Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
File: _ejRxqr0qT_0G7-hvR2sYZfVlXU.mft (raw, json)
Hash identifier: +zgSg43zCK/fI1XzUXIzrOEBKSE88mUSgFkaKVuwNTU=
Subject key identifier: 01:AD:AD:81:4E:E0:13:B8:91:82:7E:9F:22:46:E9:24:C8:51:70:4C
Authority key identifier: FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75
Certificate issuer: /CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
Certificate serial: 019D37C0C971EA9AC0248E2DCCAAC5D67A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:01:14 +0000
Manifest this update: Sun 29 Mar 2026 04:01:14 +0000
Manifest next update: Mon 30 Mar 2026 04:01:14 +0000
Files and hashes: 1: I5caSNoaibT5a3lfttKZWdRp0l8.roa (hash: sSCXetknx1GQMkwjOpWfK+QxR9ZMLOdkrRFR3Fi1Ufk=)
2: _ejRxqr0qT_0G7-hvR2sYZfVlXU.crl (hash: 4OHwmiiI8/00XS8ZXsedlknLYHoDrKHqEONmKDIge/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c9:71:ea:9a:c0:24:8e:2d:cc:aa:c5:d6:7a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
Validity
Not Before: Mar 29 04:01:14 2026 GMT
Not After : Mar 30 04:01:14 2026 GMT
Subject: CN=01adad814ee013b891827e9f2246e924c851704c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:f8:91:99:23:6e:70:a0:62:0d:a8:a4:14:
cb:5b:9b:a9:1f:e2:f2:c6:0e:f7:ee:f4:cb:fb:7d:
77:0e:16:28:5b:93:33:58:38:48:e8:1f:e7:81:5a:
7d:e4:25:15:ef:e0:ca:93:84:07:4c:ce:e4:16:34:
a0:47:48:09:18:ea:9e:7b:fe:3b:86:bb:da:c9:25:
41:67:23:48:a0:82:5d:ac:87:0c:a0:39:04:5c:68:
04:da:df:29:7b:ea:ec:c5:39:58:05:5d:81:dc:af:
b8:f1:f4:c6:21:5c:99:56:b4:45:c6:8c:5f:1d:ca:
c7:c5:8a:a5:d5:9e:e9:ae:9b:ce:dc:f9:06:0a:88:
be:48:7f:39:7d:c7:6f:bc:1c:0e:d7:f5:fd:9c:f1:
3a:7a:8b:0f:1c:70:23:27:74:d1:94:d8:d3:65:7a:
c2:d5:b6:9d:bc:d5:fe:c8:6d:ac:10:4e:0d:5b:51:
dd:df:fa:a3:7f:14:f8:1c:7c:9a:7d:7c:14:c0:36:
88:a9:0c:51:a3:e2:24:d2:b8:cb:a1:8f:13:06:4e:
3a:c2:67:f8:1a:82:98:93:a4:33:c3:32:4e:63:47:
cf:88:ae:ac:7a:02:db:77:6a:48:4b:28:96:46:cc:
02:e3:a0:fd:2f:a6:f8:41:e1:61:1d:87:4e:4e:8f:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AD:AD:81:4E:E0:13:B8:91:82:7E:9F:22:46:E9:24:C8:51:70:4C
X509v3 Authority Key Identifier:
keyid:FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d5:92:e1:56:eb:b1:1f:b8:2e:a3:24:ca:46:0d:22:01:d4:
34:44:82:23:89:4a:89:1f:fd:81:81:83:9f:a4:64:de:ab:0b:
65:81:42:a2:32:61:c6:10:a8:1b:4f:65:7c:a7:b7:31:25:0b:
a4:6e:5a:20:4f:54:09:a2:24:75:94:17:a0:ad:f1:3e:c2:11:
48:9f:7a:24:f7:91:26:f0:35:70:2d:3d:ab:b6:f3:a3:79:71:
95:d7:33:4a:42:ff:0c:cd:25:10:bb:cc:07:90:db:64:6b:6b:
fc:0c:4b:64:0d:14:cc:0e:8b:57:92:d9:35:f5:28:e6:3d:aa:
2b:71:b9:6d:d4:95:8d:a3:c0:f0:cb:d7:fd:7c:76:9f:cc:24:
b8:ff:0b:3a:02:23:f5:a3:fc:f2:1d:4b:a0:8b:90:51:47:2b:
a3:ce:e4:11:db:46:87:81:be:a0:26:d7:3a:e6:75:d4:c2:d7:
d3:35:8d:ac:22:e7:03:aa:77:ea:df:9d:80:63:34:56:6b:7c:
3f:b1:fd:3e:61:ad:3c:b9:2c:40:df:c6:22:e5:6b:36:4a:b2:
9f:e7:72:48:31:45:5c:01:c9:9a:d7:2c:19:e9:fb:d4:a6:c6:
7d:c6:63:f7:b8:c3:2f:88:2b:df:20:93:53:cc:ee:25:fe:65:
7f:9d:6d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:13 2026 by rpki-client