Fri 27 Mar 2026 04:00:39 +0000
Files and hashes: 1: FKys4Xiow33v_h270A8VpmNDWTw.roa (hash: o4z6GWQar87z6QyuQkA9LK7MGeo2/aW3AYlCX5HnTz4=)
2: eJGdRqR19npkYtvPHiGG4FtsJ9I.roa (hash: 0EM+2GV5EUJcYRTF87nIhzm0VJnMFJsOgKeMDspDH20=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: DIbHd4FNtttAMcO6DnIfvquXOSdnUqbbhuQ7xMSb1Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:2d:5d:6a:42:d3:8c:e6:57:19:2b:39:ee:30:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Mar 26 04:00:39 2026 GMT
Not After : Mar 27 04:00:39 2026 GMT
Subject: CN=89279ad5fcca9f66a47af69b7bf443e4775771df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:a5:b3:72:5d:8f:00:e5:1a:c0:bf:e0:4c:
2e:a6:c3:44:98:29:e5:8d:d7:6b:7e:4e:b4:af:5e:
e1:16:b8:1d:04:a2:35:07:88:87:27:08:c2:5c:36:
86:2c:b9:d9:bf:43:d6:a7:52:45:36:bf:df:28:c0:
5c:eb:ca:1f:8c:ad:c2:c0:95:0b:95:fb:45:80:63:
28:21:cd:6e:39:9d:43:92:6d:90:5e:6d:1d:83:c0:
ec:5b:01:74:3d:0b:e9:1d:8d:28:54:c6:c4:d4:77:
93:8b:24:95:cf:97:e4:a0:91:2b:b2:09:69:76:6d:
a7:24:19:66:46:56:35:83:36:59:17:56:ca:b3:be:
88:96:93:68:1f:de:65:5d:d9:0b:c7:b0:c5:2e:11:
24:c7:53:98:ea:1e:70:88:df:aa:94:f1:57:b7:fb:
aa:26:df:41:c1:2a:38:33:29:f1:3b:88:46:30:a9:
71:38:c9:91:88:00:cf:d3:de:c8:9e:d8:e9:b5:b1:
c4:1d:a1:e2:d5:10:b9:2d:c5:17:d2:4a:97:be:f5:
73:35:4d:e3:4f:d4:b8:23:94:de:29:8a:db:48:ca:
7d:ec:b3:10:be:fc:a2:c1:1d:84:04:5c:75:39:02:
3d:27:13:44:41:f2:3d:ba:30:e6:96:fd:89:fb:b2:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:27:9A:D5:FC:CA:9F:66:A4:7A:F6:9B:7B:F4:43:E4:77:57:71:DF
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a4:8e:74:a5:4c:4f:5b:14:54:61:f7:54:c4:f2:9d:6e:ac:
a8:2d:0c:0c:e4:b4:75:db:9c:3f:45:72:90:a0:e2:e0:01:5d:
c3:b1:66:b4:06:bf:b5:78:99:d9:56:9b:9c:a6:1f:fc:01:f1:
d6:ff:d6:5c:31:69:b5:7b:79:b4:8e:a1:7b:a2:4d:e9:ac:1a:
c7:bb:23:52:f5:72:eb:e1:2a:2a:83:25:2b:b3:a7:c4:a7:38:
fd:69:68:1f:84:f7:6d:84:c1:d2:d3:c6:01:f4:ab:c6:79:3b:
47:78:6f:3b:9e:8f:0e:bf:af:da:fd:63:ef:d7:cd:5c:d7:a6:
3b:07:bc:36:19:7d:fd:a2:1e:ae:58:a3:c9:3f:a8:f7:ec:23:
1e:d4:c5:51:79:59:22:bb:26:ba:05:ae:39:6f:62:41:47:fb:
c2:e7:e1:b2:8a:c2:fe:ad:b2:c1:e8:c0:0a:41:36:c1:9a:ca:
33:a8:2b:fa:57:e1:f8:13:96:b5:24:dd:bd:79:df:a6:ed:8b:
32:89:d1:3c:ab:3e:78:f7:e6:11:d5:c7:1c:8d:9c:5b:47:85:
af:70:1a:c2:42:79:38:d9:81:0f:8b:7e:ef:7a:f0:32:73:5c:
18:f9:a4:31:6d:cf:0a:78:57:f7:31:6b:0f:fe:c0:84:40:49:
be:cd:fc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:50 2026 by rpki-client