Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
File: RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft (raw, json)
Hash identifier: hZ/XVqZeMfOqk/9nHEiOhfNr4nqOcZ4dzIzupWlivj0=
Subject key identifier: 8E:7A:33:27:25:E5:A1:0F:0A:20:A4:5C:5A:34:BB:F9:43:FA:98:1D
Authority key identifier: 44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
Certificate issuer: /CN=448ca39537597cfae60ae0421db8e098b4e26130
Certificate serial: 019D2703954D2E834A637A60D37057F43E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:00:39 +0000
Manifest this update: Wed 25 Mar 2026 22:00:39 +0000
Manifest next update: Thu 26 Mar 2026 22:00:39 +0000
Files and hashes: 1: RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl (hash: fRmu2uIxjqk9uzE5ze4hDFN6c988XqHRrI5Go1hMRZQ=)
2: UXnKo4Ey-1UOsTwsFxzecNca4ws.roa (hash: ilB1dCXfkW75QAbnFoJP+oitYYjAJLiYJ/zgOjFv/HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:95:4d:2e:83:4a:63:7a:60:d3:70:57:f4:3e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448ca39537597cfae60ae0421db8e098b4e26130
Validity
Not Before: Mar 25 22:00:39 2026 GMT
Not After : Mar 26 22:00:39 2026 GMT
Subject: CN=8e7a332725e5a10f0a20a45c5a34bbf943fa981d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:68:4c:9e:ab:b8:a5:73:50:8e:35:0b:3e:
64:26:ad:da:2e:40:b5:43:f8:d5:01:f0:2f:a4:87:
44:b0:f4:d7:82:14:54:67:f8:34:42:23:f1:07:b6:
32:33:7e:96:ba:60:8e:d8:a4:89:55:05:fa:a0:2b:
f4:7f:c2:77:18:ce:db:25:b6:09:b0:c6:f2:de:57:
c9:bf:78:dd:96:e1:e9:93:f8:af:de:83:3c:35:6a:
19:fe:16:da:cb:9c:f5:c7:20:59:21:28:82:af:45:
50:7c:54:4a:89:21:1a:0a:37:5b:44:65:20:66:e6:
aa:1c:0d:a7:98:27:21:d3:7c:3b:3f:8a:60:69:9f:
c9:74:18:3a:89:00:8c:de:98:eb:b5:23:60:1f:05:
40:1f:e1:a8:56:ec:ab:57:41:83:89:5d:70:bb:f1:
3e:50:61:0c:bb:0e:d6:e4:ce:8f:3c:a7:0b:52:79:
13:7b:22:1a:2e:ef:7e:38:a3:c9:92:15:58:0e:f0:
df:57:bf:6d:ba:c6:a3:4e:ea:08:06:a6:4b:91:d0:
8a:f3:5b:57:dd:ca:26:7a:25:45:d2:32:2b:25:2a:
e0:88:4f:d8:c6:c2:9e:ca:0a:df:6a:96:5d:87:7a:
4e:a2:a2:48:a6:76:c3:9b:15:7c:9d:b8:e1:77:6e:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7A:33:27:25:E5:A1:0F:0A:20:A4:5C:5A:34:BB:F9:43:FA:98:1D
X509v3 Authority Key Identifier:
keyid:44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:70:5c:6d:6b:f4:dc:ae:2b:5d:33:00:44:ab:7c:81:c0:4b:
05:10:72:b4:2e:74:a7:73:6e:2a:b4:ef:53:d6:62:ed:23:e7:
16:ad:52:aa:c0:26:3a:eb:ee:8d:66:02:ff:7a:d7:59:ca:45:
5d:8a:85:7e:ab:82:0c:5e:82:22:3d:2a:df:aa:8f:d2:d9:d1:
4b:6b:2f:c4:b6:20:b0:6d:07:7b:38:5d:17:24:23:f2:c6:f5:
b9:83:a7:77:78:66:07:88:42:5f:3e:bf:2a:23:bf:26:ea:67:
a7:d7:c3:6a:e0:95:22:1a:a8:ec:f8:a9:7b:cf:39:bf:90:83:
73:28:30:42:2c:ca:1f:e6:f5:e0:e3:3a:6c:6f:80:00:ad:f9:
ba:ee:86:3f:fe:3e:b3:42:1f:91:a7:c7:e3:c5:66:96:1d:0c:
52:e5:35:27:17:76:e5:7a:8b:2b:34:07:d5:26:bf:9f:d3:97:
5b:83:fc:03:b8:d8:44:66:2c:c6:4f:20:ba:9f:cb:e9:fc:4b:
d5:66:c5:f7:f6:63:0b:98:19:36:42:93:de:34:ce:51:bf:d4:
73:96:a7:6e:c8:17:81:d4:dd:1a:5b:6c:00:48:1a:64:99:4e:
28:ad:cb:09:43:b3:d3:92:fc:2d:fd:4a:a0:71:51:d4:c4:40:
93:cb:fd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:48:56 2026 by rpki-client