Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
File: a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json)
Hash identifier: 0ZmpA9AsOEg4LBr9jWFVJOJSJtjYEdXyaRrMtLqMEHU=
Subject key identifier: 7E:B5:F4:93:7D:2E:3C:77:AC:15:84:D3:12:02:0A:1E:E4:C4:AA:4D
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 019D25BA51DA30805DA21CFC56EE86201103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 16:01:00 +0000
Manifest this update: Wed 25 Mar 2026 16:01:00 +0000
Manifest next update: Thu 26 Mar 2026 16:01:00 +0000
Files and hashes: 1: 2RbeqdMiyrwCVLR5chpWY1wVXBs.roa (hash: FV2Q/IEBTvjzgG5NIpgTYEVedEVCT2bxukDMuyGlG3g=)
2: Lijwv8ed8pOLySWZZGE9d68r6MQ.roa (hash: 9P+vvVo2WGEbeXwE6ljHBigsAywfbwq49GCsuySXDx4=)
3: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: gNgGTgrFUI+QV/pqFelxJxolsHitN/HS1dzS55+G6So=)
4: g5j5FZkvMABlDgQ1VxUj3-qHrIQ.roa (hash: GDgyOidVPTAYf13W4o/hjNWE5JEbUK7OcD6kn+Y2gxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:51:da:30:80:5d:a2:1c:fc:56:ee:86:20:11:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Mar 25 16:01:00 2026 GMT
Not After : Mar 26 16:01:00 2026 GMT
Subject: CN=7eb5f4937d2e3c77ac1584d312020a1ee4c4aa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:44:9b:a0:22:14:7d:94:c7:ea:28:4a:07:08:
46:ea:c2:c9:0f:a2:69:cc:ce:f9:1b:35:c3:72:87:
00:e5:9e:04:50:06:7e:2d:45:f9:56:6e:5a:da:22:
15:4a:25:45:3a:24:9e:4b:ed:d8:dc:c7:b9:55:62:
e3:3b:65:1d:69:be:ae:80:0a:0f:2e:91:93:1e:25:
f6:4f:0a:14:be:41:88:7c:ab:08:3f:07:74:de:c0:
95:dc:5d:41:f4:91:bd:59:e2:de:6b:09:a8:c0:38:
8e:c7:66:85:84:89:3d:07:98:7f:4a:7b:c6:5f:91:
cc:0c:70:b0:df:41:b9:c7:25:e1:2b:1f:70:74:0a:
ab:47:85:24:ff:04:47:ab:7f:9d:61:44:db:5d:fc:
77:35:e8:82:6e:10:ac:78:20:24:18:87:28:ea:c7:
90:97:10:70:ee:34:4a:50:48:76:2f:b8:ea:ca:ae:
2c:e3:11:92:1b:30:86:93:82:35:83:cc:78:b8:58:
bb:e6:19:6b:16:9d:a6:b1:b0:eb:68:49:f9:6f:32:
7d:45:eb:38:80:45:16:86:f1:03:b4:bd:ea:29:12:
2e:dc:37:14:fd:9d:af:51:aa:27:35:0d:97:9a:32:
67:fa:d3:54:ab:be:da:67:eb:6a:18:67:f4:b8:07:
d8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B5:F4:93:7D:2E:3C:77:AC:15:84:D3:12:02:0A:1E:E4:C4:AA:4D
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f7:5c:5f:8b:87:d0:81:0b:83:ae:96:31:30:1e:84:e2:d7:
f5:ab:a1:37:ea:00:5d:6a:e2:7a:d5:64:47:be:b6:9b:37:73:
6c:b9:c1:54:7b:13:50:c8:44:87:09:e8:43:8a:fb:2b:2e:77:
e2:1a:7d:c3:ac:19:73:27:50:90:69:6a:d3:d6:c8:82:61:ef:
bd:99:5a:30:9d:14:7c:95:13:e5:df:89:60:c6:2b:0d:30:c7:
42:ae:76:d6:30:45:37:80:2f:c8:8a:f1:15:da:60:8c:7b:80:
64:86:53:77:8e:94:5e:c5:88:e9:bd:16:d4:a3:22:1e:1f:ef:
0b:ad:c1:05:7a:c3:2a:66:a9:25:a0:2b:8a:39:0b:cc:0b:b1:
60:b9:f1:c7:9d:70:dc:50:ac:07:d8:74:da:bb:bf:d4:94:f8:
7e:0e:72:e2:50:ef:37:e6:ad:42:91:d1:6e:ce:5a:be:84:75:
b4:f4:d7:5c:e8:f5:95:e9:cd:bc:7c:38:42:49:bd:60:f1:7e:
7b:28:d4:3b:fc:ef:22:19:20:a5:99:bf:6a:d1:c3:c5:f6:16:
4a:be:5c:74:67:5d:b7:5f:77:23:d5:ba:7d:17:48:a1:b0:c1:
eb:d0:77:ca:89:00:1b:05:4c:e4:ef:7b:01:22:93:1b:a3:c9:
b6:a2:42:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:12 2026 by rpki-client