Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File: 41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier: KP4W3rYScfyZKAXFZU1iEXE9ZPezWRs20bzXb+2ufXE=
Subject key identifier: 5B:E1:31:34:DD:D2:96:B6:1D:A4:98:BE:6B:CF:3B:FE:73:60:E9:F0
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial: 019D38D2E397676512206E0D747C7E8FF910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:38 +0000
Manifest this update: Sun 29 Mar 2026 09:00:38 +0000
Manifest next update: Mon 30 Mar 2026 09:00:38 +0000
Files and hashes: 1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: 7UuE97RwIMJnkUsjGjiEKK0c9biK4eF6VLzNkSqJanc=)
2: 6L2DF24h5kP__h0ZXcHhhgUtOHE.roa (hash: k3rPz38ZgJPfjpSFDtarFqrK6I1kr4U/pIOZrMPrf6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e3:97:67:65:12:20:6e:0d:74:7c:7e:8f:f9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Validity
Not Before: Mar 29 09:00:38 2026 GMT
Not After : Mar 30 09:00:38 2026 GMT
Subject: CN=5be13134ddd296b61da498be6bcf3bfe7360e9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a2:0e:02:18:10:7b:55:11:aa:1f:33:f1:ee:
5c:f8:8a:58:71:3d:a3:a2:06:7b:bb:60:c8:40:cb:
46:48:6c:e3:10:d9:53:13:ac:6d:ec:9d:ed:13:ed:
72:6d:b2:84:68:8c:1f:3c:95:fd:96:c5:67:90:e8:
cf:db:f1:f3:df:94:7a:08:c6:26:e0:83:18:30:6c:
50:fa:61:c5:93:9d:bb:60:58:10:50:6d:1b:ed:3a:
cb:5d:14:5d:0f:74:ed:f3:bd:1b:e4:35:f9:74:b6:
69:b9:ef:a0:b3:03:d0:4d:0e:b6:51:0d:8a:4e:42:
98:f2:82:b9:71:38:ed:36:d9:ef:1b:6a:a6:26:21:
3b:35:70:19:3d:11:a0:e4:53:8b:b5:7e:a8:92:2d:
09:6a:79:4b:5a:0d:f9:37:d4:d7:89:5d:b3:ec:b5:
d7:16:4e:d9:e6:bf:56:21:08:4a:d8:4c:ff:bb:5e:
f2:61:ae:37:0b:cf:a8:2b:c5:3c:de:a1:b1:17:2e:
81:4a:b7:cf:d0:49:41:01:76:4e:ed:f9:73:2d:76:
91:6e:af:2f:b0:85:91:7f:ed:9c:4c:cd:dd:02:8c:
2a:b7:3a:c6:00:f3:70:3a:53:33:df:81:b8:dd:e5:
63:fb:62:94:f5:e6:ea:6d:4b:d2:61:02:21:cc:3f:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E1:31:34:DD:D2:96:B6:1D:A4:98:BE:6B:CF:3B:FE:73:60:E9:F0
X509v3 Authority Key Identifier:
keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8c:79:8a:69:e2:d5:f7:ea:9d:25:0e:10:7a:38:33:67:10:
09:38:ca:1e:1a:1a:c9:f7:83:e9:56:1b:00:31:36:4f:5e:84:
ae:dd:87:0d:ef:b5:98:42:8d:21:5d:a6:be:3f:31:a2:18:ca:
5f:84:a8:dd:3b:b6:77:1e:3a:a0:7e:11:ec:29:58:63:69:0f:
5d:21:b8:a8:40:85:1c:2e:55:8c:f5:8e:03:f0:bd:c1:43:e3:
9a:1e:84:68:d6:16:1e:f7:bc:64:36:55:3a:07:26:87:67:d4:
0e:d1:50:0a:33:5d:8e:7f:ae:a2:03:e9:cc:a7:c4:58:39:66:
2f:7d:2d:28:98:de:09:aa:ed:66:19:e9:a3:de:19:fa:05:71:
e5:f5:b5:46:f8:f9:9d:8a:61:11:ab:79:09:85:ba:46:68:51:
d7:de:b7:06:bd:df:a1:bf:56:f8:fc:ec:34:65:5c:03:2b:90:
bb:0e:3b:99:30:f3:7a:b5:1c:93:6f:24:e2:61:a4:15:e3:77:
86:61:1d:ce:45:1a:49:ec:62:67:59:94:d6:22:3b:c7:77:c7:
16:5f:4e:89:5c:7f:99:2e:b2:ba:c0:f5:8b:f8:92:a5:f4:c9:
b0:ba:09:c8:be:b9:1f:34:9d:dd:09:e7:4a:a5:43:93:ab:2a:
a7:ee:6b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:42 2026 by rpki-client