Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier: AT5YkK9XqOmTsX0VFVU+giZnSzdkRUd/2X9oBoufVVU=
Subject key identifier: C8:D9:43:A8:D8:D6:DF:DE:43:BC:45:9D:6C:E3:61:4B:CE:AC:F6:01
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial: 019CCB2DCA1DD30ACF86820438DEA7586904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number: 1855
Signing time: Sun 08 Mar 2026 02:01:41 +0000
Manifest this update: Sun 08 Mar 2026 02:01:41 +0000
Manifest next update: Mon 09 Mar 2026 02:01:41 +0000
Files and hashes: 1: _Pwzr4JbDzClR-Oc7yMcLt0gzyw.roa (hash: fAUaNNrGBFLsb8ziuClrT7k1PRw95F5PlNscHyG0c24=)
2: bFNRQE3pxcA4g-Rg8277J0Pfyvg.asa (hash: SZ5vK0kMUed0BXVDFve+JxQjn9uHdMp5dF2f6Za79JU=)
3: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: bGEHS6HbxjUFh8quGAdjYwCK+z8gSppiPQdvG5hjXmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cb:2d:ca:1d:d3:0a:cf:86:82:04:38:de:a7:58:69:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
Validity
Not Before: Mar 8 02:01:41 2026 GMT
Not After : Mar 9 02:01:41 2026 GMT
Subject: CN=c8d943a8d8d6dfde43bc459d6ce3614bceacf601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:bd:3e:51:fa:c7:d1:b8:61:5e:c3:95:5f:
ca:e7:bb:ca:0e:49:ee:71:0f:bb:09:c7:90:84:e4:
73:fb:03:f2:e9:b5:8f:d6:68:99:13:82:96:00:6d:
69:79:6e:d1:c5:5b:3f:44:fb:b7:ec:a3:02:f6:5c:
b5:96:04:10:25:4c:0c:f2:fa:e8:4b:60:61:a3:2d:
3c:98:88:85:22:c6:e0:3a:1d:ba:32:31:5b:49:19:
8d:d8:cc:d3:b1:b7:7f:b6:55:1b:67:c3:e5:a7:09:
4a:20:69:f7:aa:c1:67:aa:11:20:fa:84:0b:72:67:
16:4c:4e:ef:8d:cb:0a:b8:db:76:02:81:9b:68:2e:
80:7f:be:73:e3:46:70:b7:0c:2d:af:fb:46:f4:da:
6b:94:9d:62:63:3b:ff:88:e2:c5:41:1e:7e:fc:08:
3d:f9:59:23:39:27:36:60:3c:ed:ae:9f:c5:89:c5:
dc:b3:64:94:c3:89:5b:27:71:9d:4a:e4:e5:f3:75:
56:93:08:8d:b0:e1:21:18:0d:df:24:fc:96:c7:c8:
72:d2:87:55:a9:c1:00:7c:ea:35:9b:e7:0e:f9:45:
de:41:c2:31:f8:46:b8:38:1a:bc:65:fb:3c:06:6e:
73:30:47:c0:91:9b:91:bd:91:a9:96:6d:a7:77:d8:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D9:43:A8:D8:D6:DF:DE:43:BC:45:9D:6C:E3:61:4B:CE:AC:F6:01
X509v3 Authority Key Identifier:
keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:57:04:e1:8d:4a:21:1d:78:e4:4f:a4:f4:14:57:3a:d0:5b:
1d:04:85:1b:25:4d:28:36:e8:9f:67:9c:b8:45:34:7a:40:30:
8b:65:e0:6f:70:c0:75:44:5d:5f:9b:5b:b6:81:88:dc:dd:8f:
48:82:dd:27:51:f8:f2:1e:fc:42:38:c9:19:b4:bd:fe:2d:06:
d2:9e:72:9b:fc:34:ff:92:37:a8:ea:5c:d3:32:6e:df:85:54:
6a:58:a1:b2:02:e8:2c:40:2c:77:a4:3b:01:75:b1:bf:df:4d:
f9:06:ea:55:b6:5c:e9:83:78:ec:2a:8f:c2:8a:90:2a:df:e1:
ea:36:6f:37:9d:5f:5f:df:79:08:ce:8a:36:fa:93:a3:fd:77:
c4:c4:56:8d:35:75:c1:4e:6c:2b:37:3c:74:cf:5c:4f:73:a7:
f7:6d:4c:09:75:af:ed:9f:f5:b5:72:08:6b:53:2d:36:d2:b8:
c9:cd:b5:1e:0d:e0:50:a1:40:64:99:52:b4:c0:58:95:e4:25:
4c:a0:0d:fc:f4:51:22:04:35:89:74:73:f2:c3:9c:b5:ef:f4:
40:77:39:c7:da:fb:bb:6e:35:c9:9d:d4:b4:92:09:f8:4c:40:
90:7c:b2:f0:ff:55:63:4e:c8:f6:62:bc:bb:55:dc:4b:72:9a:
5f:78:8e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 04:35:42 2026 by rpki-client