Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File: tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier: lIXJx3UWEfUegJSqLFunC5gNakU7ljOxDMQ7cGVA1sc=
Subject key identifier: 9A:74:A4:F8:7E:16:6E:86:3A:60:A6:0E:52:7B:61:E1:77:F7:42:DE
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 019D29299A98469278BB8CDCAC7513522388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:01:25 +0000
Manifest this update: Thu 26 Mar 2026 08:01:25 +0000
Manifest next update: Fri 27 Mar 2026 08:01:25 +0000
Files and hashes: 1: JAq5IJt_YzdoY2C_mteXzLVmKq8.roa (hash: EJI1PbxAdj1+ZoLCqp8KLxjEKCW9Bl8uIJ8QELUabNQ=)
2: sudPoVqFg1PQZP7-xy4v565d_SM.roa (hash: tABC2SMeyK75v3oh2kumS0Pn8iv5DPrW8wlj3JIpyAM=)
3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: 5azwL5JKChD30R3DXhw5+4hIg1ZpGNm2p6b2454oPkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:9a:98:46:92:78:bb:8c:dc:ac:75:13:52:23:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Mar 26 08:01:25 2026 GMT
Not After : Mar 27 08:01:25 2026 GMT
Subject: CN=9a74a4f87e166e863a60a60e527b61e177f742de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:53:7b:bb:8d:02:48:5b:5e:8f:10:0c:1a:
21:03:db:cf:16:43:c2:b2:b5:82:23:74:a1:2d:79:
5e:15:26:a8:60:a0:24:2f:75:66:48:8c:bd:e8:d6:
fa:f0:64:75:c5:80:79:fe:fe:f7:40:be:aa:3a:13:
88:49:aa:f1:b8:40:cd:3f:92:a3:b4:52:d0:f6:64:
ea:42:15:74:4a:4d:dd:8e:90:e4:42:7f:1c:a7:26:
95:73:78:37:ff:4e:f6:3c:5f:49:a8:e1:07:4a:08:
ca:74:f6:03:e3:39:42:48:b0:3d:9e:2d:ae:7f:36:
19:c4:76:bf:61:a3:01:b8:39:0d:f1:50:8a:13:cc:
c7:e4:2b:aa:79:be:3f:cc:86:59:f0:de:68:78:46:
5d:97:aa:b0:b1:d1:75:48:5e:fe:b4:59:c7:bf:2c:
40:b1:2b:0c:0d:c8:c9:ba:11:56:95:69:ef:b2:74:
e3:6b:37:95:1d:65:c9:24:f1:c8:b2:a6:39:a1:ba:
bc:a8:88:db:b4:2e:39:66:da:42:20:e5:0e:11:d8:
69:80:70:db:73:03:2e:d2:9d:c1:90:d5:a6:b5:c7:
3f:85:59:e2:05:9b:3e:76:75:c5:ea:9c:f5:fa:9d:
a6:e8:d0:db:dc:00:33:59:25:f6:69:52:a0:88:f0:
09:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:74:A4:F8:7E:16:6E:86:3A:60:A6:0E:52:7B:61:E1:77:F7:42:DE
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:2d:09:3f:9f:8a:c1:7f:8a:ba:02:5b:18:35:e5:9e:be:e9:
7a:bc:ef:bb:09:d3:68:49:1d:e1:ac:0b:d8:e3:14:24:59:64:
12:d7:ad:88:54:17:61:3b:b8:75:a3:f9:71:5d:0a:94:4f:0e:
0e:5c:bb:64:8f:e7:53:33:8a:8d:14:33:1c:c5:c4:ff:86:c5:
01:41:46:d3:d1:cf:5f:6f:75:ec:75:1b:a7:42:ba:78:5d:e5:
d6:da:ec:3d:2d:c4:bc:b1:1a:ed:fc:f7:db:a3:d7:b1:26:20:
dc:3e:0c:33:a9:7a:72:5b:c3:33:18:9c:e4:7a:c2:2e:2c:83:
61:c4:87:d8:50:7f:26:c7:5e:78:80:72:65:48:3c:95:84:c2:
85:d9:5b:1f:43:fc:c8:35:58:5d:1c:af:95:0f:03:ed:be:2c:
c1:4c:26:de:eb:b1:f8:1c:11:94:29:a1:fb:89:4d:76:f5:90:
58:47:85:25:62:f8:88:88:65:29:90:10:69:f2:d4:20:af:0e:
03:92:c3:d8:8c:fd:68:4c:00:bd:c1:9c:30:7f:c9:8d:65:8a:
4b:b2:c2:df:b3:c1:16:00:67:ca:35:df:8b:c5:28:9f:c2:5c:
93:81:e3:0f:6a:12:f3:f2:44:80:93:d8:15:11:e8:7b:a2:8f:
11:62:94:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:42 2026 by rpki-client