Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: Y3UCokSdKWYc7OsYieD3KKgI7uKxk9mAuV77nR/gwWA=
Subject key identifier: 09:54:D0:53:5C:3B:08:77:D7:29:19:F3:F9:61:2E:22:EE:18:F6:23
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019D28F2B595806EE76685D00743259917B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 07:01:27 +0000
Manifest this update: Thu 26 Mar 2026 07:01:27 +0000
Manifest next update: Fri 27 Mar 2026 07:01:27 +0000
Files and hashes: 1: TIwiSG3SZJO9cgM-NFojwrWmCjg.roa (hash: aGI8Zo4K9271la27XJcpbk36NlmUSX5++U6ehpboAto=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: e5gcrJRHlB79u3hkXNlvX0MWbOCgowaXYsHQYM0iwBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:b5:95:80:6e:e7:66:85:d0:07:43:25:99:17:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Mar 26 07:01:27 2026 GMT
Not After : Mar 27 07:01:27 2026 GMT
Subject: CN=0954d0535c3b0877d72919f3f9612e22ee18f623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:02:32:fb:f6:d3:02:84:0c:0c:cc:ff:6a:
b6:a8:30:43:c9:8f:1c:7f:4f:5b:a0:6c:57:86:ba:
39:81:46:0a:26:da:2e:bb:ed:64:b0:23:9e:77:66:
79:9f:1d:ef:c2:88:62:b1:85:f1:b6:98:73:26:2e:
62:4a:f3:80:98:76:0b:af:4b:1b:75:6a:32:f4:36:
7f:b2:99:2c:1d:e3:af:92:c3:ff:b0:67:6f:6c:7e:
e5:2a:8f:63:d3:24:4c:01:fb:df:c9:f0:b9:c6:a2:
09:53:a2:28:2a:3b:b9:09:b7:b8:c3:e2:9e:6c:52:
88:52:89:85:56:94:ce:13:5e:fd:e7:01:8f:73:4d:
90:77:b9:1c:ff:f2:68:33:d3:bd:b4:b5:17:8f:dc:
ee:be:05:7d:23:08:fa:24:11:41:12:05:b8:13:d8:
d3:67:a1:c7:89:78:ff:1b:68:3d:b9:bc:32:71:48:
3e:a3:83:ea:90:1c:25:09:26:35:05:83:10:e8:ce:
2c:41:11:6c:55:67:22:cf:72:98:4e:12:8e:54:0d:
e3:e8:33:4f:4a:0c:0e:d8:02:9a:b8:6f:44:80:3a:
1f:33:5e:84:3a:54:3f:63:65:d2:11:b2:06:e7:b4:
02:cd:92:ec:00:74:f4:63:51:17:35:f3:e3:e0:74:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:54:D0:53:5C:3B:08:77:D7:29:19:F3:F9:61:2E:22:EE:18:F6:23
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:91:73:d9:d6:f5:56:33:a1:5c:60:66:ff:04:e1:ac:32:19:
f4:48:b4:ee:14:76:0b:75:e2:df:e8:94:d2:22:e5:20:c7:54:
8e:ae:30:6b:dc:01:1b:3d:a6:ed:2d:4b:07:d7:b9:d0:aa:1f:
f8:a9:65:e0:99:19:5c:f5:b2:ae:0f:33:7a:09:04:48:3d:c1:
54:e6:0e:dc:1a:d5:07:5b:b0:f7:a3:d1:16:fd:3c:22:b4:44:
58:36:6e:45:80:fb:0a:3a:cd:ac:9b:1d:b4:93:e1:91:cb:54:
1d:02:12:bc:99:b5:a2:46:c4:1e:f0:70:ba:98:3a:62:4f:a7:
15:b1:63:6b:09:61:4c:4b:c9:c4:2a:a3:7f:5e:e4:c3:c9:e3:
d0:83:52:04:78:e1:88:7f:51:c2:1a:e5:15:5e:98:09:50:d5:
19:81:82:10:72:91:40:2b:13:f6:1a:62:68:0b:eb:8c:49:bd:
04:a3:75:16:8e:71:94:9b:00:ff:04:ec:1d:bc:f5:1b:e7:fc:
b6:b0:bf:ed:d3:cd:05:f1:7b:04:cf:74:09:ef:78:00:bf:1c:
af:7a:8c:40:5b:76:c7:d8:ff:02:6e:94:22:1e:92:dd:c3:4c:
60:8a:a9:2f:17:8d:a8:0c:4a:fd:6b:5c:8f:44:2d:88:df:50:
a0:e2:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:33 2026 by rpki-client