Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
File: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft (raw, json)
Hash identifier: yN5U7uqfc4WEo7yyzSIoRcppVScJvqKJge73B7JMLbI=
Subject key identifier: 3E:D7:87:F7:1D:2A:EB:9D:D5:62:96:69:87:33:5F:ED:0F:7D:58:BC
Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Certificate issuer: /CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Certificate serial: 019D38D379706746741C17B127A482165ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 09:01:16 +0000
Manifest this update: Sun 29 Mar 2026 09:01:16 +0000
Manifest next update: Mon 30 Mar 2026 09:01:16 +0000
Files and hashes: 1: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl (hash: 4HNgtgaPPHdWj53ItWwQWShxRBI/wV8bpFrPmqa7wec=)
2: Nb75t2HmIANRhLGNXjt11cqlJUE.roa (hash: yEAQI/Ds6SqiJnioeA/4ztbYLQANaelVg2ffNspRA+U=)
3: OiEBp0GKa1Rrx271L_Ta-KgAi9g.roa (hash: lJRBkYeL9Nu/5ib2lExKbBVlayfZpUDinxzFBIQeINk=)
4: sE95hNuQAFs2bwnjWh5tS1eDbyo.roa (hash: lJLEBwFDxhpPzZc0IOmOMH9nwksk79qXsIs7n/ttFwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:79:70:67:46:74:1c:17:b1:27:a4:82:16:5e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Validity
Not Before: Mar 29 09:01:16 2026 GMT
Not After : Mar 30 09:01:16 2026 GMT
Subject: CN=3ed787f71d2aeb9dd562966987335fed0f7d58bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1b:3b:b5:e3:07:4c:0e:f5:b3:19:8e:af:0d:
db:87:ed:25:b6:2b:c3:b2:45:6d:a5:78:4b:7e:9a:
be:5a:63:2d:32:89:bd:0b:d9:85:9d:a2:5a:58:8c:
ce:1f:f0:95:e8:94:d4:24:85:84:5c:8e:68:44:5d:
c9:4a:eb:cf:c1:18:8d:52:64:be:f4:6f:1c:6d:fd:
fb:e4:39:a2:b6:c3:2d:01:2c:03:ba:91:24:fe:77:
83:60:52:ef:13:ae:85:ae:f2:ce:7b:8d:4b:c2:37:
a2:e6:f7:82:08:b7:4b:b1:6c:ed:f4:68:5d:1c:ca:
b6:f4:6a:31:1c:f3:88:ce:24:39:b9:ec:93:e0:b0:
01:b5:af:07:7b:0a:e1:af:34:96:c0:e6:cc:11:c8:
4f:b7:b5:b4:b1:80:9c:9a:e3:fe:81:c0:fc:7c:1a:
cb:ed:9e:4c:30:6c:9d:2d:aa:60:31:19:f4:0c:7b:
59:15:7f:67:ca:fb:a9:2b:62:62:22:5a:27:e1:62:
04:39:cc:e1:73:a1:be:ca:91:0b:74:4c:af:31:dd:
40:57:85:1f:ca:2b:2e:40:2f:3d:d3:f5:54:54:73:
1d:47:ed:07:2b:8a:8d:0c:73:37:45:e4:ab:c3:c1:
a2:d6:7a:a0:d3:2d:ce:1c:97:d0:fc:9e:ba:d8:23:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D7:87:F7:1D:2A:EB:9D:D5:62:96:69:87:33:5F:ED:0F:7D:58:BC
X509v3 Authority Key Identifier:
keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:15:55:73:f0:0a:c6:56:28:bf:e8:20:cb:36:b1:7a:67:51:
29:94:31:ae:79:98:d6:81:91:16:ab:b5:20:e9:08:77:3f:cf:
32:f4:c6:8b:31:de:aa:c5:66:ca:16:34:0e:ee:4d:35:ab:22:
3e:93:35:16:38:d7:a6:98:4e:66:de:ae:64:25:2c:26:e0:cd:
eb:db:02:46:1e:42:a3:51:68:8d:db:74:13:03:3b:60:df:67:
b2:93:1f:98:0e:27:4d:1e:ad:90:df:c2:8d:0e:75:56:17:28:
62:18:00:90:ab:1b:6e:cc:da:a6:68:55:12:4e:72:58:9e:6c:
d9:d6:ba:1a:ec:23:90:04:2d:52:bf:43:fa:51:3a:ed:45:ef:
22:be:7b:79:e1:0c:37:35:7b:66:44:34:fc:f2:25:f1:a4:88:
49:9a:bc:25:ac:0c:d5:c0:f4:5d:12:e2:bc:59:2c:85:9b:bf:
b9:a4:6a:0f:c7:37:88:1d:b4:91:79:2b:4c:48:29:c1:69:42:
6e:af:bd:10:83:a1:3a:eb:2f:ea:dc:19:aa:91:4e:ba:1a:c5:
b5:54:8d:b5:6e:fe:98:0b:46:cc:4f:a1:f9:1c:d9:2a:be:62:
84:bc:9e:7e:89:36:d7:f7:ac:d9:f8:c3:f5:ea:2c:81:d2:89:
27:a5:23:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:19:54 2026 by rpki-client