Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
File: a_D4R-GiFudUPHUqY1DGviPHxtU.mft (raw, json)
Hash identifier: 9oVtOaVI/Tyi0oyCuohUmdn1kbwnDvxgErspVqJTPn8=
Subject key identifier: 88:A1:77:2C:47:D4:1B:A7:00:AE:FE:6C:E6:74:A2:44:F2:38:C5:A6
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Certificate issuer: /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial: 019D25F1FEAA484D7C5EAD5A0A5C395527DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:01:49 +0000
Manifest this update: Wed 25 Mar 2026 17:01:49 +0000
Manifest next update: Thu 26 Mar 2026 17:01:49 +0000
Files and hashes: 1: a_D4R-GiFudUPHUqY1DGviPHxtU.crl (hash: g4+bip+JjHVh/XeP0eS5dUOjN2uwrWHWUMzg+qE4600=)
2: cF8uP7QlOdwZi4fd-Vewyhyr1JU.roa (hash: /tEiL73EsYnvkx71Q1CMlvgCMIyqQRf+8UDWXXfTyn4=)
3: mIHKTw-XLrmmWG8YqweQVC7V0bI.roa (hash: jyb24Oi7s06EeSQHlaZE/EE7bOHrHv2+206uhSP0nsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:fe:aa:48:4d:7c:5e:ad:5a:0a:5c:39:55:27:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Validity
Not Before: Mar 25 17:01:49 2026 GMT
Not After : Mar 26 17:01:49 2026 GMT
Subject: CN=88a1772c47d41ba700aefe6ce674a244f238c5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:54:0f:43:af:1e:c9:d7:c6:fc:5b:bf:dd:
eb:7b:7c:90:72:a3:d4:0b:30:13:21:8c:98:cf:f9:
d6:10:a2:1b:81:f7:c4:f6:be:32:31:c6:2f:29:10:
52:77:3c:a6:87:02:46:dd:fe:ef:ed:c6:d5:e0:b9:
d2:7e:ba:13:20:22:47:e6:40:a2:ff:35:86:fc:7b:
ae:6a:63:54:fb:70:7e:82:81:2e:6d:76:64:e1:2e:
61:5f:80:b1:4b:fa:c9:04:43:ad:33:a6:95:6b:5e:
af:01:56:c5:9e:9d:17:2e:f3:77:6a:f4:8e:7a:5b:
c0:01:9f:19:22:45:d1:0c:53:8b:37:89:3d:24:52:
c4:30:2b:8c:4e:ec:fe:9c:b0:ee:a2:dc:08:23:98:
dc:5b:ad:98:f7:ca:7f:7d:72:9b:57:90:ac:35:76:
c8:3b:c3:fa:5b:27:cf:49:5f:af:aa:89:59:92:be:
96:2e:53:7e:8b:21:6c:60:a7:d3:64:47:5b:3a:2d:
a8:34:5f:24:98:0f:3f:1e:06:37:0f:01:76:ed:d5:
71:fe:f2:61:51:3f:8e:54:e4:69:ba:cc:0c:7a:9f:
41:96:bb:35:2a:81:8a:20:41:69:82:b3:3a:a2:f9:
52:2a:a3:fa:3c:bf:16:c3:b2:64:05:e0:5b:34:f8:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A1:77:2C:47:D4:1B:A7:00:AE:FE:6C:E6:74:A2:44:F2:38:C5:A6
X509v3 Authority Key Identifier:
keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3f:3b:f9:a4:5f:b2:1c:91:37:c4:62:c5:93:98:9f:bf:4b:
b3:4e:4d:e5:aa:b1:41:f9:b2:16:62:a3:d5:37:dc:09:f7:50:
6a:5f:04:10:ed:19:6a:14:ac:6c:ce:10:e2:bd:56:c8:4c:1d:
74:f3:8f:ea:ee:b7:16:ab:86:1a:a2:11:ca:85:f6:a3:44:55:
01:dd:3d:10:31:4e:5d:83:29:44:55:f4:80:ff:6e:ee:5d:c7:
b4:07:78:75:72:6e:6a:2b:aa:05:97:cb:1d:12:c4:78:fd:52:
d9:9b:e1:27:df:2e:b1:c9:41:a8:64:d1:94:cb:b5:f8:1c:42:
6d:4e:1c:4f:3a:55:88:f0:66:24:98:4f:1c:4b:4d:e9:d2:fa:
71:db:e6:e9:a6:61:6a:60:16:db:46:a4:f0:9a:39:32:37:64:
6e:15:f5:4e:3b:f7:0b:a5:25:d8:51:c6:2b:47:84:30:e6:4e:
38:ff:06:be:38:b1:67:7e:cf:ec:90:4c:64:e4:68:ee:0a:ef:
ed:55:2d:1a:58:0f:45:a7:c5:ea:51:8f:01:67:44:d2:ca:66:
0f:7f:17:63:f7:e1:ef:68:e6:b1:7a:b8:34:aa:97:c1:af:a5:
30:13:3b:ac:5b:32:66:13:6d:7f:a5:50:bd:40:7c:40:de:59:
ef:af:74:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:24 2026 by rpki-client