Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
File: saC9QgWKA5D0Y8_rexfiHeC3VQA.mft (raw, json)
Hash identifier: JWzyiBf3eSOjh+P8s6ewGQpM3YBG5psBDwUVUgllcds=
Subject key identifier: D4:F8:35:09:BC:68:4D:E2:E3:D9:12:17:9C:EE:0E:D3:71:59:45:C7
Authority key identifier: B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
Certificate issuer: /CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500
Certificate serial: 019D3940A1D2E2775B0F82AE4C5AAD83D1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:30 +0000
Manifest this update: Sun 29 Mar 2026 11:00:30 +0000
Manifest next update: Mon 30 Mar 2026 11:00:30 +0000
Files and hashes: 1: 9bU8TMAlx1Mlu4OLuEXngFEMyBw.roa (hash: o5UBRSSOY31+5MpTnDt79gczgxz6Me/lMghe1kK7oQA=)
2: saC9QgWKA5D0Y8_rexfiHeC3VQA.crl (hash: kekRRO4EE1xV/v2h1bQ4xVS/j9DwBmSh4rtjY9b4lC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a1:d2:e2:77:5b:0f:82:ae:4c:5a:ad:83:d1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500
Validity
Not Before: Mar 29 11:00:30 2026 GMT
Not After : Mar 30 11:00:30 2026 GMT
Subject: CN=d4f83509bc684de2e3d912179cee0ed3715945c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:a5:f6:8a:d7:22:9c:1e:54:ec:81:06:32:
4a:26:c0:c7:91:10:1a:22:d2:16:b6:63:cc:a4:df:
e4:5d:cf:57:72:88:86:65:f1:6f:b3:c6:65:76:ad:
d9:2c:bd:a1:a4:3c:20:5c:bc:5e:13:df:da:83:8d:
44:b5:96:0f:da:83:59:56:56:2e:bd:80:d0:b3:a3:
6b:1b:a1:e5:5e:2c:e9:5e:56:83:2f:e6:a0:c9:0d:
4e:85:26:ca:bd:fe:aa:dd:c5:9e:01:bc:38:01:09:
05:40:fa:09:59:04:2f:02:ee:82:69:85:05:df:0d:
90:ec:34:04:fd:71:43:11:45:c9:23:ca:44:9c:fe:
13:60:80:a2:d6:39:5f:af:9b:08:f5:0a:db:6f:d0:
ee:36:26:e2:78:c7:20:fe:b8:a8:74:b9:3b:b9:a9:
47:32:0e:f9:15:bf:13:af:c2:22:dd:13:6c:41:b8:
38:a0:bc:f6:c8:d0:d7:d8:80:7e:a7:3b:5e:2b:b1:
62:36:3f:d3:a0:2b:70:f9:5a:49:6f:ed:57:12:a3:
5c:0e:0e:7d:ef:69:cd:ff:64:5e:eb:c6:3c:58:08:
7e:35:3a:6b:79:08:74:de:f5:94:a6:59:69:95:83:
bb:5b:7f:28:2d:e5:a4:92:e2:9c:78:18:ba:db:f8:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F8:35:09:BC:68:4D:E2:E3:D9:12:17:9C:EE:0E:D3:71:59:45:C7
X509v3 Authority Key Identifier:
keyid:B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:57:83:81:56:b8:c8:32:e6:2e:cc:8b:04:0b:63:b3:77:71:
e2:55:00:c4:24:cf:df:27:d8:f6:0d:09:08:fc:d9:da:e8:cf:
10:4d:70:7d:2d:6b:7c:23:61:12:67:8e:16:a0:60:47:00:05:
58:dd:bb:bf:27:06:d7:75:c4:b5:51:d1:c1:b3:31:19:1a:63:
e6:f5:da:dc:cd:e1:c9:ec:e9:28:05:7d:1c:cd:e0:ca:3e:e2:
d3:b7:9d:ec:bf:cc:00:81:95:52:1e:0b:88:ee:87:4b:73:29:
19:49:73:a2:9d:ba:41:a3:09:a1:93:05:89:7d:f3:ed:37:49:
50:fb:85:00:ad:8b:56:9c:d4:81:83:c1:0c:15:f9:90:d9:a7:
04:39:1b:8c:ad:7a:1e:26:a9:7e:59:90:8e:73:d3:fa:59:6c:
60:19:91:df:f0:f5:11:b6:8f:c8:35:a9:a9:c4:cd:f2:a8:4b:
16:a3:f5:cf:71:a8:6a:23:53:00:9a:46:a9:d6:7b:48:4b:90:
05:95:2d:0e:c2:d8:3f:14:b6:9f:bc:4c:14:13:b9:1e:f5:64:
77:09:f5:a8:8a:f0:7d:5f:d0:a2:db:05:c5:60:bf:0b:d5:90:
10:65:e4:5b:f2:da:ac:97:ba:67:d0:0e:81:32:8c:1a:a6:ef:
e1:e4:3e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:30 2026 by rpki-client