Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json)
Hash identifier: Ac8umkRfJ/dWJj6vSDMpgMANNfuBBgwJO3V2265Atts=
Subject key identifier: D7:A5:F1:88:8B:FA:9C:B3:BB:72:A9:7B:88:59:64:EC:5C:01:45:B1
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 019D322C43B62A16174683162EEA9039B890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
Manifest number: 1896
Signing time: Sat 28 Mar 2026 02:00:54 +0000
Manifest this update: Sat 28 Mar 2026 02:00:54 +0000
Manifest next update: Sun 29 Mar 2026 02:00:54 +0000
Files and hashes: 1: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: zFgX0x4Ysgfh8GF5U0EL/y+koAhX6a1lpXpyd5VcVtY=)
2: k18lVXCHbb1-8v6yyvWMJ8VYVHU.roa (hash: In1eQKHvGTUmAaOtsHiEQVzo1kSRudjkKkxMelV/95Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:43:b6:2a:16:17:46:83:16:2e:ea:90:39:b8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: Mar 28 02:00:54 2026 GMT
Not After : Mar 29 02:00:54 2026 GMT
Subject: CN=d7a5f1888bfa9cb3bb72a97b885964ec5c0145b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:9f:07:e3:ec:f4:e3:61:36:1a:a3:13:46:
eb:9e:49:9f:2b:12:28:ab:81:05:f6:c4:00:8a:ea:
a8:d5:08:a3:17:44:e8:64:b7:10:02:82:d9:80:ee:
17:db:c7:86:bd:ab:3f:bd:b5:24:fb:c8:05:fa:b9:
91:f8:a5:ec:64:0c:cd:4c:8b:dc:ee:5f:61:20:34:
a2:a8:6b:9c:92:b9:bc:e6:e2:87:72:d5:9a:fd:a1:
c8:cb:d5:a8:5b:c9:07:d2:57:94:5c:a2:08:2b:8a:
06:5e:dc:1f:97:70:98:3b:aa:51:8d:6c:7b:a7:93:
18:e5:dc:3f:61:1e:78:0d:cf:22:a4:75:7e:6e:78:
af:de:e4:4a:72:4f:c9:3a:d8:6c:63:f1:72:a1:f9:
ab:1e:d0:d3:db:17:07:89:da:a8:7f:21:b5:a2:77:
be:f9:8a:c0:27:3a:3e:9e:8d:2c:b0:fb:81:b1:f3:
82:c0:1b:ba:b1:85:4c:4d:70:bd:66:d2:92:67:3c:
66:b9:28:de:90:e2:b4:86:8f:a2:9b:e9:41:8c:f4:
19:a8:0a:31:18:2f:fc:05:85:70:d4:1b:35:d3:e2:
1d:ef:d3:68:be:aa:2d:4a:4e:98:22:bc:19:f4:0b:
3e:a5:35:3b:2b:3d:20:14:52:76:5f:67:89:ad:7c:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A5:F1:88:8B:FA:9C:B3:BB:72:A9:7B:88:59:64:EC:5C:01:45:B1
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:58:f2:65:5e:fe:4a:64:e8:2e:54:44:f7:03:ac:d7:6f:47:
a6:2e:1a:7e:80:73:d9:e8:69:b8:1b:3a:d7:af:b2:b7:16:e3:
a0:f1:1b:76:0c:72:87:8a:43:9f:46:72:dc:eb:04:ac:31:fb:
2c:fc:cd:58:23:32:e8:49:d8:ce:70:07:a1:0d:e1:c8:78:05:
9f:78:fb:48:8a:53:3f:6d:d3:89:bb:ee:c0:2a:0d:4a:d0:48:
1a:c8:3d:29:41:67:7e:41:bc:bb:31:60:4b:32:34:a0:24:5a:
64:65:0c:f5:b9:13:1e:ec:75:91:dd:5e:0a:02:5d:c3:a3:7e:
aa:47:0a:fd:14:83:62:a0:cc:39:97:11:74:a1:6d:cb:51:39:
e3:ce:36:3b:77:f2:a7:0a:16:bd:da:55:49:b5:bf:e9:c7:aa:
c3:1a:dc:61:34:21:67:2b:fa:c5:0e:9f:aa:fc:e4:df:1f:52:
c3:9d:1c:05:39:14:14:8b:f0:a2:f8:c9:29:0a:f7:53:57:a8:
14:f0:85:45:94:c1:47:87:f2:7f:30:f9:86:17:6e:d5:b9:fc:
37:43:79:0b:ea:8a:ec:4d:6c:8b:77:8d:e9:97:3e:2f:30:87:
b5:6c:72:aa:81:a6:93:a7:77:57:6e:aa:f2:31:53:c0:ff:50:
af:19:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:28:47 2026 by rpki-client