Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File: 121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier: 50/yyK+uRJQon82AhbBytAxm1DkZz9GUGiCMrMX0004=
Subject key identifier: 37:7E:5C:A4:3E:0D:41:96:4E:54:8E:21:AD:18:9D:19:E6:AA:4E:35
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 019D28849B0A718A22486BDED96432C74A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 05:01:12 +0000
Manifest this update: Thu 26 Mar 2026 05:01:12 +0000
Manifest next update: Fri 27 Mar 2026 05:01:12 +0000
Files and hashes: 1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: zXNiUie1gtQvSWkKkOAkqgRGG54nkOV+3uEhDdY888Q=)
2: PYC5VmfJr8R_CWcpbSFGWUPORN8.roa (hash: ni//q5JfG12C/jFNrjnRjeiKy+Pl48zK6T66mzOL5KA=)
3: ucYb6qB_KaTWYUSU6LAo8719FDs.roa (hash: +ASle/PB3Ogg8HVIw0p9waPXwti0vvLog6UAfw5L79w=)
4: x04dCWjItyDGXFoquqgz5jnrMRg.roa (hash: hVlcjFxSr+ykf+gKZRqjXZQpnt9aXT76dSufsRzsGvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:9b:0a:71:8a:22:48:6b:de:d9:64:32:c7:4a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: Mar 26 05:01:12 2026 GMT
Not After : Mar 27 05:01:12 2026 GMT
Subject: CN=377e5ca43e0d41964e548e21ad189d19e6aa4e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:1f:a7:1c:07:b4:3e:b4:9f:8e:7c:a3:dc:
0c:dd:4c:c4:70:7d:c7:59:64:20:78:28:db:29:d4:
69:2e:04:b5:84:10:bb:94:d2:23:91:8e:a1:14:df:
29:4e:95:be:e0:2c:c5:5d:03:ad:37:7a:f6:60:48:
b7:5f:d8:4f:db:62:be:40:73:da:53:2d:77:34:5d:
70:1e:33:bf:03:ca:0f:26:f9:c5:02:ef:0b:6c:be:
e6:7f:28:9f:3a:fe:b4:24:c9:f5:eb:56:0c:a0:88:
0c:da:cb:ea:61:89:94:70:76:b1:b2:97:d0:b6:56:
57:ce:cf:51:2a:38:0a:0d:ae:12:12:46:c7:6c:df:
27:77:96:7c:26:89:02:e0:8e:d5:d6:ee:b6:fc:fe:
97:97:e7:12:82:d5:25:eb:d5:ac:ee:42:53:e4:27:
46:33:71:48:66:a1:59:1c:b3:c4:68:6d:3d:3e:76:
9e:f8:81:52:f2:0b:f8:4c:6e:17:d8:02:d1:8c:e0:
27:ea:87:9b:a8:15:ef:53:44:55:d7:d0:af:2a:5e:
9e:b7:a4:96:e4:a7:da:8a:14:a0:d8:b3:19:99:16:
2e:bb:d0:4f:42:c2:1a:08:d1:d8:3b:a4:72:19:c2:
95:fe:79:34:2a:49:82:84:7e:12:0b:83:b6:4e:0a:
1d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7E:5C:A4:3E:0D:41:96:4E:54:8E:21:AD:18:9D:19:E6:AA:4E:35
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8a:0a:74:fa:53:73:37:83:ac:9c:e9:2c:7e:71:07:eb:e7:
4f:2b:1c:e3:a5:d5:33:e0:31:58:83:cd:77:d7:27:1e:9d:be:
98:14:27:fb:3c:a0:c3:e9:d0:46:76:be:87:25:30:b0:bc:ea:
0e:53:a5:8a:6d:17:95:26:60:5c:2e:fb:43:e8:f5:b8:f3:dd:
41:e8:a8:ff:30:f6:01:53:eb:34:5f:3d:d0:e4:25:82:53:21:
dc:bc:5b:41:c6:d1:fb:65:dd:a9:bc:f2:bb:6f:27:59:70:1d:
c0:3d:ac:22:a9:0f:ad:af:9d:21:01:92:1c:42:ee:69:e6:62:
c9:df:5e:c2:18:f5:34:89:23:9a:87:5e:aa:65:1b:eb:c9:b0:
e8:b1:11:32:a4:bd:aa:ad:ae:8b:ad:d8:de:dd:33:70:4c:d7:
30:d2:39:73:b9:64:48:51:f1:67:eb:f3:5c:3e:b7:58:bb:4a:
6d:d5:79:ad:fe:21:b4:b1:29:62:23:f9:37:cf:ae:70:e6:4f:
7d:53:e2:9c:7e:40:10:3a:97:43:ba:50:58:68:26:17:81:12:
d5:f1:ef:1f:6e:78:f2:c9:e8:01:f8:2c:ee:6b:4e:db:cd:fc:
cf:21:79:04:e3:e7:7f:b7:12:75:c0:c1:83:d7:c7:b6:dc:a5:
9a:c8:41:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:06 2026 by rpki-client