Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: 6/thjqSe7F5E4CQYvWSy5sU+WSX32OmzZsaD7RpFKts=
Subject key identifier: 53:5A:AF:E1:8F:8F:97:CC:3D:D9:1C:05:81:D7:08:75:E5:64:55:BB
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 019D25843C5827345C3C0D9B0A81D2111E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:01:56 +0000
Manifest this update: Wed 25 Mar 2026 15:01:56 +0000
Manifest next update: Thu 26 Mar 2026 15:01:56 +0000
Files and hashes: 1: PzKWoUJeFLqjUWS7LgF4BdwM7PI.roa (hash: OsmHic4Ai/0j0JqDsk2Y5rGOjUKPGoeMip/8Vo2h1CM=)
2: UsG3baUGIxj41J_YNnv0F0uvJ9g.roa (hash: Ou9qv1YwHjFroWI++/0y93X1Q7gw8mUqZv7cZxbQ++U=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: fDdgSeaNaxsIjVAkn0qktVi1xDX5RML5ba1pAZX2g0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:3c:58:27:34:5c:3c:0d:9b:0a:81:d2:11:1e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Mar 25 15:01:56 2026 GMT
Not After : Mar 26 15:01:56 2026 GMT
Subject: CN=535aafe18f8f97cc3dd91c0581d70875e56455bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:33:ed:84:fa:95:ed:f2:6f:7f:2b:8e:f5:
e7:4a:6a:59:d3:ba:fb:4f:24:e3:cf:fa:ed:43:87:
42:e0:ed:24:13:38:3f:73:bf:89:a6:c7:34:15:41:
ee:de:d8:da:05:09:ab:11:35:eb:57:de:15:f1:22:
2f:9a:86:dd:de:fe:3c:12:75:2c:8a:3d:b8:8f:e9:
27:88:3c:ba:82:1e:ad:4d:82:2c:06:71:a1:a4:75:
2a:0b:32:5a:62:26:e1:01:74:d8:06:e7:a3:80:d1:
c9:0a:4b:c8:7e:9b:24:31:c2:53:51:94:e6:0c:81:
e2:22:8d:4f:f8:41:d3:02:24:a6:ad:ba:ef:50:3e:
80:a4:aa:94:0d:f5:34:d7:d1:47:5e:36:03:72:d3:
30:a2:20:39:fd:9a:66:58:5e:87:19:9e:56:3c:41:
49:76:65:77:cf:6c:46:e9:b9:b4:ed:48:cc:93:9c:
e4:78:29:60:c5:99:0e:80:2a:6e:08:37:bb:e1:ad:
bf:03:54:9f:b1:5d:bc:cd:80:31:ef:fc:ea:0e:19:
0d:a2:98:15:e2:50:da:b8:c0:90:2e:5b:49:8f:2f:
68:60:26:31:13:65:ab:4d:92:77:42:e8:3c:f8:4c:
4a:22:f2:f1:01:a1:e2:1e:fc:99:c6:5f:70:41:6e:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5A:AF:E1:8F:8F:97:CC:3D:D9:1C:05:81:D7:08:75:E5:64:55:BB
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c6:16:d1:84:b4:61:de:e4:5b:56:31:9f:73:33:27:ab:c6:
79:2b:87:0b:65:21:49:f4:cb:a9:33:ab:3a:ce:e9:2f:b9:4e:
f0:5d:f8:9a:11:0d:97:cd:c2:f6:c1:03:5b:b6:a6:a2:b2:c8:
83:28:60:ee:5e:68:70:10:90:be:5a:62:11:bb:11:bc:74:ae:
af:2c:18:f1:cd:0b:de:24:5c:d2:f2:2f:c2:04:61:59:fb:35:
55:23:16:56:a7:bf:d5:b0:5e:65:ea:44:ee:e8:99:af:42:f9:
83:3e:04:e7:fa:e8:97:bb:80:4c:1a:7f:64:17:80:5a:dc:20:
64:06:cc:03:2e:2d:cc:98:a3:b9:0f:e1:68:9f:de:fc:be:00:
39:b1:b9:2e:66:36:bf:b5:6d:70:e0:94:e8:4f:90:df:61:aa:
55:75:b3:15:f3:68:82:a8:04:f6:d1:4e:e9:fd:95:2c:4d:a5:
f4:8d:9a:ae:42:3e:83:cc:99:33:fc:f1:73:f7:c9:36:1b:c3:
37:e0:e4:71:4a:85:b5:39:d9:8b:40:59:80:fd:8e:af:14:a3:
9d:c6:03:ae:98:11:13:49:92:00:7f:ae:a9:57:5f:6a:11:82:
82:40:36:92:19:8b:c4:12:d4:db:f3:4f:f7:8f:14:83:95:b1:
15:f0:13:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:48 2026 by rpki-client