Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
File: dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft (raw, json)
Hash identifier: nn6T1fGjrRslJtRtyfdvVpMry5XNPZ0YjoxkbaCj3qE=
Subject key identifier: 82:9C:19:92:96:A0:79:B6:16:F6:CE:16:5B:6E:80:52:6B:2A:E9:D5
Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Certificate serial: 019D27040B1E389A4990225B9728D1E88714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:09 +0000
Manifest this update: Wed 25 Mar 2026 22:01:09 +0000
Manifest next update: Thu 26 Mar 2026 22:01:09 +0000
Files and hashes: 1: dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl (hash: 1qZh+FMrRTZGzN/UH/UNGa5rADccEwhNN65F229BbMM=)
2: eBuAc98eLhdzaSpEXuI8KUheXdk.roa (hash: ZAyeKkTZKpzp6DSuRIfinH6S1nkpaZ2M6lG5LcE6ZAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0b:1e:38:9a:49:90:22:5b:97:28:d1:e8:87:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Validity
Not Before: Mar 25 22:01:09 2026 GMT
Not After : Mar 26 22:01:09 2026 GMT
Subject: CN=829c199296a079b616f6ce165b6e80526b2ae9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:53:0c:06:d6:d1:17:d8:09:17:74:a9:9f:71:
74:af:ed:12:4b:25:45:4f:a0:37:a2:32:15:b8:c8:
18:4d:2c:59:31:96:65:ed:37:93:ba:88:14:98:27:
ee:4f:41:dc:4e:81:41:20:2d:b9:9e:cf:b8:bc:f9:
74:c3:30:88:3c:45:c6:f8:a6:bf:f0:00:0b:2f:76:
ea:20:3a:6a:b3:6c:32:36:4d:90:29:f6:af:3e:4e:
1b:09:e3:f2:01:74:0a:28:51:f7:0a:52:9a:1d:ad:
e7:55:0f:b7:5e:fe:32:b8:f9:eb:f6:3a:c8:f7:b8:
59:9f:41:d0:18:05:61:97:a9:12:43:4d:60:2a:14:
30:28:80:39:a5:b6:6b:4e:bc:45:80:57:6c:a1:de:
7c:da:8a:4a:cd:96:fb:02:5d:ca:c7:af:48:bc:63:
fc:36:7a:11:1c:fa:fb:c0:da:12:37:72:73:1d:06:
4f:ee:9e:15:d9:5a:67:1d:74:70:15:0d:7a:5b:0e:
7e:c6:85:39:2a:34:98:4b:90:7b:7c:09:b1:13:5c:
5c:79:3f:15:b9:40:69:a6:3e:85:89:38:3e:e8:d3:
2f:a6:1d:c9:1a:da:0f:27:81:e1:95:73:da:ae:8b:
ab:fb:2a:7a:cf:ca:a9:7c:bb:dd:0f:ab:51:01:40:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9C:19:92:96:A0:79:B6:16:F6:CE:16:5B:6E:80:52:6B:2A:E9:D5
X509v3 Authority Key Identifier:
keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fa:a2:bc:d5:25:12:c8:a4:3c:eb:f7:d7:15:83:c8:02:a8:
4c:32:b8:a6:52:bb:96:36:36:92:30:36:41:f7:fd:70:0a:24:
cc:40:68:cc:3f:5d:2e:1e:33:be:07:88:e5:2f:16:7c:fa:f7:
f3:5d:40:34:19:b1:5c:ba:c3:c1:7f:9d:e6:fa:a1:2d:88:af:
f1:d9:45:d6:b5:ba:79:4b:45:49:d9:5b:32:22:47:ab:d3:bc:
a8:4e:cd:07:0b:c6:87:63:77:6d:e4:75:6b:ce:f6:fb:61:01:
a6:61:0c:27:ac:08:67:0b:d1:ae:af:f7:c0:09:48:89:a4:17:
5c:c1:e6:d2:70:40:29:f7:40:30:fd:b3:69:99:f1:6d:cc:28:
e4:54:1b:13:e7:26:11:8b:ba:1d:d8:9f:25:93:f9:88:a0:0b:
a6:3d:df:8e:a4:b8:6a:a2:d0:82:48:30:7a:8b:6f:75:b1:4b:
48:d0:7b:e7:0d:d1:79:c1:84:f7:29:24:d8:6f:2c:55:d3:86:
ad:dc:17:37:43:f4:1f:62:35:be:d2:0f:95:39:b3:5a:19:12:
78:c5:c1:11:ea:10:84:aa:80:75:a5:c9:b6:2c:c9:3a:2d:2b:
6d:07:27:53:68:8a:ab:5c:ef:de:9f:91:f7:c2:d2:14:6c:ed:
80:84:e2:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBAseOJpJkCJblyjR6IcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzBkZmMwYmI1Y2UwNmQ4NmRmMjRmZTNjYWE0YjRlZjM0
MTc4ZjQwHhcNMjYwMzI1MjIwMTA5WhcNMjYwMzI2MjIwMTA5WjAzMTEwLwYDVQQD
Eyg4MjljMTk5Mjk2YTA3OWI2MTZmNmNlMTY1YjZlODA1MjZiMmFlOWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51MMBtbRF9gJF3Spn3F0r+0SSyVF
T6A3ojIVuMgYTSxZMZZl7TeTuogUmCfuT0HcToFBIC25ns+4vPl0wzCIPEXG+Ka/
8AALL3bqIDpqs2wyNk2QKfavPk4bCePyAXQKKFH3ClKaHa3nVQ+3Xv4yuPnr9jrI
97hZn0HQGAVhl6kSQ01gKhQwKIA5pbZrTrxFgFdsod582opKzZb7Al3Kx69IvGP8
NnoRHPr7wNoSN3JzHQZP7p4V2VpnHXRwFQ16Ww5+xoU5KjSYS5B7fAmxE1xceT8V
uUBppj6FiTg+6NMvph3JGtoPJ4HhlXParour+yp6z8qpfLvdD6tRAUDJ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKcGZKWoHm2FvbOFltugFJrKunVMB8GA1UdIwQY
MBaAFHRw38C7XOBtht8k/jyqS07zQXj0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhEZndMdGM0RzJHM3lULVBLcExUdk5CZVBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8wYzYxMTEtNThmNy00Yjc1LWJjYWIt
OTBiYzQ2MjRjN2IyLzEvZEhEZndMdGM0RzJHM3lULVBLcExUdk5CZVBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8wYzYxMTEtNThmNy00Yjc1LWJjYWItOTBiYzQ2MjRjN2Iy
LzEvZEhEZndMdGM0RzJHM3lULVBLcExUdk5CZVBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvqivNUl
EsikPOv31xWDyAKoTDK4plK7ljY2kjA2Qff9cAokzEBozD9dLh4zvgeI5S8WfPr3
811ANBmxXLrDwX+d5vqhLYiv8dlF1rW6eUtFSdlbMiJHq9O8qE7NBwvGh2N3beR1
a872+2EBpmEMJ6wIZwvRrq/3wAlIiaQXXMHm0nBAKfdAMP2zaZnxbcwo5FQbE+cm
EYu6HdifJZP5iKALpj3fjqS4aqLQgkgweotvdbFLSNB75w3RecGE9ykk2G8sVdOG
rdwXN0P0H2I1vtIPlTmzWhkSeMXBEeoQhKqAdaXJtizJOi0rbQcnU2iKq1zv3p+R
98LSFGztgITikQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:06 2026 by rpki-client