Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
File: IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft (raw, json)
Hash identifier: 2Tha7WouSRbsgtj7DCfAA1JkIT1GjdRqamgE3mR8BbI=
Subject key identifier: BB:83:A4:60:3A:19:BB:89:0A:27:1A:5B:4E:7F:41:AA:4E:68:3E:85
Authority key identifier: 20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
Certificate issuer: /CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Certificate serial: 019D26CD2F25B0E2FC0739E509D4FC97A6A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
Manifest number: 08DB
Signing time: Wed 25 Mar 2026 21:01:14 +0000
Manifest this update: Wed 25 Mar 2026 21:01:14 +0000
Manifest next update: Thu 26 Mar 2026 21:01:14 +0000
Files and hashes: 1: IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl (hash: VLjrDs+Y/Hzn/avhgaSxGxjb7fFDTB+6b0TMXA9H3qA=)
2: VEvXqpjtpnWqPhFsK1VjLPWcZ84.roa (hash: Ivq9B7fCTNtjnlU9FptxC9e2xrpHUztFCNXJ+qaH7LQ=)
3: Y2rIYreLOiywxBX2z6aRfWF7q04.roa (hash: dpqG15krdpxJUlUEVSBqVv3+kw/A6MahmXEVhi6w3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2f:25:b0:e2:fc:07:39:e5:09:d4:fc:97:a6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Validity
Not Before: Mar 25 21:01:14 2026 GMT
Not After : Mar 26 21:01:14 2026 GMT
Subject: CN=bb83a4603a19bb890a271a5b4e7f41aa4e683e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:23:85:fc:0f:b1:b4:ad:6a:88:e5:6f:1d:
42:f3:d3:a0:2c:e1:90:99:fc:13:c8:88:20:24:60:
28:ff:3e:ee:96:c9:02:45:9f:bc:b7:e1:09:76:aa:
a5:d0:93:49:b1:82:49:69:28:99:fa:16:45:50:5c:
a1:ce:04:4d:f5:76:74:d9:9a:ee:58:55:1c:1d:b0:
8d:33:57:5b:0d:19:fc:1f:0b:8f:5a:1d:de:6b:98:
56:e2:81:17:a2:74:bc:f4:6d:0c:6e:9e:98:2f:5a:
37:e9:8a:e8:62:ff:7c:1e:10:d1:41:ee:0c:d8:11:
04:f8:8f:6a:d5:37:f3:be:9d:a3:f8:6a:0f:a9:9a:
05:f7:dd:9a:68:e0:28:e7:ee:3f:8b:f7:12:02:e9:
cb:da:14:68:fc:19:f9:a1:92:f0:8f:a5:83:8e:8e:
4a:d6:e3:d7:89:c0:91:92:41:4b:0a:5c:81:9c:35:
46:87:83:34:c3:e3:83:db:07:05:87:00:67:f3:18:
54:a4:29:c3:ad:cc:ba:0c:6c:87:3a:a7:c6:db:a1:
06:45:29:c8:e0:b9:54:da:46:40:14:1e:13:8d:84:
6c:ef:79:48:d6:90:24:c1:c7:c5:f0:9e:72:ec:4e:
da:e9:bc:b8:7a:46:4f:79:b6:42:b9:f8:d5:14:e8:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:83:A4:60:3A:19:BB:89:0A:27:1A:5B:4E:7F:41:AA:4E:68:3E:85
X509v3 Authority Key Identifier:
keyid:20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8d:65:54:5e:22:6e:84:26:ab:d2:06:20:e3:0a:84:3c:dc:
79:0a:0b:6a:03:f2:df:ba:53:ce:82:04:3a:ea:37:22:54:20:
cb:6b:34:52:51:14:ea:70:dd:47:7b:94:21:b8:c4:20:0e:c0:
b1:4f:83:47:06:d7:4f:9b:75:7b:2b:0c:f7:3e:cd:2d:ec:77:
c4:12:99:8f:ba:66:55:0c:10:06:f8:c6:50:ee:9b:4d:29:8e:
24:03:fd:00:a9:51:76:6d:53:63:c9:d0:f7:35:ab:7a:3d:a5:
0b:eb:0d:68:ab:57:2d:27:4b:e0:b0:75:12:f1:22:9e:7a:75:
35:c1:98:a3:07:c5:b9:d8:fd:ee:88:58:8a:5d:df:15:2b:98:
5d:78:eb:b4:1c:5e:67:ec:41:71:ad:72:1c:0a:18:23:03:30:
39:56:69:0e:2c:5c:62:3e:e2:04:fd:72:12:37:28:43:8c:99:
7c:9e:7f:5d:36:59:74:34:61:e7:99:11:5b:81:de:92:ae:a6:
c9:e5:0e:1a:5a:c5:38:c0:e8:d2:48:45:d3:6e:6b:5f:35:0f:
7e:f4:0d:bd:7c:72:6b:ed:b6:c3:95:ef:9c:97:87:e9:a6:7b:
8a:84:6b:eb:b6:00:ed:15:6d:eb:12:39:c6:db:ef:d0:64:93:
c8:b2:9b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:12 2026 by rpki-client