Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
File: D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json)
Hash identifier: U6IE7PL6oh85UkoRjGzi2kjOmDl1QRYreEy6cWQNjRo=
Subject key identifier: A1:B0:D9:89:BD:2F:12:E2:72:DA:42:0F:5D:C7:D4:95:2A:26:03:71
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial: 019D28BB1B24935DFC034E6DC36586332894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:00:43 +0000
Manifest this update: Thu 26 Mar 2026 06:00:43 +0000
Manifest next update: Fri 27 Mar 2026 06:00:43 +0000
Files and hashes: 1: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: PrIA5KrnkP3v/PBrolYme2Ef7GS9xDZFOaGLL/uR1jo=)
2: VS5UOf4Oqufmk1nDLv2qDmY9aAk.roa (hash: yxhJeQxv5OL2X3W33orxeTr4UI2HV6MbDSVgY4g3PdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1b:24:93:5d:fc:03:4e:6d:c3:65:86:33:28:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Validity
Not Before: Mar 26 06:00:43 2026 GMT
Not After : Mar 27 06:00:43 2026 GMT
Subject: CN=a1b0d989bd2f12e272da420f5dc7d4952a260371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:c1:f9:90:e9:97:a3:fd:1a:68:85:ca:29:
b8:90:ca:e5:44:a5:07:3f:7b:ec:ae:16:d2:39:b0:
b6:7b:cd:14:2e:81:cf:00:f3:26:8a:71:01:9d:c9:
df:30:64:a6:22:de:d3:41:31:23:b4:ed:10:bc:c1:
87:67:5a:6a:57:82:42:dd:6f:3d:2f:24:ca:4d:00:
49:6d:17:ec:fe:b2:c1:04:44:11:d0:6a:8c:6a:c5:
51:ac:7a:da:fe:75:2d:b5:a4:e3:f1:6f:d7:85:2b:
df:d8:73:bb:7f:a9:07:5c:c4:66:7d:14:35:91:cd:
43:26:a1:95:c2:08:72:f0:73:eb:b1:54:55:a9:2f:
61:dd:ab:70:1d:ee:ab:50:a3:c6:00:83:96:e5:84:
aa:3e:a9:24:de:65:be:68:7c:c8:85:1d:fd:0c:ea:
21:91:40:b4:f4:f0:9d:69:71:fe:70:5e:03:8f:aa:
15:12:ef:3b:73:30:10:c1:48:53:f8:cb:61:25:cd:
e4:0a:b5:2b:ac:08:d8:92:62:40:0d:18:00:da:31:
a2:a3:2a:97:a2:3c:68:77:08:b6:f7:97:d5:2e:e1:
87:17:b5:71:8c:54:f2:a8:74:ba:44:22:58:c3:18:
6b:bc:fb:9b:20:31:49:43:10:e6:86:66:7f:c2:7c:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B0:D9:89:BD:2F:12:E2:72:DA:42:0F:5D:C7:D4:95:2A:26:03:71
X509v3 Authority Key Identifier:
keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:45:5a:00:fd:98:2d:93:18:c1:40:02:e3:82:ca:6a:d2:1a:
9e:a9:d2:7e:5c:cf:48:7b:73:0b:0e:f6:cb:c7:58:df:47:90:
8b:7b:83:19:9d:50:cb:9a:01:56:76:2a:da:e7:b2:9f:77:01:
e4:8b:7a:b0:13:8b:a9:19:f3:fd:11:64:a1:a8:03:a4:f9:2d:
e9:1e:b6:cf:9d:6e:30:5a:91:d1:1e:60:88:4e:03:0f:fd:7d:
87:76:c8:53:d4:5f:2c:e8:fd:e8:87:55:df:83:7b:00:99:de:
64:94:f5:95:3f:0f:c5:1e:2e:36:d1:d3:e1:8b:8b:8c:aa:e1:
64:33:ed:fc:84:e7:5a:6f:0f:00:08:20:62:6c:e0:fa:55:5c:
48:44:31:43:1d:ff:c3:cc:3a:ce:b2:84:0c:d5:43:38:8b:8f:
ba:ee:bb:3a:61:c2:d3:b2:8c:bc:5b:26:34:00:0a:38:b2:42:
ec:16:b4:ae:13:be:11:d3:09:f5:ba:4a:11:70:ac:89:2c:4b:
13:c3:89:c6:5b:d3:b9:3f:c4:02:60:c0:cc:9a:63:0b:bb:22:
11:c8:44:13:34:d2:78:df:2b:28:b6:00:20:82:d5:8a:c0:65:
da:77:0c:93:0a:ff:8a:3a:a6:8f:aa:71:30:e4:c5:fd:e9:c9:
36:12:bc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:48 2026 by rpki-client