Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
File: idOpFFlzx5o-e5VTHj0N99KMSgQ.mft (raw, json)
Hash identifier: QE8jA/2ssGzzB0bE6bfvKk3XIcrGdhNg/5EqLtVV8nQ=
Subject key identifier: 15:2D:62:F5:3C:5C:3F:33:47:D1:71:9E:DC:B0:A4:3A:E7:A7:64:FC
Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Certificate serial: 019D281670A8C134EC2DCB1804FEC43FC41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:00:52 +0000
Manifest this update: Thu 26 Mar 2026 03:00:52 +0000
Manifest next update: Fri 27 Mar 2026 03:00:52 +0000
Files and hashes: 1: h9ZEFQ_M3eqG9SpeL-9Vf7khClE.roa (hash: F0ol1/t/MHG3rheVuTMinY7d1uEEc3ChRKFw6MqUlUk=)
2: idOpFFlzx5o-e5VTHj0N99KMSgQ.crl (hash: tg9FT7g0xJHWWSEx0kcTO74u4Ua5XA2tN2f6adR2rpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:70:a8:c1:34:ec:2d:cb:18:04:fe:c4:3f:c4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Validity
Not Before: Mar 26 03:00:52 2026 GMT
Not After : Mar 27 03:00:52 2026 GMT
Subject: CN=152d62f53c5c3f3347d1719edcb0a43ae7a764fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:bb:75:bd:64:88:d7:72:f4:f0:4f:19:e6:
af:c0:86:3c:c0:a0:8f:81:67:91:e3:2b:3a:bf:14:
ab:16:04:fb:c3:de:36:b2:25:06:04:f6:7d:bd:45:
51:e8:e7:55:bc:84:16:aa:96:93:f7:1b:fb:58:28:
15:5f:60:d4:c8:47:9a:0f:b8:6e:6e:ab:ad:34:d5:
a3:dd:21:8c:6d:21:35:37:e2:61:1e:c5:13:e1:a1:
19:0e:fe:9c:bd:6b:1a:4e:4d:4e:a7:52:c1:2b:a4:
fc:be:89:6d:e1:e8:38:b4:4a:03:40:03:2b:fa:d2:
56:aa:4e:bc:dd:ae:8b:4b:de:0f:a3:95:d8:dd:36:
dc:fa:e3:7d:48:2c:ba:d1:0c:17:71:a8:9f:d1:87:
4c:8c:4e:88:ef:d8:c7:ed:42:c1:7d:e7:01:ce:c5:
46:75:ce:09:5f:88:5c:84:e8:fb:d3:f0:c5:9c:ec:
71:81:22:c8:83:42:1f:84:b4:d8:8f:15:be:5e:69:
58:f3:68:35:a6:c9:be:9b:8f:77:f6:c7:7a:17:91:
84:4c:cf:9f:26:5f:84:46:19:e2:76:d7:8f:d3:6a:
01:3a:ea:b4:59:fd:70:79:40:bb:1a:9a:4a:b8:2b:
f2:ce:55:3a:ea:f0:98:04:8c:87:16:56:f2:4a:c2:
12:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2D:62:F5:3C:5C:3F:33:47:D1:71:9E:DC:B0:A4:3A:E7:A7:64:FC
X509v3 Authority Key Identifier:
keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:33:e7:b0:b7:ac:c8:29:43:d0:0c:d1:ec:9b:c2:ed:c1:6b:
d6:0b:c5:23:82:c7:17:46:fc:79:2f:6e:4c:64:6b:25:46:3c:
31:82:eb:a1:69:8d:45:23:cc:0e:f3:23:8a:fc:d9:66:ae:9e:
cf:74:51:66:72:ff:47:85:92:6c:0a:f5:7f:32:37:d5:55:6b:
a7:e6:d2:cc:31:16:3f:c6:09:88:f5:28:76:e5:6a:ef:56:1f:
9b:2b:7b:a2:f5:4d:a2:94:7f:b7:8b:7e:b3:1d:11:27:bf:9f:
78:03:57:60:64:fb:b9:91:e5:35:ef:96:6f:c7:a1:af:64:be:
49:d0:99:80:e2:ba:e2:34:4e:4d:55:0d:63:18:97:62:02:0e:
67:0e:70:bd:f1:a7:92:c4:40:6b:61:8c:ee:4f:3f:8b:7a:b0:
ec:f0:dd:ec:b6:96:f9:c9:24:c0:9b:c1:8a:99:27:c8:53:50:
95:61:40:0e:c1:b8:01:8d:4a:f5:c7:73:11:09:00:73:e2:ab:
94:b3:32:b0:13:77:1d:2e:d9:66:c3:90:59:4b:45:ae:1d:90:
5c:e2:1c:c7:48:54:37:ab:e5:f3:5c:db:a6:7c:7a:4b:7a:89:
b1:b0:0b:a4:e5:1b:1a:d2:e9:2d:a8:0c:38:bc:af:7e:3f:ab:
d1:30:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:37 2026 by rpki-client