Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
File: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json)
Hash identifier: EI2ipbek0JOGufDRL7rE8O8cccfrftmPp5DpETo4RK8=
Subject key identifier: 3F:8F:17:9C:E3:3C:17:AA:89:69:D6:83:D5:24:EB:B8:59:D9:31:47
Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
Certificate issuer: /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Certificate serial: 019D265EDBD43F2C58B4FEEBD83CBE4FF125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:00:43 +0000
Manifest this update: Wed 25 Mar 2026 19:00:43 +0000
Manifest next update: Thu 26 Mar 2026 19:00:43 +0000
Files and hashes: 1: JEVNwkBJGjPUCLbxmvoCLoGPZjs.roa (hash: ET03PFNNVrxiq4Y+fkFrz6tnsyAu93bMLHdSl5Q6kB8=)
2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: Vnth3uB2l+X5J/twdU+tt5fbUqFAb1w8Ra4ec8fA7Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:db:d4:3f:2c:58:b4:fe:eb:d8:3c:be:4f:f1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Validity
Not Before: Mar 25 19:00:43 2026 GMT
Not After : Mar 26 19:00:43 2026 GMT
Subject: CN=3f8f179ce33c17aa8969d683d524ebb859d93147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:2f:9e:35:b3:c3:cf:97:f4:1d:2b:c3:a1:
e0:f3:ae:3f:87:3c:ae:d6:a7:02:03:78:52:58:fa:
37:df:b4:46:77:4a:73:b1:4c:3c:ef:a1:dc:ab:d5:
8b:ce:11:a2:f5:88:1f:17:8f:8a:05:05:e2:82:4a:
32:88:d4:5f:7e:84:e9:d8:94:c6:3f:aa:21:bb:f5:
8a:07:3f:22:e4:17:74:a7:6f:2b:3d:c3:a2:b3:ec:
28:b6:f5:0b:78:5f:4c:2a:04:1c:d3:a5:43:0e:52:
fd:22:9b:e4:5b:50:dc:3a:c6:90:85:d4:5f:b9:ae:
51:48:a9:d6:6a:2c:56:ed:22:ed:b6:bc:9b:f0:10:
44:6c:c5:38:4f:b0:cf:16:5b:f0:7a:d8:1b:c8:23:
52:bd:46:0e:92:8d:7e:50:e9:86:f6:b1:c3:b3:34:
14:f8:94:e6:62:ac:94:0c:d2:c6:ed:c5:0c:79:92:
f4:fb:2a:14:aa:bc:06:30:e2:11:08:30:2e:a0:a2:
9b:38:b1:6f:91:5b:a5:1c:6b:97:4b:06:c1:e0:7c:
33:f7:5f:16:4b:84:87:96:c2:67:02:c3:6c:45:62:
b2:26:d7:13:18:6a:68:64:b8:f5:8c:56:aa:de:09:
43:0e:56:bf:8b:bd:fc:62:69:e0:51:15:83:10:8f:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8F:17:9C:E3:3C:17:AA:89:69:D6:83:D5:24:EB:B8:59:D9:31:47
X509v3 Authority Key Identifier:
keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4f:c1:bf:1d:2e:a0:3c:26:cf:a7:28:a6:8c:c1:37:f3:41:
32:27:18:1f:0c:70:3d:1a:48:b1:99:7c:4a:d9:a2:34:78:6c:
7a:e4:df:21:0c:f0:0b:29:9c:4c:77:77:77:7e:c5:69:a9:dd:
99:b1:a1:e7:57:6f:5f:2c:f4:ef:52:0f:61:91:c6:10:ce:e4:
17:13:9a:09:75:01:c1:4c:8a:0e:43:31:f1:0e:cb:86:c6:89:
e3:6c:14:69:2f:38:06:6e:c2:e9:60:ad:e8:c0:0f:85:c8:88:
6e:dd:79:38:de:96:1b:5e:66:66:b9:02:f1:10:a1:b4:ea:55:
b3:2d:a9:e2:43:66:ab:56:5d:c3:6e:92:5b:8f:6f:8d:00:02:
dd:36:cb:10:5c:de:a1:33:a1:1e:b3:a1:fd:17:d4:dd:86:eb:
4f:59:c8:c9:30:7a:bb:92:39:cf:72:37:09:88:72:df:b4:92:
c8:e3:bd:32:46:77:48:44:c0:ae:ea:db:67:0e:ae:8e:26:c1:
e7:1d:28:c9:4b:33:ef:be:9d:9e:f0:bd:c8:ea:03:e0:57:fd:
43:a3:1d:4b:ca:eb:42:23:50:3e:ed:30:30:41:3e:2f:54:24:
25:84:1e:47:89:ae:f8:97:5b:2f:44:dd:76:67:78:9a:2a:82:
c5:47:4e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:21 2026 by rpki-client