Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier: fRXrKOlPFHNaeKXz6zm9TaYKRe1bK+A2B6zgioecKJU=
Subject key identifier: 3D:6C:46:2D:DB:7A:CB:49:21:85:84:DC:35:31:59:AC:74:B8:6A:9E
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial: 019D2996E81C30D9C3C22245355CC525245E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 10:00:48 +0000
Manifest this update: Thu 26 Mar 2026 10:00:48 +0000
Manifest next update: Fri 27 Mar 2026 10:00:48 +0000
Files and hashes: 1: 36DzStGfXWJaTvy_DFt5js-qBkY.roa (hash: 8LA/a3S6Q/+rbVsFghMDCmBix0HHSJzG0POoZHw8My4=)
2: 9yn0ZWrwWlwVQcTY4DZrDaNSuqU.roa (hash: XESXJFfuiD+BaGLEcM4v4ajEMguCnVi9qwOcF7gca0c=)
3: E1fZi9ctnO61xdkwBdXsEigsazY.roa (hash: AfabkRw7EM5b0Hf4k7+LAG9L1ed9yMxYQaK/+/5IZY8=)
4: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: oHKkoKyqJ4ReBL9mbbH5rEOBE/gEHpTNHVpduqRoml0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:e8:1c:30:d9:c3:c2:22:45:35:5c:c5:25:24:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
Validity
Not Before: Mar 26 10:00:48 2026 GMT
Not After : Mar 27 10:00:48 2026 GMT
Subject: CN=3d6c462ddb7acb49218584dc353159ac74b86a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:00:08:ee:10:5b:fa:7a:94:d5:ec:e2:1c:
1a:6b:2c:45:b5:f7:8d:ff:60:91:5d:51:a7:0c:24:
7d:4f:27:c2:c2:51:6c:2a:4c:d6:68:6d:ca:bc:15:
ed:76:bd:7e:c9:5c:89:4b:61:e3:3c:ee:ef:6b:4e:
f4:a0:e3:be:b7:ba:f8:32:c0:bb:38:77:d8:39:55:
27:50:cb:98:46:ad:47:c1:fd:c4:d6:f1:28:b7:86:
d5:ed:ca:e4:a1:3f:cd:b9:08:2d:b0:a8:7d:bc:62:
8b:c8:f8:17:3e:7e:94:5e:92:00:3c:d5:e4:01:cb:
0c:ed:c0:a8:5c:30:e7:a3:7f:18:5c:fc:be:56:49:
71:4a:37:b3:1f:27:93:16:52:bb:2e:1c:c5:68:a8:
76:7e:83:ea:a6:55:bc:de:1a:48:53:a4:c1:a5:cf:
a8:d7:cd:a0:d2:59:a5:dd:e7:50:d9:f5:cb:1d:a2:
c9:6b:f3:76:55:97:9a:df:b7:31:9b:f0:bf:36:48:
3d:d3:d2:3f:d0:4d:d5:8b:bc:d6:3d:1b:dc:38:72:
8d:40:5b:c7:fa:3a:b6:b8:9f:e1:76:d0:2d:4c:05:
0b:9d:60:83:85:c1:2f:8d:72:f9:d7:d9:31:51:19:
6a:1c:68:47:39:83:5b:6b:7d:dd:9e:cd:b7:a0:85:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6C:46:2D:DB:7A:CB:49:21:85:84:DC:35:31:59:AC:74:B8:6A:9E
X509v3 Authority Key Identifier:
keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:12:2f:d0:3c:e4:8e:49:f4:25:c8:58:ef:6a:ea:f3:44:0f:
0f:7a:da:5e:44:f4:f0:48:80:16:f5:b5:7c:98:20:2f:2d:fa:
45:62:90:db:51:e6:c1:47:a4:1f:fd:d6:8a:30:67:9d:1d:fb:
89:fe:0c:bf:16:76:05:53:02:14:12:cf:d3:af:f1:b4:f3:f7:
13:3b:27:53:85:20:43:60:98:22:53:60:99:a0:c5:f9:90:96:
5b:cd:be:e5:8d:4f:40:ff:f7:5b:01:71:a4:52:30:78:a7:5e:
a0:2a:c9:e3:26:51:fa:02:7a:8a:3d:a4:d7:d9:50:00:7b:f2:
55:57:d6:db:2b:2b:3a:e4:c9:e7:84:d6:44:a0:f7:07:96:39:
dd:61:e7:d4:7b:30:7f:07:e4:f9:21:f4:fe:0d:68:66:3e:1d:
11:3b:ad:3b:2a:cd:b0:1d:ea:49:00:f8:48:02:03:0a:88:4e:
e3:31:6c:13:97:82:d4:1f:04:2f:b8:d1:a5:65:01:36:d0:a8:
6c:5b:f2:05:c5:f1:ff:72:79:87:da:cf:a7:76:28:f5:c0:cc:
88:29:1e:4e:ac:ea:b6:83:fd:36:b0:5c:53:1a:cb:0f:fb:d7:
d0:b2:76:be:bf:2c:5c:e0:e3:35:fd:94:9b:2d:19:64:b2:8b:
5e:f2:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:38:56 2026 by rpki-client