Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: D8auJ7PSqrvscpyA4deaoARQGyj2H6wWmgINCyQRJtM=
Subject key identifier: E2:18:B0:48:D5:E6:3C:71:26:98:1E:5C:67:2F:8E:E9:1C:45:1E:45
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 019D2A7269B8A505C130770A93DAAF5D3456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 143E
Signing time: Thu 26 Mar 2026 14:00:34 +0000
Manifest this update: Thu 26 Mar 2026 14:00:34 +0000
Manifest next update: Fri 27 Mar 2026 14:00:34 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: tUT3WedU9mHxY2CSUdifozLC08WQtnyFk2m0GOyVtrU=)
2: G8RD2uK8jegsTsE-7XQ_nINovw8.roa (hash: bbRv59/fFxUF7NCQBw4VIduLszpjkq+XNByjPQilIdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:69:b8:a5:05:c1:30:77:0a:93:da:af:5d:34:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: Mar 26 14:00:34 2026 GMT
Not After : Mar 27 14:00:34 2026 GMT
Subject: CN=e218b048d5e63c7126981e5c672f8ee91c451e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:0f:6e:f6:22:64:cf:5a:30:99:af:af:c6:
53:d8:7a:51:d3:b8:d5:87:9f:d5:32:ba:7c:b3:6b:
8f:46:75:eb:7f:35:53:e5:3c:12:ec:f3:2c:f2:9d:
bc:f9:38:73:34:33:76:a5:f3:4c:c7:46:e0:55:f7:
08:ad:d9:44:58:7a:be:60:79:ed:a2:55:65:c0:7b:
ff:86:47:c4:02:57:12:a5:ef:8f:76:e5:a1:49:3f:
5e:e5:ce:b2:70:1a:1c:a2:04:b2:9d:65:3e:3e:20:
66:9a:84:5c:5c:67:ff:2a:d1:02:d8:f5:47:42:f4:
12:68:9d:01:bb:75:53:4e:e9:73:7c:64:c8:a3:c3:
31:35:e0:14:e5:a8:78:c4:1e:a1:c4:b9:4e:46:23:
08:16:05:d5:41:42:01:d1:72:85:42:ec:a2:4c:6b:
1a:a3:7c:27:96:61:7a:54:ec:bd:63:b8:cf:8c:5d:
72:c9:f1:3d:42:cb:a9:e3:55:90:21:5e:f9:4e:ee:
ce:60:8e:0c:d2:b1:af:92:bd:ae:d4:8f:8b:7b:53:
7e:79:a9:8b:39:c0:16:71:0d:ff:9c:f1:37:92:b5:
d6:49:0d:a3:91:91:19:13:e5:87:39:3a:da:23:3f:
6b:5d:75:63:9a:24:47:86:a1:95:10:ab:7a:1b:9f:
b3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:18:B0:48:D5:E6:3C:71:26:98:1E:5C:67:2F:8E:E9:1C:45:1E:45
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:30:2f:63:4d:b5:b0:ad:59:b0:f7:6b:15:43:f1:31:b2:0c:
9d:0f:18:6b:7d:eb:61:06:70:3a:0d:36:5d:d7:5d:99:f7:04:
37:71:0b:b7:e5:3f:d5:3a:7b:16:f6:27:86:a1:77:b0:37:cb:
ad:f7:94:f8:c6:3c:55:98:f0:df:ad:ae:f1:6a:f0:28:c6:03:
98:26:42:64:7b:03:72:a3:ec:0b:5b:af:44:87:1b:83:b8:61:
96:9d:f2:ee:3d:82:11:fb:5a:7e:b3:cb:a2:db:96:78:eb:57:
2b:66:c1:b9:f1:2d:8d:23:a7:e3:c2:98:cb:4d:a8:db:98:e8:
2c:17:17:b2:2a:05:86:62:70:3d:65:5f:96:42:11:04:bc:06:
56:f4:4e:a1:6f:b0:fb:15:3f:5a:d4:99:15:de:e2:cb:69:c9:
b1:53:47:fb:28:ac:94:5f:86:71:18:68:f7:e2:5a:81:ce:9d:
f6:40:e6:cb:d5:cc:1a:12:bb:8d:34:ac:fb:91:36:ea:33:fd:
6f:b7:7f:3c:fb:1c:5d:e6:5b:2b:f5:4f:74:f8:24:67:72:55:
d6:54:bc:4a:1c:a6:c9:9b:2a:dd:67:7c:42:83:c3:9f:60:be:
4b:61:3a:81:77:4f:60:86:a6:34:1a:5c:73:04:0b:8d:40:65:
38:5e:a9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:06 2026 by rpki-client