Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: fbOsO+OeXOYl8zwkECE9aLpcqqpHXUTP01Be9ol1H/g=
Subject key identifier: 13:65:EB:1F:1E:F3:CB:E0:68:CC:21:B5:94:0F:D7:0D:08:2B:69:BF
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 019D389C459137348CF0C159BFF6BDF08A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:58 +0000
Manifest this update: Sun 29 Mar 2026 08:00:58 +0000
Manifest next update: Mon 30 Mar 2026 08:00:58 +0000
Files and hashes: 1: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: eIFUOxOpPo2LSXOCrYk9ap2nrwlMsnw1XBtTYbbsZ14=)
2: X22P1NloWugtV33VklnsZASB77I.roa (hash: RELi8S+QmS5zizjTXUSelucOgYS8Q6L5FGNYX0riiUs=)
3: qZ8lYrTAES5IWyxZQZaEefS3YC0.roa (hash: TigOEyk/IxeMvvOho4DCoJ6pinlkySdim2c4kDHjteo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:45:91:37:34:8c:f0:c1:59:bf:f6:bd:f0:8a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Mar 29 08:00:58 2026 GMT
Not After : Mar 30 08:00:58 2026 GMT
Subject: CN=1365eb1f1ef3cbe068cc21b5940fd70d082b69bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:4a:06:8b:9f:b4:75:db:92:1b:6a:79:b5:
7d:a9:3a:47:4b:8f:b1:58:2a:8e:82:14:aa:59:99:
32:0b:f1:1c:08:01:a1:72:09:9c:f2:c9:9e:8f:5f:
c2:83:78:dd:13:df:e2:bc:7d:ae:53:ac:d7:e1:99:
4c:41:d3:34:2d:cc:4d:a8:19:99:db:1c:19:2e:6b:
61:e7:be:dd:94:ea:90:6f:51:30:6b:b0:fb:b5:81:
bd:51:00:06:e1:c2:7a:f5:19:89:84:e5:c7:e8:8d:
70:0d:6b:24:d3:d8:3a:f1:ab:7d:1e:8d:6c:d3:1c:
79:74:01:4d:59:04:8b:bf:85:28:05:35:85:c9:ce:
cc:3a:04:0c:36:15:b3:58:e7:59:2b:50:26:c5:0b:
93:89:a4:57:55:70:a0:c8:fb:7e:d2:cb:e2:d6:f9:
8f:23:07:65:fa:da:d6:41:58:46:38:24:4d:9f:93:
61:07:e7:f0:02:70:d5:49:7f:8a:05:86:1b:61:fa:
13:db:7a:4a:8b:46:bb:f4:0f:8b:dd:a6:43:00:dd:
10:e1:c2:37:ae:fe:2c:90:78:b4:48:fc:e2:68:1e:
90:ab:ec:14:0e:f8:d3:a4:d6:95:a1:92:ea:b6:70:
7c:6b:94:5b:79:42:81:66:ee:dd:6b:77:36:1a:48:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:65:EB:1F:1E:F3:CB:E0:68:CC:21:B5:94:0F:D7:0D:08:2B:69:BF
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:13:6b:0a:35:0a:d0:65:fd:b9:88:d8:10:b6:69:64:ee:23:
dd:44:ed:2d:34:23:40:39:46:4d:f9:dc:8a:8c:6d:c3:11:18:
8f:33:a8:d2:9c:5d:d1:f6:f8:c2:d9:04:57:92:ec:f9:15:23:
4e:16:f6:41:c0:41:a2:2c:da:ac:75:1a:6d:d5:8d:2b:28:01:
b0:a1:66:00:23:38:a0:11:0d:25:80:d9:07:9f:c7:bb:74:56:
ef:44:7c:67:08:82:da:c1:a4:85:01:52:5b:d6:4a:06:33:1e:
46:00:4f:72:06:35:61:00:08:27:2a:cf:19:11:f6:04:48:f7:
ec:b8:6e:19:c3:ad:58:e9:2c:8b:1e:67:30:e3:3e:a2:52:eb:
38:be:ba:98:b6:bb:5c:26:41:c0:05:8d:67:e7:36:e3:c1:67:
49:2e:c4:14:87:15:c9:94:6a:33:93:7b:a1:a1:82:cf:a0:60:
f8:a4:41:ab:0d:38:65:06:f0:00:83:c3:b1:df:e8:15:e1:ba:
28:89:7f:f4:a4:bf:ef:aa:89:29:69:09:63:3f:77:f3:05:d8:
a8:53:ec:62:a9:d7:fe:aa:48:06:a2:2c:27:be:1a:71:b4:f7:
23:5d:d7:cc:d1:a1:cf:d1:5c:28:d9:5c:de:2c:5d:0e:83:1c:
fc:8f:a7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:09 2026 by rpki-client