Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
File: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft (raw, json)
Hash identifier: mEBjIIMtFh9GDSp0wFhe/PQFhJwPIp3BJYnk6gcjYns=
Subject key identifier: 27:FD:25:D6:DB:0F:E3:14:99:F0:67:74:1A:FC:BD:1B:13:84:5B:4E
Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
Certificate issuer: /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Certificate serial: 019D25F0EEBC42825322578B1147EE2C67BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 17:00:39 +0000
Manifest this update: Wed 25 Mar 2026 17:00:39 +0000
Manifest next update: Thu 26 Mar 2026 17:00:39 +0000
Files and hashes: 1: KyN0CWaCH1SDWYOUqLNksdNsPzE.roa (hash: /rmcscD08dlHwE/FpDvYW0hn0CSDsvSiHmlRiI8+lQg=)
2: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl (hash: fA1MTw1NOYyVuRmBXEg+CH9iwDrmy8TmjULSpKbdDcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:ee:bc:42:82:53:22:57:8b:11:47:ee:2c:67:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Validity
Not Before: Mar 25 17:00:39 2026 GMT
Not After : Mar 26 17:00:39 2026 GMT
Subject: CN=27fd25d6db0fe31499f067741afcbd1b13845b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:b6:55:c2:27:08:96:59:e9:91:b4:c3:2d:
98:c5:3f:10:e9:d5:b0:6a:3c:c1:3d:62:df:f6:b4:
21:23:0c:be:47:f4:80:6b:81:73:4e:af:6c:45:5d:
f3:ce:33:57:2e:a3:c3:39:7f:50:59:4a:b2:11:40:
96:d9:a9:d9:00:ef:cd:f8:55:85:83:74:f6:a2:f0:
3b:bd:27:97:ea:2f:90:06:51:7f:0f:2c:55:3b:b4:
51:20:4f:fd:f2:61:8f:75:5f:e7:85:19:d3:90:3a:
57:16:ba:9a:a6:df:65:ad:d1:ed:a2:41:18:3c:a1:
8d:7a:10:3b:28:fa:50:8a:17:d6:2e:5d:33:ba:12:
d1:2e:38:31:b0:8f:fe:52:82:af:da:21:57:99:1b:
61:0f:c4:3a:dc:9b:cb:f7:c9:12:f7:b3:b4:9b:cc:
5e:22:b7:5a:7e:56:0c:d6:76:80:d5:2b:09:b0:a4:
61:53:72:06:a8:5f:9b:fe:86:b2:83:f4:f9:75:62:
11:ed:16:4a:b0:e4:a7:bf:64:6f:d8:d4:8b:f1:90:
4f:6d:5e:56:5c:e4:2a:c2:a3:6e:27:9c:3c:76:d9:
83:ba:56:eb:3d:fa:13:70:a9:b3:b8:cc:19:78:be:
ad:03:9b:5b:65:34:45:07:85:58:db:c6:ab:81:24:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FD:25:D6:DB:0F:E3:14:99:F0:67:74:1A:FC:BD:1B:13:84:5B:4E
X509v3 Authority Key Identifier:
keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1a:a8:48:1c:1b:26:0b:18:49:14:86:ac:ce:1f:c5:0e:e7:
be:43:09:56:42:d9:ec:b4:18:0e:75:a3:7d:1b:9c:f4:c6:12:
e3:87:7a:dd:4c:f8:62:47:38:98:f2:61:fd:db:6f:ef:e9:cb:
9f:e4:13:37:df:19:90:c8:83:36:53:34:50:69:1f:90:fa:d2:
fa:a3:03:54:c1:ab:f4:60:5f:eb:71:43:9d:8a:99:d6:af:b8:
81:df:97:c6:f3:9b:5b:ff:96:1e:98:a3:d1:27:e0:1c:81:4f:
6d:be:34:c9:d3:f9:e8:e2:e1:64:3f:2b:d8:67:d2:06:4b:37:
01:e9:31:ad:c4:3c:0f:21:f7:bd:bf:fc:0c:20:2b:01:ba:68:
36:9a:7e:12:9e:70:29:72:91:d9:19:b9:33:c8:e9:dd:b2:80:
a6:f6:8e:e9:76:9b:d4:56:99:67:a1:31:4c:b1:19:17:1f:77:
c0:d7:d8:ff:e3:92:03:b0:58:31:20:84:0b:e5:68:c1:35:79:
6e:76:dd:e0:3e:33:97:21:a5:42:fc:fa:5b:85:13:62:a4:66:
40:d4:3f:08:e4:fb:35:25:d0:87:46:e4:65:d9:4c:9d:a8:90:
47:cb:9a:53:fb:2a:6a:2b:35:6f:49:86:31:70:c6:54:19:dd:
7a:91:07:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:45 2026 by rpki-client