Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: +IA6+KvU4BKR0F+BmdlMhLbySXA2m8FrByA7QeU4dKU=
Subject key identifier: B1:BA:02:01:47:1C:B4:61:DF:9E:E3:6B:EA:97:8F:27:9D:8B:C1:E2
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 019D0477DC4C4CCF0343B1D7A899933F240A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 1876
Signing time: Thu 19 Mar 2026 05:00:57 +0000
Manifest this update: Thu 19 Mar 2026 05:00:57 +0000
Manifest next update: Fri 20 Mar 2026 05:00:57 +0000
Files and hashes: 1: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: 0T3uNHO4Fjfawc675O7Vz0ldxcfrFDzkm6tmGSRB3GY=)
2: CXyMI2l8iEL8L83sjM9bkDZ8hS4.roa (hash: j/IQcIj8RO7TPRLNA/hKS2090AInnEPNtfaLrldabW0=)
3: VoUC5dLmrwvo5IVIUQ9reyXsBQk.roa (hash: qRjYhRjtRMqcpSCBbiNCNUBeAUXt7NZHib1uEHQNNXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:77:dc:4c:4c:cf:03:43:b1:d7:a8:99:93:3f:24:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Mar 19 05:00:57 2026 GMT
Not After : Mar 20 05:00:57 2026 GMT
Subject: CN=b1ba0201471cb461df9ee36bea978f279d8bc1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:71:41:02:d7:76:64:ba:b3:9f:57:ea:91:c8:
28:80:3a:64:14:82:6d:36:2f:1f:a4:92:71:44:aa:
19:82:7e:c2:52:0f:6e:a1:39:4e:d7:0e:97:0a:32:
46:f9:83:cf:2f:ca:5e:0f:46:77:5e:aa:32:3a:3e:
ac:f1:6e:72:5d:63:46:18:b1:e9:e3:96:01:74:a4:
97:1b:f8:03:73:0a:1e:9e:da:ef:1a:51:66:0a:39:
54:fc:51:26:79:9d:7a:20:21:68:0a:a4:cb:37:13:
6e:8a:95:8c:4d:89:df:61:bd:a9:fc:59:97:9f:01:
d7:db:f4:f3:0b:b8:e2:c7:12:7a:9c:8d:25:24:c3:
56:57:71:51:49:c8:27:39:fc:7e:60:41:9f:3e:12:
27:d5:9e:12:47:f6:93:3b:47:dd:2d:d2:be:56:6a:
97:68:3c:9e:b4:18:44:8d:e8:e9:bb:f0:eb:86:18:
45:17:df:eb:6c:17:05:9c:e7:28:3c:d2:d0:84:d6:
a7:d7:c2:3f:5e:eb:d5:15:95:c8:32:23:04:9b:89:
e4:f9:a2:e3:1a:58:e5:38:42:9d:51:87:a2:31:cb:
3e:00:1c:ea:50:c2:c2:0b:28:c5:73:c3:f7:18:93:
71:c5:16:81:93:8a:b4:c4:ec:92:a7:d3:e9:3d:88:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BA:02:01:47:1C:B4:61:DF:9E:E3:6B:EA:97:8F:27:9D:8B:C1:E2
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3d:4f:c6:40:f5:7d:8f:69:8b:57:9d:d2:76:31:c2:5a:b5:
73:24:86:a9:19:76:6f:dc:4a:94:29:ef:1b:bb:d8:2c:b3:8e:
6a:a7:76:bb:60:e1:f1:fd:54:f4:8d:f1:9a:a4:89:9e:61:df:
45:35:e7:79:68:a2:5e:21:3a:23:e4:f4:65:54:83:84:7f:27:
37:01:bd:c0:15:5d:67:13:05:70:e3:3f:d1:23:6c:0d:52:13:
9f:1a:24:6a:7a:d3:aa:3b:e3:f2:75:37:83:5f:96:ad:6e:bd:
e9:c1:68:45:91:38:29:b0:cb:01:19:7e:25:f4:db:82:16:26:
d7:bf:7f:a6:7a:f0:c4:15:d6:2b:92:3f:ab:12:8f:30:d8:ae:
f2:98:b7:fe:32:d8:e9:c3:09:2f:84:68:56:6e:0e:78:cf:b9:
62:5e:38:c2:33:72:ee:63:ec:8e:0b:60:46:ff:fb:9f:68:17:
38:85:75:71:09:9a:39:c2:df:9f:88:27:cd:2f:45:3d:c8:5a:
b7:8e:94:b7:2f:d2:15:d6:de:11:98:d8:34:f4:98:05:24:56:
cf:e1:2f:20:10:6a:a7:ab:ac:98:d5:84:65:78:0b:eb:ba:b2:
44:37:a0:a4:06:ee:c5:7d:45:e2:45:e0:1f:be:e1:c8:72:4a:
70:1e:95:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:36:16 2026 by rpki-client