Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
File: dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft (raw, json)
Hash identifier: 02AfQ7crWS/uunAbjUws29VUdhbY1Z6/nn9UacBl0b0=
Subject key identifier: 9D:FF:8C:4A:3C:B2:5E:56:D7:EA:B8:B6:3A:10:44:F9:16:65:B9:F6
Authority key identifier: 76:6D:18:B7:A5:A8:37:E6:71:4F:BA:B2:52:40:0A:3B:EA:BC:22:0A
Certificate issuer: /CN=766d18b7a5a837e6714fbab252400a3beabc220a
Certificate serial: 019D27039B7FE706436678D2BF0238A0864D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
Manifest number: 19
Signing time: Wed 25 Mar 2026 22:00:41 +0000
Manifest this update: Wed 25 Mar 2026 22:00:41 +0000
Manifest next update: Thu 26 Mar 2026 22:00:41 +0000
Files and hashes: 1: TPgJA7asD1USxd5F7pee5lciH88.roa (hash: J3JqRxhZZokO/izJrrFgyJGCYZDVRXSpr2zjvNoSLcU=)
2: dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.crl (hash: YoDds6zFA0+f7HrcBfTOZXBqGEvNzuRP/Pgbg7wxJ/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:9b:7f:e7:06:43:66:78:d2:bf:02:38:a0:86:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=766d18b7a5a837e6714fbab252400a3beabc220a
Validity
Not Before: Mar 25 22:00:41 2026 GMT
Not After : Mar 26 22:00:41 2026 GMT
Subject: CN=9dff8c4a3cb25e56d7eab8b63a1044f91665b9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:79:14:17:73:1d:3d:e0:53:c8:6a:86:ed:
de:0e:f6:b8:08:20:aa:ac:09:56:67:01:66:48:fb:
47:70:80:2b:ab:17:62:7e:9e:1a:db:3f:80:3b:88:
ef:71:7a:3c:4b:91:04:bf:23:0a:5d:e0:2d:2f:3d:
8c:9c:3e:b6:47:df:b8:ab:fc:33:16:b5:c5:11:2f:
df:87:77:cc:d8:15:bc:d5:f8:bd:66:f0:5c:4e:9c:
5d:c8:84:eb:09:9b:d3:83:9f:b3:18:dd:e8:73:95:
a2:14:94:ed:54:91:8d:61:c9:55:55:e8:0c:ed:ff:
7f:4f:f5:6c:be:60:51:6d:28:5e:54:29:f7:5e:65:
41:6f:60:d1:57:59:3e:6a:9a:7b:3e:00:45:44:e4:
db:1a:8b:b7:cc:21:c6:86:1d:93:cc:4f:f0:6c:88:
74:40:32:26:8d:6b:8f:8b:11:de:39:19:5d:0b:d2:
f3:32:df:bb:11:cb:fb:8a:30:f5:50:38:50:a8:1d:
55:48:5f:a1:81:a7:91:44:9b:5a:76:76:89:71:1a:
91:86:41:45:62:d2:d0:a6:68:d6:15:a3:0e:99:9e:
07:20:02:15:ec:77:8d:c2:85:e9:82:7d:e4:66:c4:
b9:eb:fd:1d:27:b3:29:5d:21:6a:17:0a:f6:a5:3c:
6c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FF:8C:4A:3C:B2:5E:56:D7:EA:B8:B6:3A:10:44:F9:16:65:B9:F6
X509v3 Authority Key Identifier:
keyid:76:6D:18:B7:A5:A8:37:E6:71:4F:BA:B2:52:40:0A:3B:EA:BC:22:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:64:00:39:9b:3c:18:27:91:a3:84:87:d3:41:05:ae:4c:25:
56:dd:39:41:91:40:08:98:98:30:9a:34:1f:5c:8d:b9:d4:21:
58:16:80:50:4d:bb:1d:d1:c5:96:d2:78:f4:ad:3a:10:d6:91:
de:eb:f3:ce:ba:df:87:67:71:28:7d:bb:88:7d:6d:1c:e5:20:
49:09:f5:fe:4c:43:ef:ca:44:d9:93:88:d4:a2:b5:9d:c4:4d:
e3:49:b7:53:e8:bd:b6:d6:91:c2:ea:e7:3d:17:cd:30:f4:a4:
f0:fc:6b:4d:83:09:e8:ad:83:65:1b:72:50:f1:8c:c4:de:55:
ce:39:a6:ec:eb:da:4c:83:ee:02:d4:a6:ab:40:e7:32:e8:0d:
9c:fe:66:1f:0a:c9:5d:8c:ee:3a:31:47:d7:26:29:19:55:9d:
c3:1d:a6:80:37:d5:b0:8d:b3:14:7e:6e:e2:e3:56:35:01:a8:
45:bf:81:84:5b:a4:91:5a:46:ed:48:84:cf:e5:da:72:19:40:
f8:cf:c8:c2:5a:e8:a5:2e:92:7a:71:70:6f:f0:4f:72:74:cb:
9e:b5:c7:7c:87:4d:8c:9c:c5:5e:71:95:8a:7a:4e:ab:72:54:
84:9d:17:ab:5a:03:71:14:77:b6:cf:36:d3:a7:c7:27:93:f8:
d6:d7:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:18 2026 by rpki-client