Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
File: RlDGwCqb3k4XGH8FsOypUEg7-S0.mft (raw, json)
Hash identifier: ETsxD3aY0O6qJ12Tl963ShYTYlVAXA00bHiEPBtLfOA=
Subject key identifier: 09:FE:18:F8:3A:7B:85:32:E9:E4:E4:70:42:62:BB:FA:43:90:7E:10
Authority key identifier: 46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
Certificate issuer: /CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Certificate serial: 019D28BB0ADE829B40DD46116F5D69DF2E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:00:39 +0000
Manifest this update: Thu 26 Mar 2026 06:00:39 +0000
Manifest next update: Fri 27 Mar 2026 06:00:39 +0000
Files and hashes: 1: NmmcVUfgK3TWQwUhMMatVOxVYB4.roa (hash: 9DQYkjCMrtUdnqAskr29sPlJq2qt06fWYtuUEIlYHZc=)
2: RlDGwCqb3k4XGH8FsOypUEg7-S0.crl (hash: OKPub+dkLQja+cipHg/AkKNogm8UyXnt4yf+94ov4BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:0a:de:82:9b:40:dd:46:11:6f:5d:69:df:2e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Validity
Not Before: Mar 26 06:00:39 2026 GMT
Not After : Mar 27 06:00:39 2026 GMT
Subject: CN=09fe18f83a7b8532e9e4e4704262bbfa43907e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:b6:51:ea:e0:7f:f5:4e:79:55:9c:a2:96:
b1:32:1d:de:56:8c:c9:73:5e:6c:1d:73:74:87:a4:
da:2d:09:27:c8:c9:ec:0b:34:7e:f9:e2:81:84:db:
d1:5d:84:3e:9c:25:d0:f1:ad:07:17:56:22:33:0e:
81:53:90:d4:c9:fd:d1:9b:65:f0:92:c0:fb:dd:cd:
5e:34:9b:a6:e2:3e:ca:7f:74:d6:6f:b8:58:95:c7:
3d:cc:83:5c:4c:95:7d:df:68:78:a3:61:bc:6b:08:
35:00:34:6a:6c:6c:b1:1d:73:86:81:2d:a5:02:59:
10:36:99:12:b4:f6:5a:4a:14:cc:52:49:3e:d4:24:
0b:cb:3d:a2:8d:0f:5e:6c:5c:a0:2f:bc:26:f8:01:
85:f9:31:c4:d1:8e:f1:20:b9:1a:7f:75:01:5a:86:
8c:fb:6b:77:e2:0f:1e:54:c5:6f:d8:8c:95:bc:d1:
2c:aa:ab:23:6f:24:8c:cd:88:c4:d8:c2:57:0f:4d:
b9:52:dd:a1:72:7e:ed:bc:53:66:fa:88:cc:42:d9:
c8:95:09:74:30:c9:f8:4c:bc:7e:c6:3b:7f:28:48:
59:3c:38:f6:28:3e:56:df:66:fa:8a:e9:fc:24:1d:
e9:4d:0d:98:34:3d:8d:b8:fe:7e:4c:1e:0e:8e:b2:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FE:18:F8:3A:7B:85:32:E9:E4:E4:70:42:62:BB:FA:43:90:7E:10
X509v3 Authority Key Identifier:
keyid:46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c0:ee:69:e5:06:1d:29:b9:37:18:86:95:6c:36:5a:cc:21:
9d:3b:23:86:68:66:4d:2b:f2:c4:7e:fd:b8:8d:5e:60:33:88:
b0:31:61:29:10:25:6b:88:d1:89:fc:59:4d:09:df:c0:46:2d:
af:a2:1b:19:03:24:da:19:bc:08:10:79:4d:04:03:0c:b4:70:
d9:1b:b5:9b:d5:3f:3f:b3:11:34:9f:af:a8:49:04:4e:45:b8:
8e:fb:65:5b:95:dc:43:88:18:28:ed:fa:7f:9c:bf:e3:b1:6d:
4e:22:94:6c:6d:c1:65:d7:60:ca:ef:c0:1f:63:9c:74:ae:3c:
2a:dd:1b:22:61:e1:4a:72:54:e8:65:76:04:2d:79:5b:36:83:
b2:a1:ce:ca:d0:5c:4f:0f:b1:11:c3:e7:f4:2e:2c:ec:0c:6d:
1d:f9:9b:81:56:9b:1d:0a:b1:4a:be:02:d0:00:30:77:4f:b2:
7c:3f:35:6b:a9:19:0c:c6:f9:f4:0e:be:12:ba:18:0d:8b:54:
7f:cb:14:3f:f1:3f:1c:33:16:9b:a5:f1:83:4a:5b:7c:97:09:
e5:af:7a:69:28:b2:99:a5:ca:78:6f:d2:ab:9c:3b:f2:b0:44:
d8:22:21:0b:b8:61:e0:fe:60:71:38:69:73:2a:3e:bf:d6:ce:
54:40:a6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:05 2026 by rpki-client