Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: +hr4ksefmWppnPdWNmL7mVqgFKOL6VtxitYk/ChgOYQ=
Subject key identifier: 58:9D:69:A7:8C:DB:CF:54:C3:41:A3:9C:4E:40:91:FD:24:1B:BF:7B
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 019D27720A3576B7766B05F0E6EA16AD2064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:18 +0000
Manifest this update: Thu 26 Mar 2026 00:01:18 +0000
Manifest next update: Fri 27 Mar 2026 00:01:18 +0000
Files and hashes: 1: 8GCiWcx8mqq89-eKSSRHyEp78Jk.roa (hash: 1VoDgs3kjOrw6G1rdHG1fmbKleZRoSt+eF4wHzGq/bs=)
2: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: kMjcCbuM1a2J07cKOH7hYs73SpsvgYATmGvyvep2Hs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:0a:35:76:b7:76:6b:05:f0:e6:ea:16:ad:20:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Mar 26 00:01:18 2026 GMT
Not After : Mar 27 00:01:18 2026 GMT
Subject: CN=589d69a78cdbcf54c341a39c4e4091fd241bbf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:6b:97:77:69:7b:21:6f:a8:c6:1f:57:5c:
a8:7a:aa:c9:36:cc:1f:c7:64:9b:2d:a2:a7:e9:f1:
0c:a6:b3:4e:35:81:02:63:9d:64:8a:0d:d3:50:4a:
cb:fa:25:30:b3:61:1a:ef:ba:c2:bb:4f:70:d2:35:
38:75:93:79:2b:39:a2:ec:b5:0d:a9:cb:10:0b:bb:
b0:1f:e4:6e:b3:90:64:7d:24:5d:a1:fc:d1:80:ff:
5b:41:87:81:53:0b:f7:75:28:1f:82:62:50:a9:c4:
37:0c:e6:38:97:52:e9:05:cc:b8:f4:a8:0e:bb:ea:
f7:df:00:84:10:04:c4:77:fb:9a:b2:f5:67:9d:e0:
b9:5f:e8:bd:96:69:dc:d9:ad:4f:e8:e6:d9:e2:48:
22:0f:20:a7:8e:f6:33:fd:c1:8d:85:a2:60:c8:dd:
03:ec:45:80:5a:38:e0:1e:05:6f:9c:c1:5a:8e:6d:
84:c7:4f:ad:da:3f:66:01:81:8e:bb:da:9c:0d:92:
dc:5e:8f:d3:20:ab:63:a3:8e:9e:ed:b2:0c:ff:58:
bc:91:ce:e0:40:fb:52:3d:32:cf:82:d0:80:89:3d:
a4:f6:bf:6e:61:3d:c0:a5:5e:46:b4:1b:b7:43:bf:
8b:1c:1a:0a:ff:14:76:ba:e6:78:ca:46:77:2a:63:
37:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9D:69:A7:8C:DB:CF:54:C3:41:A3:9C:4E:40:91:FD:24:1B:BF:7B
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a4:43:f4:17:da:20:ca:03:98:04:a6:93:d4:47:6d:ec:a0:
89:92:01:ac:ac:90:26:85:0c:42:57:c3:b9:8e:20:85:a7:84:
87:80:96:05:8b:0c:4c:dd:f0:98:89:c7:07:e9:ce:71:29:3a:
ff:4b:9a:cd:01:cc:e6:f9:cb:a1:ef:2b:96:7b:d8:3e:04:8c:
97:b8:8f:ab:4e:92:32:99:df:4d:85:14:fb:8c:82:e9:49:51:
fc:c1:f8:c6:23:cb:b2:42:b5:99:9e:79:91:fb:42:ce:b4:ea:
d3:2b:2c:ca:d7:be:b6:9a:c4:3c:50:69:00:c7:95:a3:9e:6d:
3a:f1:6b:7c:dc:3b:9f:0c:9d:15:bf:e7:e7:53:ed:11:17:16:
32:53:2c:a4:74:29:a5:d0:f0:99:31:94:cf:25:69:17:06:cf:
70:d0:6d:3e:0a:10:34:e4:23:cc:89:33:cb:9b:f3:62:ed:a6:
46:29:cb:e3:7e:0e:60:03:3d:55:0c:f1:1a:1c:05:ff:c4:95:
c6:cd:4d:7c:da:f8:a1:dc:aa:68:54:c0:d7:94:70:2b:ee:54:
19:1f:e9:cf:fc:66:7b:2f:13:3b:28:88:99:49:42:96:8d:fb:
3e:a8:41:fe:e7:13:4b:64:f7:29:a2:28:88:f5:7a:f0:14:1b:
3a:e7:df:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:47 2026 by rpki-client