Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
File: d411kki9lFxs44QujWQtzScxM00.mft (raw, json)
Hash identifier: n3M4TNUPAuaaKdQ9kGICEX4wQCc4JWrfTw9gphxWnhs=
Subject key identifier: AF:BD:53:E0:C7:F0:62:21:52:AB:21:07:6F:64:D7:7C:34:7A:72:DE
Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
Certificate issuer: /CN=778d759248bd945c6ce3842e8d642dcd2731334d
Certificate serial: 019D382DCA6BCF58C970FC4B03AC60C33BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:00:18 +0000
Manifest this update: Sun 29 Mar 2026 06:00:18 +0000
Manifest next update: Mon 30 Mar 2026 06:00:18 +0000
Files and hashes: 1: GXSdlb0pDGF2EMIzDHAuIESnvAg.roa (hash: 7pDXY4rFOt7+nFMHto42qoEt09ttor/c72tHXsLA3yo=)
2: d411kki9lFxs44QujWQtzScxM00.crl (hash: qmbPdPUfXv3mXSa3btepwTUOrKrrjh8IN62ab+b6psE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ca:6b:cf:58:c9:70:fc:4b:03:ac:60:c3:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d
Validity
Not Before: Mar 29 06:00:18 2026 GMT
Not After : Mar 30 06:00:18 2026 GMT
Subject: CN=afbd53e0c7f0622152ab21076f64d77c347a72de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:f2:63:d7:3f:00:5d:e9:c8:28:9b:a4:4e:
73:17:ff:1b:e8:08:51:7a:58:fc:f2:d0:4a:ec:b1:
40:25:6e:9b:19:55:0c:cc:42:4e:d1:9a:9a:1d:d2:
82:84:f7:53:07:c1:67:35:4d:92:d9:12:6d:3a:10:
68:c2:b7:06:7d:b7:18:2a:06:8a:1b:23:0b:29:5c:
0e:a8:96:ee:6a:05:1e:c6:d0:6a:94:45:a1:b2:d6:
1e:6a:a4:b5:ba:a0:18:c8:02:9e:b7:40:85:18:10:
46:d9:6b:6d:f5:15:35:24:1c:36:a5:1f:4e:2e:d8:
34:e0:38:98:83:7c:31:b9:c2:29:dc:71:09:1f:8e:
26:22:76:15:32:f9:88:a4:18:ed:63:93:ef:64:e7:
da:78:5d:8b:0e:cf:89:10:6f:06:30:e1:3b:d2:26:
3e:f1:ff:cc:ac:95:92:ff:08:ad:cd:0e:e1:51:5b:
61:a2:fb:82:02:a9:b8:bb:93:77:b8:de:29:8d:5e:
30:f9:31:ad:51:4f:7b:36:93:62:bf:c6:4f:f5:4a:
e4:4f:e4:cb:31:e4:9e:a2:d7:45:07:93:65:6d:a9:
80:c7:62:1a:0b:7f:81:5c:d9:63:e3:36:4d:4a:29:
32:bd:bb:9e:55:b8:60:18:9d:b0:3c:d7:25:1f:b8:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BD:53:E0:C7:F0:62:21:52:AB:21:07:6F:64:D7:7C:34:7A:72:DE
X509v3 Authority Key Identifier:
keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:95:85:7c:aa:29:3d:13:59:41:27:88:c3:6b:29:a1:5b:34:
1b:7c:56:97:d0:e4:b4:da:5b:53:87:79:6e:c0:89:01:6f:39:
bd:d0:b8:c5:99:ef:17:4d:a8:02:3f:ff:d0:03:8d:ee:99:43:
4f:b3:2c:2d:ce:6b:6d:c5:52:40:a5:d0:27:89:8e:9d:8e:3b:
96:fe:eb:72:94:b1:e6:3f:4e:2d:7d:27:e5:e1:40:ec:ad:c1:
53:5a:03:6c:e2:21:79:1b:25:d9:b3:d4:6f:59:3c:fc:f4:0e:
ac:67:40:6f:37:28:49:ef:e3:5a:2b:64:2d:47:b2:3b:92:bb:
3d:af:06:a5:a2:08:41:75:68:12:69:63:42:24:da:3b:0d:90:
91:5c:d7:f4:ad:77:06:ae:27:9e:83:63:fd:f9:26:49:46:ff:
bc:7c:a9:58:f2:78:cf:4a:c1:84:84:46:6b:a1:8c:98:0a:94:
36:14:0d:e3:0a:24:bd:9f:c0:87:8d:e8:91:2d:36:72:98:c3:
b0:69:2b:60:64:11:0e:fc:fb:8f:ce:f7:8d:82:4d:e7:62:64:
0d:fd:84:e8:ca:df:0b:2c:67:ec:2a:12:47:8d:9e:58:ab:9b:
66:65:c5:e1:cf:6c:fd:1e:27:21:6e:e3:10:77:9d:a7:94:ce:
fa:f5:32:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:28 2026 by rpki-client