Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier: mS966uS2sO+LDo+PFSBU1mwbhYSW9OdwCltUb/jduDM=
Subject key identifier: D4:D0:24:A6:EE:D1:2E:1D:69:78:E9:1E:A4:64:C6:27:D3:C1:A4:93
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial: 019D28BB94D03E211AFEF35242141F5054B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:01:15 +0000
Manifest this update: Thu 26 Mar 2026 06:01:15 +0000
Manifest next update: Fri 27 Mar 2026 06:01:15 +0000
Files and hashes: 1: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: er7w4LO/XiudoYhFMinb8C2Rg42T4Xkryf6BElmzZOY=)
2: wkMmp6s5tIiVOMhQ-G1Z3odbkBA.roa (hash: E+8cABzHZlQUHHuKZ16h6fJZng3ckrzig4shYxP7eeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:94:d0:3e:21:1a:fe:f3:52:42:14:1f:50:54:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Validity
Not Before: Mar 26 06:01:15 2026 GMT
Not After : Mar 27 06:01:15 2026 GMT
Subject: CN=d4d024a6eed12e1d6978e91ea464c627d3c1a493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:8c:70:82:c8:3b:45:38:67:b0:87:d2:5e:
55:05:0c:d7:d3:20:df:b4:b8:a5:d3:d5:c7:06:49:
5a:c7:3c:a6:90:16:76:ae:51:0c:f4:57:fa:9a:c1:
aa:c4:27:c7:8f:47:85:41:ab:ef:ac:29:10:b9:12:
5a:37:57:73:68:0c:62:24:7e:a6:df:19:69:f3:d4:
cf:48:3b:0c:8e:0c:58:1a:0b:5f:98:ba:ad:83:ab:
4b:65:ed:b7:e0:dd:1d:42:f2:1b:1b:69:25:72:84:
d5:e0:9e:43:96:a8:b4:4c:d1:f7:e4:06:a9:25:b9:
01:12:c6:09:bd:82:b7:56:c9:ef:98:c0:85:65:3a:
03:2c:85:a9:72:57:a5:37:46:f8:6c:bf:2e:2a:c4:
3d:47:09:32:dd:4e:bc:78:be:1c:53:40:62:17:b2:
e9:af:7d:9b:36:e4:1d:af:27:0d:02:fb:ae:d8:7b:
f3:a2:71:fc:79:63:21:59:09:d5:75:90:71:b9:b4:
99:7f:f7:e4:ae:64:f0:d5:90:2a:6e:ac:ac:3e:19:
81:89:06:76:ca:d2:ba:d7:57:85:93:f6:3d:08:22:
91:c5:ea:ff:16:9b:5a:c9:42:02:ad:fa:dc:27:92:
44:5d:54:d7:cf:5f:fd:1f:27:67:20:b8:5f:e6:df:
2a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D0:24:A6:EE:D1:2E:1D:69:78:E9:1E:A4:64:C6:27:D3:C1:A4:93
X509v3 Authority Key Identifier:
keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:86:f8:cf:fe:a6:0e:13:2c:9e:64:35:a4:1f:c8:f0:03:bb:
dd:88:c3:ce:9c:0c:1a:bd:f9:05:4b:e2:b5:ba:2c:b5:da:d9:
38:84:11:4b:73:52:0f:b8:6d:7c:53:c9:34:f1:fa:e5:bc:be:
b4:7c:71:f3:40:8e:fd:6e:5c:55:0b:06:39:22:f1:cd:b3:70:
70:bd:4b:3c:87:d0:81:68:a8:ba:d0:ad:99:3b:f3:01:ba:63:
be:82:ea:3c:89:36:4a:4e:1b:d0:be:e7:d3:80:47:5d:9d:38:
56:6a:41:36:9d:62:33:04:fc:b0:e7:40:c7:b5:f8:21:7e:98:
89:0a:5d:97:85:55:40:d6:52:06:3c:7a:61:eb:cc:96:9d:54:
62:4f:e7:82:fb:11:b3:ec:3b:22:76:f4:8f:78:b6:9e:95:25:
00:b1:c8:2d:9a:ad:03:60:0d:b1:26:72:30:98:7f:82:e1:ca:
41:9f:22:ad:e7:c2:37:48:6e:97:bb:fb:eb:92:ac:f2:3b:fc:
17:80:5f:f8:7e:f9:b1:3b:6e:25:78:a0:bf:70:cc:ce:78:75:
10:14:13:1f:9c:89:75:28:1e:a2:e7:c3:43:15:b2:f1:ee:65:
0b:4b:34:43:0c:fa:b5:be:27:11:5c:cb:b5:a1:35:b6:88:ac:
62:2f:68:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:53 2026 by rpki-client