Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: 4onx4cJCyt6iccyWCskAgTHNNekV1eeXyyMlbdsAcsw=
Subject key identifier: 23:BE:3F:51:D3:6A:AB:B8:BC:39:50:58:B7:2C:D3:50:2E:DE:4E:7C
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 019D1C4960913C1675EE8941CEAA1FA83041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 1883
Signing time: Mon 23 Mar 2026 20:01:04 +0000
Manifest this update: Mon 23 Mar 2026 20:01:04 +0000
Manifest next update: Tue 24 Mar 2026 20:01:04 +0000
Files and hashes: 1: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: Trty4PumdEg4MMWLnhtqe2GV0YQcqE6M8eg0SxjU4d8=)
2: k9c2O8_Xy_eChgcz-yhyQZaZprY.roa (hash: +knLZsYjdnVF7uKOf0qT11DuyDMhYqWK5WJnzaJ/tgc=)
3: r4XvX6Ei1LluIE8pavjpEdLLxJ4.roa (hash: KL22Fozq8IVy1aV+io1l46k9R+MjRQle/pBvY+h3kcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 16:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:49:60:91:3c:16:75:ee:89:41:ce:aa:1f:a8:30:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Mar 23 20:01:04 2026 GMT
Not After : Mar 24 20:01:04 2026 GMT
Subject: CN=23be3f51d36aabb8bc395058b72cd3502ede4e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:04:4b:8c:dd:49:9b:c4:22:62:fb:b6:ec:
71:da:c6:56:31:90:26:ca:79:1a:a6:3a:4b:d6:bd:
ac:ad:59:1d:7e:38:16:e3:1e:44:86:e9:fe:96:45:
18:79:0d:76:fb:08:6c:b6:27:b5:c4:99:4a:d7:35:
de:76:32:48:7f:7f:70:9e:f5:3e:81:00:e8:1e:38:
a2:0b:74:02:4f:be:d3:f7:29:fe:11:4a:7f:b9:65:
77:b0:d4:92:7d:7e:7c:63:df:02:0d:7b:6d:95:d6:
d5:67:cd:da:37:78:05:51:e9:c1:f4:4a:a9:4d:e8:
63:b1:9a:5a:ba:04:57:83:b4:86:52:d8:cd:ad:38:
53:e4:ed:8f:26:4c:fd:61:42:e2:ca:93:0d:5f:5a:
63:fb:02:40:12:ab:fa:c9:b2:f5:c0:5a:c6:c5:a9:
bb:22:1f:05:d7:d6:ce:6e:9d:d8:63:7d:37:dc:90:
3b:28:2b:7e:76:f8:ce:ae:bf:5a:f4:27:2a:4d:49:
ee:ee:ee:fa:0d:87:4e:6e:c3:51:dc:a4:6f:7c:e8:
1c:53:ce:a1:fe:d3:73:9c:90:64:2e:35:dc:b4:e9:
60:d6:3f:be:3f:98:c8:99:73:97:34:11:b2:43:8a:
a5:d3:d6:16:1c:fd:ae:89:d1:58:f5:86:87:0a:99:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BE:3F:51:D3:6A:AB:B8:BC:39:50:58:B7:2C:D3:50:2E:DE:4E:7C
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3f:41:82:1b:52:0c:95:98:cc:ed:16:e5:b1:38:8c:42:e9:
98:13:6e:d8:03:4d:e0:fe:69:84:cf:33:e5:fc:fe:cc:3c:f4:
f1:6e:bd:21:a8:ec:0f:d8:c0:84:45:84:7f:b2:ef:23:d3:48:
fc:04:0b:f4:a5:e9:79:51:e5:99:eb:56:92:57:f2:1c:a5:81:
82:59:b2:fc:39:30:6f:87:ce:12:05:18:50:14:14:fa:4d:0c:
6d:76:c0:49:16:ff:60:ac:1c:cf:5c:bb:94:dd:19:ff:0b:79:
05:f0:37:7e:ef:32:fb:3d:18:65:93:80:2d:93:fd:e8:b2:c8:
7c:3a:d4:58:71:60:5d:d9:59:0a:99:c7:db:a0:3b:58:10:0e:
02:5e:74:35:9f:89:bc:cf:63:db:24:8e:d3:b6:2d:15:7e:08:
b9:f4:df:21:87:cf:ab:dc:e1:a7:91:27:ad:5e:51:5f:71:7e:
c2:16:1c:b6:e5:af:99:96:cc:6d:f8:ce:5b:6e:80:fd:b0:db:
49:56:ce:35:17:73:fd:ed:22:6e:70:71:da:1b:9d:11:07:78:
ab:65:d6:2c:ff:0d:80:3a:f2:64:f2:c9:43:e9:90:78:82:6a:
4d:75:26:30:59:37:c4:14:b7:ff:ed:c1:84:6c:00:ca:33:b9:
3f:1c:fe:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 21:59:57 2026 by rpki-client