Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json)
Hash identifier: OHahnI/9qUI5/L0bW5AbWmET4DUbiIiUgJlbYUEGi9U=
Subject key identifier: 83:A7:36:5E:C8:64:2E:3A:A0:F9:79:B9:90:26:65:E2:79:A1:11:2A
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 019D38D36C6C795398059B0C028A28C7A6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 09:01:13 +0000
Manifest this update: Sun 29 Mar 2026 09:01:13 +0000
Manifest next update: Mon 30 Mar 2026 09:01:13 +0000
Files and hashes: 1: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: t+5jO6uAfB9pCswGsnY3ZQoe2wg+0jHSDsnealDy4LU=)
2: weWWuV6jfsu20O1Kp8PZ_7w5-6I.roa (hash: hxVuyj93Sh3p92R2/8BnJWSOvPERrOV88q73B7vWqrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6c:6c:79:53:98:05:9b:0c:02:8a:28:c7:a6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: Mar 29 09:01:13 2026 GMT
Not After : Mar 30 09:01:13 2026 GMT
Subject: CN=83a7365ec8642e3aa0f979b9902665e279a1112a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:78:cc:57:10:fa:7b:99:07:a8:60:c4:91:e8:
a8:5c:ef:e8:a4:62:15:2a:11:95:9d:6f:b4:ba:d0:
b5:f7:96:e7:1c:11:5a:8c:01:ea:b3:cd:50:96:bd:
ac:c1:34:2e:24:eb:a2:ed:b2:ef:31:69:d7:b6:80:
e2:ac:ce:f8:39:f4:f5:67:c4:ce:43:60:cf:21:71:
b7:64:2c:30:86:66:b7:8b:e0:f0:2e:0d:de:5e:32:
ca:7b:a9:91:aa:ea:ce:11:78:ad:07:74:ce:08:c3:
2f:42:a7:6a:60:95:0c:7b:1a:51:2d:ba:e0:cd:29:
ff:e4:b7:f8:e9:7d:14:7f:af:39:22:21:60:41:37:
9f:e0:06:d3:cb:1c:1b:c8:d2:d1:9f:97:be:09:66:
00:0a:a5:d9:b7:70:ce:2a:f7:63:65:15:07:13:54:
8f:f3:e9:11:0f:54:9c:c3:81:89:b6:d4:f4:76:ab:
d2:79:35:f2:be:e1:2e:68:45:22:f6:61:ee:0f:0c:
6c:8a:0d:09:01:dd:16:3d:06:fc:6e:71:cc:af:c9:
d2:8f:8c:66:ae:a9:7f:94:26:fb:db:fb:4f:37:21:
25:b5:91:6e:1f:a0:d4:12:f0:04:34:e1:7a:5a:c8:
81:0a:b0:e2:e4:6e:ad:2f:66:e6:ce:aa:d8:f2:6c:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A7:36:5E:C8:64:2E:3A:A0:F9:79:B9:90:26:65:E2:79:A1:11:2A
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0c:b9:e9:08:27:89:d2:00:b7:73:a4:07:d5:69:33:13:85:
6d:e6:11:8f:f0:c3:5e:13:f5:9b:12:4a:ef:f9:1f:a5:9c:ac:
a7:c4:a8:cf:35:c2:f2:c3:48:87:6b:d8:b2:38:48:cd:2f:0d:
db:ad:af:b5:c5:ec:b4:9d:40:23:a1:d5:26:69:d2:f4:5d:53:
04:1c:b9:16:1f:2e:dd:5b:c0:16:95:89:5e:64:27:07:19:a4:
cf:ec:20:46:13:a7:81:e9:d5:59:c0:21:6e:dc:5c:f6:39:68:
23:19:81:6e:9a:12:e9:ab:98:19:0c:ce:05:91:1b:53:f4:33:
0d:33:90:38:e4:55:b7:fc:8d:bc:6b:62:cc:19:4c:51:fc:c8:
be:cd:2e:65:b4:14:29:79:b7:05:a5:59:7b:c2:4a:4a:84:65:
2f:20:7f:bf:f6:45:87:17:53:e7:5a:27:e4:2d:58:b7:1c:37:
91:4a:35:94:d6:59:32:0a:45:27:74:88:92:6f:d3:0a:51:3e:
19:ba:9a:d9:f5:11:95:b4:03:b3:c0:de:b2:ac:d1:aa:1e:ea:
04:3f:59:4d:68:0d:6c:8c:db:b8:a2:9d:3c:40:5f:69:f7:19:
57:4b:f4:25:b0:51:ac:df:af:84:64:6e:ab:5e:2b:1a:40:fb:
77:96:09:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:08 2026 by rpki-client