Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: 4edywwbzsPDy1NvaxdO2C5ilpPFT4+ZNG40A2h6uWEg=
Subject key identifier: F3:B2:FA:E4:A7:17:FB:70:DC:A3:2D:A2:79:7A:B8:53:1E:EB:B6:8D
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 019D382E73F4EBA77B7036D00B4BE2DE215B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 06:01:01 +0000
Manifest this update: Sun 29 Mar 2026 06:01:01 +0000
Manifest next update: Mon 30 Mar 2026 06:01:01 +0000
Files and hashes: 1: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: b90F8kq2WXaz+IOKV7dsYIQ4Ot6XlCa2y1i+P1AApAc=)
2: 4gakjOl2rKIxtDeY8kx2eOvP_Jo.roa (hash: TQ+KC3G8+QaJHhu/9P7uxzpoVECiZV+fna31NmwlOi8=)
3: bPoEfZam0GZUvE1xltgIVPM2UVA.roa (hash: oJcgAX3KB1YWr1arABvCqWuGMGK5eGcGXJDWs9BTX6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:73:f4:eb:a7:7b:70:36:d0:0b:4b:e2:de:21:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Mar 29 06:01:01 2026 GMT
Not After : Mar 30 06:01:01 2026 GMT
Subject: CN=f3b2fae4a717fb70dca32da2797ab8531eebb68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:31:fc:2e:7a:17:5c:f6:d0:ed:4c:3b:4b:
73:2c:15:d0:f7:da:6a:24:91:2d:81:4c:3a:04:fc:
d7:c3:13:25:53:ea:dc:f1:63:b6:96:66:a1:73:02:
d8:66:fd:fe:7c:64:28:6b:c1:43:a3:9f:f2:2d:67:
64:fa:e0:aa:39:87:6c:4e:44:b7:df:d1:46:a1:66:
86:8b:20:c5:7e:aa:41:86:07:c9:a0:f4:ae:05:69:
42:20:de:6d:e7:c4:55:a9:01:27:68:ab:26:ea:10:
fa:33:f1:b2:cc:6a:83:a4:96:83:1f:35:fb:26:98:
8d:55:5f:66:af:19:dd:ba:90:07:4c:88:dd:74:19:
a3:10:7a:3c:bf:a6:a6:c9:f6:33:7a:1c:4f:95:2e:
dd:e7:cc:4c:c1:3f:b8:3a:c9:a5:0b:23:19:6d:0d:
90:59:b3:d2:ca:ef:21:fe:e1:7a:91:a9:e9:77:da:
31:d0:ed:d2:a9:91:10:27:c9:b9:36:22:fd:af:56:
4d:59:05:5d:56:4b:13:83:74:02:4d:10:f5:bd:83:
66:ae:df:6b:b1:e6:e8:e1:42:fa:4f:fe:29:ce:85:
78:41:b9:bf:17:1d:df:42:92:f2:06:0d:01:3c:08:
6f:db:95:99:0b:00:3e:3b:d9:77:7b:41:04:1d:35:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B2:FA:E4:A7:17:FB:70:DC:A3:2D:A2:79:7A:B8:53:1E:EB:B6:8D
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e2:9e:e6:b0:7d:2d:48:66:7a:45:fe:10:56:58:f9:b9:54:
07:88:9f:93:1e:6d:d6:e0:e5:a1:b5:f2:05:10:31:3d:4a:3c:
8a:20:d2:1d:8a:d5:96:98:5a:8b:4c:2f:29:5b:a9:40:93:62:
3f:3b:41:62:bc:fc:52:5f:0d:eb:c2:a6:69:28:6c:9d:ff:d1:
63:1a:35:7c:1e:b0:fd:6b:0b:b2:1e:26:65:3c:8d:61:53:98:
17:e8:5f:82:f2:4a:6e:20:d0:92:3f:b8:a9:d6:b8:f5:6a:b0:
02:82:41:79:8a:42:4c:eb:2e:03:06:6c:f6:db:60:84:2e:1f:
92:b0:1f:5f:76:ad:9e:00:f7:02:3e:26:c7:0c:8c:8d:70:0b:
6c:54:22:ee:df:84:aa:03:ae:e8:58:78:03:70:83:ea:e1:bb:
ca:a1:f7:7f:26:9c:03:68:43:0c:78:dd:fe:e1:1e:99:9b:99:
98:62:f0:8d:0b:22:3d:a8:48:42:a2:e1:25:82:5a:05:1e:93:
3c:df:db:89:f9:a2:10:08:c4:66:d4:2e:06:3d:b9:dc:2e:84:
fe:87:9f:4a:9a:1e:1d:87:39:98:1c:17:c5:71:f5:c2:ab:c8:
59:cd:48:d3:9c:c2:20:75:b6:57:53:5c:59:de:73:a8:9d:ac:
63:4f:34:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:36 2026 by rpki-client