Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: GyLw03bL12poOGggxvW24geJfsnyaMiw6trwvxasgS0=
Subject key identifier: 12:76:CA:C2:56:C9:77:75:23:85:84:9D:D9:76:71:BB:E0:C1:92:70
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 019D28BB700CFADBB1B7E40E4D7927238589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 06:01:05 +0000
Manifest this update: Thu 26 Mar 2026 06:01:05 +0000
Manifest next update: Fri 27 Mar 2026 06:01:05 +0000
Files and hashes: 1: 3yGgq6gpQ9NYaasBYMMPQaATXzo.roa (hash: i0WCJtC2Kt+N/0o8HIjmO/t5ox+yoXwX3GlgqEv4MdQ=)
2: ZRLYVrP2rb95Q-Ge4TVnxmxa0zg.roa (hash: Xsb75QA4ApCthewBTBgfSKpRYNo5qI3KmhsLF/JdAuM=)
3: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: +2HIGz0pZqrZ7c5Xqscll5tp5X2rJW4dkUX/mHKtif4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:70:0c:fa:db:b1:b7:e4:0e:4d:79:27:23:85:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Mar 26 06:01:05 2026 GMT
Not After : Mar 27 06:01:05 2026 GMT
Subject: CN=1276cac256c977752385849dd97671bbe0c19270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:56:fd:51:72:3c:d4:cb:05:c6:4c:c3:ed:
de:b5:c3:64:1d:97:00:db:3b:d2:9e:fa:eb:c6:cb:
5f:e5:10:1c:36:bc:c3:80:ce:c3:b5:8c:ff:3a:d2:
f7:f8:22:01:92:26:34:6c:0f:0c:33:b6:77:3a:d4:
c5:1c:34:0b:78:b5:5a:64:da:76:23:92:7b:e0:ab:
14:f3:fe:30:91:48:fa:6e:ed:f0:82:61:7b:7c:7e:
15:d3:89:77:9f:0c:6e:d6:fb:ec:0f:3e:07:db:1c:
0f:e0:55:57:73:11:57:08:bb:a5:69:49:85:30:8d:
3f:81:68:01:be:1b:65:cc:03:fd:84:33:fc:a7:41:
24:74:97:0f:c7:57:f5:a3:3e:25:29:f8:de:55:bb:
f6:39:52:0e:f0:2e:fc:55:d5:5a:d2:30:8f:3f:7c:
28:94:79:1a:35:ee:a3:20:cf:b0:f0:82:67:be:dd:
5f:2d:b9:cd:49:20:64:0a:11:40:fa:5d:7c:c7:e0:
62:d2:b2:29:25:00:24:b7:dd:f7:18:01:85:51:02:
55:0a:19:b9:e6:b8:2a:0e:ad:75:2a:aa:b3:f1:87:
79:2a:2b:21:28:23:2f:c8:48:1b:92:d8:b6:7b:a8:
af:1c:c8:16:df:14:58:65:0d:4b:5d:7e:be:13:1b:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:76:CA:C2:56:C9:77:75:23:85:84:9D:D9:76:71:BB:E0:C1:92:70
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9a:b1:be:04:66:4d:ab:1c:c3:19:9a:47:26:68:0e:a7:4b:
dd:3e:1c:6b:50:31:be:22:5e:35:67:d1:b8:d3:44:d5:34:13:
dd:d3:de:48:f7:04:eb:24:c6:65:e3:2d:46:47:dc:e6:d0:17:
9d:14:0c:07:93:39:a3:4b:88:ea:d6:b6:2c:f5:0a:43:f2:67:
d6:60:9c:4a:2e:f3:02:1c:a1:82:87:81:73:dc:e0:a4:d2:83:
8c:83:93:68:cf:eb:5f:55:c8:4d:db:84:9d:c3:9c:6d:e4:cc:
ef:66:ce:a7:b6:b8:a2:fd:36:95:4d:9b:3d:82:89:fc:90:c4:
68:51:c0:7a:f6:f8:c2:e4:ab:3e:7a:03:e4:b5:46:96:af:3b:
e5:f0:84:12:e5:bb:37:79:55:4b:a0:34:ac:17:be:2c:2f:49:
b9:9a:55:9f:d1:0a:2f:0e:fb:a1:9e:05:a5:37:01:5d:16:52:
cc:18:ef:1e:af:e9:1d:32:6b:da:5e:7e:2f:79:bd:1c:ce:ba:
9a:7a:79:31:14:aa:de:26:e1:ce:11:eb:c9:63:eb:ee:55:3b:
d2:20:61:9b:7a:cd:9c:70:d5:86:11:05:07:95:77:51:70:b9:
06:4d:d0:48:a7:b0:66:fc:5a:c1:ce:05:1f:4b:ab:bc:4d:4c:
b8:00:5c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:08 2026 by rpki-client