Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
File: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft (raw, json)
Hash identifier: /vCAksk/Uim/vjTepdMwqTZQ+X/IiTu4ZC6V+FPwwBo=
Subject key identifier: 22:4A:CF:4A:AF:CE:96:30:51:AF:85:DF:C2:06:95:0A:B7:63:68:6D
Authority key identifier: FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
Certificate issuer: /CN=fde72d43f4c82b1146737b116197231830bf65d6
Certificate serial: 019D2A3B4F41A17E9327B6B279024FDF28ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 13:00:23 +0000
Manifest this update: Thu 26 Mar 2026 13:00:23 +0000
Manifest next update: Fri 27 Mar 2026 13:00:23 +0000
Files and hashes: 1: 7qm-LSRsoG2o1A3h3_xWxcHiIrc.roa (hash: NschteRDlBB+SzTLpxjpeCbdQUNPGM+TwCR+GlDPxOQ=)
2: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl (hash: B9J1r4sGoUFyxxB5gEv4oTCLqVfYyYsqtZnIOy0vvms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:4f:41:a1:7e:93:27:b6:b2:79:02:4f:df:28:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde72d43f4c82b1146737b116197231830bf65d6
Validity
Not Before: Mar 26 13:00:23 2026 GMT
Not After : Mar 27 13:00:23 2026 GMT
Subject: CN=224acf4aafce963051af85dfc206950ab763686d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:b3:99:87:8a:39:32:b0:1c:66:72:ca:73:
d2:fa:f0:a6:02:24:71:e7:33:71:3c:c8:16:2f:fb:
0c:bf:2c:6b:54:3f:17:c6:eb:65:42:95:3c:5a:e8:
c2:b2:ee:7f:9c:5f:73:20:b4:ed:c1:39:1e:5d:d3:
ad:3e:30:15:43:3a:dd:54:95:ea:6a:ea:bf:29:50:
9b:36:9b:23:8e:8e:a2:43:08:98:97:66:d4:80:82:
2f:a3:c7:bc:5e:80:44:6d:f8:2d:42:73:c1:75:5e:
e1:4b:c2:1c:87:00:02:d1:84:9d:ce:89:19:1a:26:
2b:c1:30:2e:bb:27:7b:93:e5:3c:61:8e:c3:b6:4a:
a9:03:e1:c1:d5:ee:26:a1:01:d7:39:f8:53:5c:bb:
cd:ae:19:c5:40:d3:a5:16:ed:d4:cb:1d:ed:63:6b:
45:ff:38:f9:8e:56:ee:0d:0e:5a:ac:fc:64:8f:16:
5a:dd:1c:5b:41:ef:0c:2a:80:a7:aa:1f:d0:d9:b9:
fd:d4:30:7a:e2:69:70:15:f8:68:e4:8e:f9:28:73:
74:3a:06:3c:25:2c:58:1d:b2:68:ac:e3:de:25:33:
a1:6b:57:f1:78:d8:71:1f:d2:d2:82:f3:de:69:2e:
e7:14:cc:4f:37:8c:22:e6:c2:53:0c:6d:60:6c:78:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4A:CF:4A:AF:CE:96:30:51:AF:85:DF:C2:06:95:0A:B7:63:68:6D
X509v3 Authority Key Identifier:
keyid:FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:37:b3:82:ce:80:0f:15:ec:22:46:a0:7b:fd:d2:48:d0:93:
c9:f3:1f:66:63:05:c9:46:30:21:e6:46:da:ed:33:08:ad:33:
69:22:c4:b3:7c:00:b6:9c:66:e8:11:12:e6:8d:31:ce:95:32:
c4:40:aa:d5:34:a7:e4:2b:54:8d:40:9f:ba:6e:64:f2:6d:c2:
ba:85:c0:e2:e9:4a:15:ef:5f:d6:6b:fc:19:ab:13:07:47:14:
32:e9:fc:e0:76:22:0e:65:c1:79:b9:c9:28:4b:b8:a3:ce:0c:
4f:f8:ca:d5:01:56:38:49:27:1a:5e:b4:46:da:8b:93:7f:e4:
41:f0:a7:37:6d:34:0b:c9:65:12:09:18:98:e4:d4:a3:97:76:
46:54:5c:1e:f2:b2:bc:63:58:9a:59:a9:8e:bc:36:32:19:f7:
ab:91:4a:80:d6:86:82:c0:ce:67:c6:84:03:d9:81:0d:3e:dd:
52:44:24:ef:68:ce:eb:d7:4c:56:75:4b:36:27:6d:02:e1:c3:
1f:c8:e1:a5:98:bd:47:6e:6e:c1:19:b6:36:4c:05:3a:4a:66:
29:d1:73:1a:41:61:84:3e:b4:11:22:62:e1:69:3c:9e:24:b0:
5f:79:d3:a6:69:de:6f:de:1f:06:30:33:45:0b:4a:bf:89:85:
d6:58:5d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:25 2026 by rpki-client