Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
File: 94Bqw18urALMoEbWUPsivv7mjUM.mft (raw, json)
Hash identifier: 64ZVFZxNVF2UJXv1oFCBjRBfvRQHq5Nre5+osX5zrXM=
Subject key identifier: FD:80:E7:22:F0:1C:52:AC:A9:CD:5F:94:6E:16:5B:42:F0:23:47:82
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Certificate issuer: /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial: 019D2771CF81E18AF9B7E4D11CE92891E269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: 94Bqw18urALMoEbWUPsivv7mjUM.crl (hash: s+n+RgMHZImOZ+ny74VS9AIEEwm43lE4GoMfZgw41aQ=)
2: lyCd8jSWuD5ylcHwCB_UZElDqqc.roa (hash: yIuhwu9g6Xxe3O7KESvgNx7V8m2Ye7H/CuRv/nEh5KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:cf:81:e1:8a:f9:b7:e4:d1:1c:e9:28:91:e2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=fd80e722f01c52aca9cd5f946e165b42f0234782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:27:fa:05:00:e5:65:45:e0:9e:99:67:d0:
b6:4d:02:bd:5e:1e:2a:91:d6:ff:39:01:fe:c3:8d:
b4:09:80:73:ee:c1:c8:8f:e7:14:ce:a2:86:54:8a:
a3:af:de:25:08:d1:52:62:fc:ed:61:fe:08:c6:30:
ff:da:19:06:43:0b:95:8a:6f:71:fc:f7:af:c5:f2:
a4:74:ae:33:a2:88:d3:c1:53:70:b1:23:18:44:29:
c3:8a:9d:98:c0:dc:8c:54:17:9f:13:da:9f:cd:bc:
72:62:8d:2d:fa:d8:2f:e8:90:35:b1:37:b7:5d:7e:
75:e0:42:24:c2:f8:3c:a5:69:87:53:29:12:18:61:
22:de:64:42:e0:00:14:12:5b:55:b0:11:2e:2b:04:
ea:48:18:04:99:c2:c3:44:ec:65:ee:15:a8:05:be:
f3:c2:a1:46:2e:e2:7e:f5:9f:ad:8a:38:86:59:93:
55:fa:79:2f:60:79:80:f9:ff:39:2c:03:39:d8:8e:
48:ed:30:de:c6:26:cd:e0:0d:83:f8:30:0e:31:90:
8b:67:c0:b6:ed:b7:06:46:de:73:5d:0f:5d:d4:e1:
87:8a:0a:51:90:98:a0:b9:06:2f:91:2f:f6:a1:4d:
56:49:f7:b1:a1:20:2e:a1:d7:ed:40:6b:de:f6:fa:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:80:E7:22:F0:1C:52:AC:A9:CD:5F:94:6E:16:5B:42:F0:23:47:82
X509v3 Authority Key Identifier:
keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:54:df:b9:03:27:7f:90:62:ce:0f:59:f5:c2:70:5b:b1:f1:
b6:44:10:d9:42:7d:45:cc:78:dc:3b:47:35:68:40:02:a8:38:
7e:d9:57:c9:e0:11:47:6b:3d:b9:f9:b8:2f:25:35:2e:13:60:
2d:a0:e0:4f:89:ff:74:a9:de:63:3c:1d:d6:33:d4:df:2c:cc:
b4:8c:2e:19:88:9d:99:48:9b:17:12:d8:81:c8:25:8b:91:61:
7f:c2:b8:d0:16:c2:c7:87:a1:cc:57:f8:b8:10:1a:25:a1:48:
31:bf:fa:d8:e8:40:4a:50:fa:ee:9c:fe:0e:61:db:66:d7:07:
50:db:a8:1e:3f:3d:c9:72:b1:8b:f2:5d:5b:05:b8:fd:89:38:
97:6b:8b:17:65:06:6f:14:eb:05:38:81:45:9a:b5:92:a8:79:
e2:e3:30:58:f0:c6:61:57:30:3b:67:e8:71:0f:f3:37:14:e5:
7f:d1:ce:8e:5d:cb:82:13:73:27:14:a1:87:c1:22:39:0a:ce:
41:46:78:fc:59:e1:18:13:a9:51:16:e9:ce:1d:e5:62:60:70:
dc:78:1a:3f:2e:26:13:b2:0e:84:b6:54:15:62:d0:b7:46:b7:
78:7d:84:74:c1:f1:07:6c:18:d2:7c:86:4d:40:96:ad:58:d3:
cd:1c:b1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:44 2026 by rpki-client