Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
File: unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json)
Hash identifier: lrYtqA+E3oUBb+YZLrESF3fpkpE6X7MEDjEsyTPynEI=
Subject key identifier: 72:BD:36:1C:F5:96:2A:5E:0A:17:FF:2D:67:87:E4:64:88:AF:77:9F
Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2
Certificate serial: 019D2584304FE5576D72E6D078C9BDFDE02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:01:53 +0000
Manifest this update: Wed 25 Mar 2026 15:01:53 +0000
Manifest next update: Thu 26 Mar 2026 15:01:53 +0000
Files and hashes: 1: 1-5QJBLxp5AmzSVUk8qikofQqav4.roa (hash: bXIAnhQl9MhR5WL6f2K74RtvR0mnQzIz2IKnZ9vIJ10=)
2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: aPQyUdF94GUnxZQbUys+Z4SvXjsJIGDg/4V+SzCeRWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:30:4f:e5:57:6d:72:e6:d0:78:c9:bd:fd:e0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2
Validity
Not Before: Mar 25 15:01:53 2026 GMT
Not After : Mar 26 15:01:53 2026 GMT
Subject: CN=72bd361cf5962a5e0a17ff2d6787e46488af779f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:fc:ff:bd:54:de:da:5b:f3:7c:ae:f3:80:
62:09:e6:0f:06:d7:f7:b2:f7:23:b8:c1:fa:bd:75:
ba:90:88:38:2d:93:86:db:4a:bc:e9:3d:a5:15:b5:
f9:ee:be:60:1c:c5:f6:a0:d5:f9:27:b7:41:f7:2c:
09:22:c1:02:cb:f2:3a:95:cb:fe:60:4a:9b:30:e8:
f6:42:2a:f5:7c:02:4b:8d:4d:a0:6d:f3:d3:b7:59:
8c:52:67:e9:cb:ca:ff:f9:94:69:b5:6e:37:82:e1:
5d:cd:ee:b6:d7:95:61:a5:e1:20:58:7b:84:4d:bd:
ca:b2:df:cb:74:c8:44:ad:fd:2d:04:01:b8:09:be:
bd:7d:fa:94:98:ea:5b:74:a6:62:dc:93:af:4d:62:
47:69:ff:c1:2a:e7:2d:0a:f7:94:d0:41:f4:ce:73:
25:8d:64:c0:83:ae:12:56:04:3e:e0:5b:49:51:03:
0c:1c:5d:1b:bf:f8:fa:ad:a0:f9:b1:73:f9:16:37:
5c:cf:fb:55:ea:0e:9e:1d:57:ec:5a:0c:21:4e:f6:
86:cd:dc:90:9b:07:58:58:47:0a:b0:66:56:69:d9:
e6:f1:6d:85:d4:7b:e9:42:8c:68:a8:51:34:55:3b:
75:9b:8b:a8:4e:60:37:46:6b:51:f1:0d:85:5f:8c:
09:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BD:36:1C:F5:96:2A:5E:0A:17:FF:2D:67:87:E4:64:88:AF:77:9F
X509v3 Authority Key Identifier:
keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:32:7e:c6:4b:55:61:40:cc:27:0a:b0:f4:ea:df:5e:03:61:
5d:0c:12:67:5d:d2:d9:2a:b6:67:e9:96:1f:d3:94:10:4c:e1:
80:20:51:39:a2:d0:29:42:70:be:8e:aa:7c:ba:23:0e:af:18:
05:29:d8:c4:8b:4e:9a:13:a1:78:66:5f:c9:61:24:31:f9:40:
c6:36:65:7f:c6:dd:99:41:2e:0d:c6:a2:38:94:84:22:f2:91:
fb:1d:34:a2:07:22:3b:45:90:61:10:62:10:12:82:e1:0b:49:
9d:4c:d9:9d:20:48:87:91:45:45:cc:35:91:a2:76:1a:c9:a1:
60:af:87:49:c5:f4:4f:4f:5f:72:21:45:64:c1:27:81:f9:8d:
52:d0:56:30:5c:4d:d6:d8:50:22:12:8e:66:4e:39:14:13:3c:
fe:bd:6d:cd:c3:47:57:29:f2:a7:f1:b9:44:5f:03:42:b0:92:
c1:00:c7:14:4e:db:c1:77:46:ae:57:1e:f4:9d:a0:c0:0f:d5:
47:c4:b7:bd:c3:42:62:d5:92:d7:3b:ac:4d:d7:09:a3:8b:8f:
89:7a:0c:fd:8b:fe:10:cb:1e:48:ea:30:3b:22:39:83:10:df:
54:34:c3:7d:42:51:0e:7a:c7:e0:9d:2a:86:48:c3:37:61:1f:
8e:56:9d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:30 2026 by rpki-client