Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File: 458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier: LQ/kx8m0wZSt3g7wxZ9p36pcHwdIn9YZ9GglMaMqEnA=
Subject key identifier: BA:EA:76:31:2D:C4:E2:BA:1B:A4:B9:25:E9:8D:31:7A:30:85:2D:F8
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 019D37F769E4232DF814F8AF772BEEEED9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: 458aboTAJ378tW2UKw615FZHESk.crl (hash: F9Ti3Op40YnNxigDnJgTEoterUnSmtZcHRJQ9LUTm38=)
2: oUGkPZTPkKHGPI9Jz6IXcq74MlY.roa (hash: kW23YRINjjPil+PnE7QgBUdKf6Li2ZuNouz/Gf0yezE=)
3: q5YOOrxuiSWXoPgrKO2ByRV2Pag.roa (hash: MIH8GtLHKwDBxta0prsle3vWb5PxVdZjd+6vSDHesjk=)
4: zhvANJOvIZUMm3XZ4zAx_z-cOFc.roa (hash: ra8TIJdqXnbc9kZExeXfpCuOK6FblyvfQ8K4O5SfJHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:69:e4:23:2d:f8:14:f8:af:77:2b:ee:ee:d9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=baea76312dc4e2ba1ba4b925e98d317a30852df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:9e:34:00:43:07:61:ad:3d:0b:52:9a:91:
6a:4b:94:cc:b6:ca:a4:6e:52:c5:ba:90:37:d5:c6:
da:62:90:7f:20:18:02:15:50:8d:ad:0b:92:75:6d:
bf:2b:bf:4c:a0:94:fe:4b:a7:ee:ea:4f:16:8f:79:
ad:26:55:1a:b7:7a:ff:1a:35:81:e7:7e:c4:fa:dd:
7d:80:ca:38:e7:ba:2e:c7:cd:4d:bc:92:68:96:71:
48:5f:11:08:ec:9a:04:cd:79:6d:48:f4:78:9c:dd:
b7:e9:22:51:50:57:f1:1b:36:7b:f2:34:99:1c:47:
c1:fe:79:62:76:8b:29:86:02:02:5c:db:24:de:16:
28:85:54:e2:b4:65:43:db:5f:f5:ad:02:4e:29:f5:
fb:5e:bd:6c:24:82:ee:5c:b6:5b:15:ad:5c:cb:b2:
ca:b4:8c:15:6d:e6:c9:34:a9:29:01:4d:cb:9a:52:
b6:cc:fe:92:4e:90:b7:52:20:32:1b:1e:79:25:80:
1a:67:23:b8:1c:f7:d8:cd:ec:3d:f3:8b:31:c4:f1:
b6:f9:1a:27:e2:89:92:65:5a:14:48:da:2b:6a:17:
74:2e:56:5d:df:ed:8b:20:f3:55:53:9f:b3:3c:4a:
8c:67:8c:8f:86:4b:67:91:11:79:9a:91:71:94:f2:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EA:76:31:2D:C4:E2:BA:1B:A4:B9:25:E9:8D:31:7A:30:85:2D:F8
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1c:7e:27:99:13:7e:ce:2c:d6:c5:64:67:60:e5:ca:de:8e:
ed:51:f2:c3:b0:21:1e:44:1f:da:e5:eb:d9:9b:4b:7b:01:2b:
2b:90:85:4e:3b:a4:af:e1:c5:0f:80:8a:05:48:c1:a1:25:17:
06:4b:e9:a8:d4:cd:ef:5e:69:2d:73:4b:d9:41:c4:0c:cb:d5:
89:6d:72:4c:bc:0f:dd:b8:12:4e:cd:5c:74:9e:9d:a0:91:1a:
ce:d2:60:15:dd:4e:90:c8:61:c6:bf:b0:16:01:cf:38:ca:2a:
01:c8:a1:8b:fb:21:88:45:63:48:1a:c9:ed:3a:1f:74:64:c1:
85:c0:f1:c8:cf:d1:8d:87:08:2f:f6:14:1a:14:85:7a:8d:7b:
c0:e9:88:2f:8f:ad:8d:58:79:d4:54:70:81:ea:4f:b4:32:83:
20:48:19:f4:4f:70:b7:62:f8:3a:cf:e1:b1:04:dd:3f:68:17:
87:34:dc:48:18:4c:0c:53:01:28:e7:b6:af:89:2e:cd:7c:2d:
fd:a9:d5:48:60:47:0e:8e:ef:ea:45:8b:f9:66:ad:4a:28:05:
75:de:5d:fd:23:da:33:3d:6e:c9:1b:fa:8b:1f:fe:01:c2:3a:
4b:86:79:47:23:3e:23:9c:07:83:c5:b7:e5:1c:ba:47:cb:12:
15:86:66:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:28 2026 by rpki-client