Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File: _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier: 5IEaxnEMswHM0Rlyb8Bse8XSrV6w6LejZfg+Y6ghVJY=
Subject key identifier: 4B:BE:26:EC:BF:94:91:44:67:6E:D4:4E:CE:19:50:0E:6F:A7:5B:8C
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 019D26286C995C7563EC6B0C028A4236FFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 18:01:16 +0000
Manifest this update: Wed 25 Mar 2026 18:01:16 +0000
Manifest next update: Thu 26 Mar 2026 18:01:16 +0000
Files and hashes: 1: 41PdyGaqWfuZrGCiI7A6Pe8er08.roa (hash: fqabz9d9YrXMSNvuc4clJBMP1zUaniqoWE3YHtZWSoc=)
2: OyiOQQ5RXT-6W_eR_NYBstfLFGQ.roa (hash: cg+zDM1Nsx6Yirfpu41rhF9dShj8Jqt4XkTVhq7Ju3g=)
3: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: EVN83QW3AslA0YCCpt7TJaU19zZULRmFhJgahL90XKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:6c:99:5c:75:63:ec:6b:0c:02:8a:42:36:ff:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Mar 25 18:01:16 2026 GMT
Not After : Mar 26 18:01:16 2026 GMT
Subject: CN=4bbe26ecbf949144676ed44ece19500e6fa75b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:6b:41:68:75:9d:f8:73:50:21:ce:d9:4e:
f7:ed:18:f6:07:df:6e:3c:ba:15:5c:b2:cf:11:19:
4e:04:b8:f1:38:1a:4a:8f:40:44:c4:d4:0f:2d:87:
93:1e:82:6a:02:8c:16:ea:74:7f:c7:44:f9:92:4d:
40:50:a6:81:b7:d2:bf:35:b4:f7:a9:16:64:4e:7f:
d9:d0:3f:ce:70:80:44:0c:33:30:dd:26:61:fe:76:
88:57:63:62:06:92:a7:e6:dd:50:26:79:96:2a:ad:
17:eb:20:08:ed:55:f9:a5:3a:58:ab:aa:fe:50:62:
43:e9:60:8f:39:95:e2:4f:0d:a2:f5:10:4d:8d:44:
e5:13:47:7f:3c:63:3c:81:f1:7b:97:e2:04:b4:4e:
3a:63:f3:fb:73:75:5e:9a:72:71:35:f9:72:cf:24:
bd:de:01:a2:ab:64:1e:6a:9e:d3:83:04:93:27:90:
c1:c5:ef:6f:d0:83:bd:f6:05:73:9f:9e:d0:c3:1d:
30:f9:1d:54:0a:e2:0d:cc:73:e3:d5:f6:1d:07:9a:
2c:f2:17:5c:d2:39:d4:da:c8:b1:d0:37:e8:04:a8:
ed:88:86:c5:c2:e4:f9:44:36:c3:ae:e4:b4:13:3b:
18:bf:5b:d3:67:55:d4:6d:34:31:37:7c:c5:b8:ca:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BE:26:EC:BF:94:91:44:67:6E:D4:4E:CE:19:50:0E:6F:A7:5B:8C
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b8:40:55:f1:fa:fd:23:2a:2a:6c:4f:79:c3:db:35:20:64:
4e:4b:e4:af:b2:ff:65:8b:d5:e4:23:5d:50:b9:4d:75:f8:85:
8b:fc:8f:e4:b5:7e:d3:f5:c8:3c:d6:26:c2:a7:9f:23:68:d8:
73:e3:d8:5c:e1:a5:02:5d:87:ed:32:e5:99:ed:7a:c1:17:d4:
1a:db:4f:86:d5:5f:be:5f:45:12:1a:28:a4:e1:08:20:b0:9a:
8e:93:62:5f:50:6f:d6:08:0a:ca:af:e4:4e:51:84:cf:c2:23:
85:8b:4a:2d:05:53:6f:dc:9d:30:ce:12:8b:8f:df:d5:14:c0:
65:a3:d8:98:35:18:71:9e:7a:d8:18:05:fd:e6:f1:3c:9f:4b:
d5:89:39:ca:33:95:07:7d:af:e5:26:91:fc:84:13:8f:7f:c2:
f8:7a:4f:c0:53:42:8f:a8:c4:f1:e4:98:59:3c:e4:d1:39:c0:
6a:ca:e2:10:99:75:df:8b:0e:74:fc:b9:b1:3a:bc:33:c8:79:
e2:39:f7:8b:ef:45:ef:e7:12:a9:a7:e1:91:9e:f3:f9:2a:07:
80:5b:44:13:f3:98:af:c3:62:c2:df:bf:19:8a:ad:ce:2f:6a:
48:28:18:4c:82:90:94:95:92:40:de:25:c2:56:3b:42:bd:0a:
9e:d4:bf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:19 2026 by rpki-client