Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: fBMoAIjguzh5iYZ5/uAwVKfHqn5F4GpHoI+tGgRSDRQ=
Subject key identifier: 21:FB:E4:CB:4F:E0:B9:E5:21:07:69:F9:10:CC:A4:C0:49:ED:A3:8A
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 019D2A3B560A859503671BCB93CE040F3655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 13:00:24 +0000
Manifest this update: Thu 26 Mar 2026 13:00:24 +0000
Manifest next update: Fri 27 Mar 2026 13:00:24 +0000
Files and hashes: 1: 4cocr0q1XWVnObqRRasdUZTa22c.roa (hash: 86THFSFQTNeIPxjfawMpIZH9JHPT6I8T1KqMTV+dRZo=)
2: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: Xme/0FfCohb2aM1lTi1vHePW5bHiw+o+HyYxN+aa5ZQ=)
3: iwkzEw-xYne2_moODPhsHHvfJEE.roa (hash: e85JS9mOgxQCslqs7Lpvehm/GeHrCKP2QV8UeWsf++I=)
4: lPb2QmWiKPxzYTHlUwItF0AKSL0.roa (hash: t0HsgpiNiYSsplZbvt5snbpm+tzmqAxHOzqpSQ+fk5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:56:0a:85:95:03:67:1b:cb:93:ce:04:0f:36:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Mar 26 13:00:24 2026 GMT
Not After : Mar 27 13:00:24 2026 GMT
Subject: CN=21fbe4cb4fe0b9e5210769f910cca4c049eda38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:63:d8:0d:ae:b8:48:e1:1b:60:02:2a:e0:
b2:a5:ba:18:80:97:0a:8a:8a:4b:33:86:1e:22:f3:
ea:8e:d5:62:6b:a1:49:a3:d9:c7:46:fa:98:bc:18:
bf:ed:f2:7f:e1:69:91:8d:57:c8:b8:24:07:58:36:
20:37:01:de:22:86:65:2d:f8:3a:97:b1:a2:d7:69:
a1:2d:e3:c3:19:b2:dc:f4:34:85:84:b5:02:b7:61:
ad:d5:ce:72:ef:f3:9e:7c:ec:92:9f:03:73:0b:9c:
63:bd:e5:eb:5f:05:72:ef:57:d3:88:96:46:fb:03:
3a:73:cb:e5:52:fd:7b:68:8a:93:01:b1:34:d0:b3:
d8:4e:4a:b7:6d:3e:ed:eb:7b:cf:0e:b7:b2:96:0a:
e0:98:57:cd:ee:a4:ed:92:f7:cc:95:a1:8c:06:6b:
ec:d9:a3:52:6c:f1:ed:a7:3d:84:87:a0:07:35:ad:
59:73:7e:c9:df:21:24:f7:60:5a:63:d6:47:08:7a:
72:90:7f:2a:52:f7:e3:cb:99:8a:b6:6e:47:cd:75:
23:f2:ed:7c:43:f1:b7:78:fe:43:e6:38:da:dc:29:
47:4f:d7:5b:9a:98:b7:9b:8b:48:49:46:04:ee:45:
46:58:85:07:f5:e2:d9:ba:29:3f:15:68:a6:6c:76:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FB:E4:CB:4F:E0:B9:E5:21:07:69:F9:10:CC:A4:C0:49:ED:A3:8A
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:db:02:02:6d:6d:bf:4c:3e:f6:1c:94:01:0e:a6:78:90:5e:
da:5b:53:be:0c:48:1c:58:e5:3d:82:bd:f0:69:9b:24:f3:3e:
36:aa:ed:74:04:d2:06:fd:f8:52:72:7e:6c:07:00:1d:c3:23:
e9:8c:25:26:93:63:e3:39:6f:c4:47:ee:6f:56:f1:b7:b4:2a:
85:78:a0:83:39:51:c7:68:54:d5:d2:43:e9:5a:08:cd:92:dc:
68:6c:74:89:6b:63:e0:67:de:1b:f2:82:a4:ca:99:25:06:b3:
2b:90:02:a9:7f:09:65:d7:4e:46:0c:7b:51:f2:49:55:32:3f:
2b:3e:92:9d:67:64:89:80:0f:82:b2:d7:94:dd:d5:77:18:38:
17:89:b3:52:a4:e2:c1:72:f4:f8:00:c9:7f:cf:7f:76:b6:bf:
24:b1:72:59:a7:0c:69:4a:9b:93:42:2a:69:5d:3c:b2:45:d6:
5d:20:fc:f4:fc:20:76:55:53:97:cc:73:21:a1:21:06:67:63:
dc:31:2b:67:6a:45:90:bb:0c:fc:fe:df:f8:44:99:4f:c8:b2:
fc:73:4e:65:e9:98:e3:bd:83:05:d9:d8:dd:0d:3c:f6:ed:2c:
b3:d4:49:da:1c:cd:0a:7a:9a:6b:65:31:3b:e8:4b:a0:de:d1:
52:45:76:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:58 2026 by rpki-client