Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File: RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier: 7N6xZbqC5viQtvCDo6PoL3E+bV8Auv1WSNCYvPajUeU=
Subject key identifier: 9D:1C:C7:DF:56:F2:53:06:C3:A1:5F:FB:3B:42:A8:EE:7E:F8:34:4F
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial: 019D265F816AE4F249FF3131F9963E74F243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:26 +0000
Manifest this update: Wed 25 Mar 2026 19:01:26 +0000
Manifest next update: Thu 26 Mar 2026 19:01:26 +0000
Files and hashes: 1: FZgm-m-tM7etG2QpRA9NtYKJMp0.roa (hash: UQwsai2QfSWLMJ1/MEG9VD0VHu/w7xSrHdqEgRycwjY=)
2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: vtIO0GWdw0FwESIWYCSrU8QyoLJuxLtAx1abneUn2eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:81:6a:e4:f2:49:ff:31:31:f9:96:3e:74:f2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Validity
Not Before: Mar 25 19:01:26 2026 GMT
Not After : Mar 26 19:01:26 2026 GMT
Subject: CN=9d1cc7df56f25306c3a15ffb3b42a8ee7ef8344f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:85:8e:16:31:e2:46:c5:45:8b:bd:b8:de:
63:78:d3:61:7e:30:31:ff:f9:d1:64:53:5e:46:e7:
3c:47:a2:fe:ef:2e:ca:a1:a4:a3:88:f0:ea:a8:76:
b5:96:35:9d:e3:01:1e:42:9c:e1:68:71:14:3f:aa:
86:09:91:2b:29:37:fe:80:25:3c:da:42:0b:a9:7e:
52:f5:6c:2f:6e:72:cf:43:06:95:5e:96:aa:80:5d:
a4:3a:a2:10:ef:a7:65:0a:be:58:ea:81:ed:71:a8:
bd:ec:70:99:46:ee:ab:62:86:7b:f7:70:80:01:65:
cb:96:be:25:82:6b:cb:d2:10:3b:e9:af:68:20:58:
41:b6:14:f2:21:a3:33:d1:4b:69:74:fc:30:66:bf:
6a:20:9f:47:8e:dd:6a:03:33:2f:ea:3e:24:fd:29:
f9:b2:82:4c:97:c1:e0:cb:06:ab:2e:62:f3:53:f7:
81:04:09:70:21:25:38:45:0d:73:52:ba:65:b7:47:
0e:09:9c:a8:8f:b0:c3:be:63:b0:8c:ba:22:b3:0c:
16:a9:cf:d0:53:6b:03:9f:3b:81:5b:5b:69:62:19:
4e:fd:51:e3:14:35:53:d2:2b:86:fb:ac:bb:aa:3d:
eb:bb:22:3c:7d:24:dc:7d:d7:f1:54:36:6d:e9:bd:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1C:C7:DF:56:F2:53:06:C3:A1:5F:FB:3B:42:A8:EE:7E:F8:34:4F
X509v3 Authority Key Identifier:
keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3c:aa:9b:09:a0:d3:c9:f1:a7:e7:76:3c:ae:18:85:fc:c0:
48:b5:1a:84:c8:8f:0f:c1:b2:65:9e:c1:ac:b7:5c:8f:49:b9:
9d:93:1e:ec:ed:b7:40:f4:10:30:35:05:28:ab:ac:1c:dc:12:
56:98:3d:15:6a:d6:92:93:1d:16:74:5f:66:18:ab:34:ac:24:
e1:77:f4:72:10:d5:e3:a8:17:ca:27:5e:ff:70:ae:c3:13:3c:
a3:79:6f:8a:98:75:fa:07:98:26:c2:cb:e1:77:bf:b0:a4:d0:
d9:4d:5d:7b:db:df:e8:da:07:b9:67:54:de:bb:31:1b:8c:53:
d0:ad:ef:ef:71:62:63:df:28:79:89:88:df:c9:49:1c:7e:a6:
cb:53:30:f4:c1:3d:20:44:56:3c:6c:f9:72:74:0f:14:59:42:
03:07:e9:4b:07:b5:7a:f4:cb:50:de:07:10:e6:1b:ed:a7:82:
f8:10:b1:55:0a:f0:7e:71:c7:08:85:29:f0:2b:15:f3:a3:f2:
59:75:f2:a2:83:df:7f:c7:0d:17:e7:a0:02:15:45:73:dd:aa:
82:aa:f0:cf:b9:27:31:35:94:69:5a:5a:1f:35:99:e8:49:fd:
70:c7:bd:aa:47:3c:d0:3a:5f:a8:19:0b:8c:15:58:e6:60:91:
9a:ff:d1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:27 2026 by rpki-client