Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
File: inQVrmNNYTFZy9LOdKwmGn1axNQ.mft (raw, json)
Hash identifier: P97z8yqtFGm1N+mPLUZnSwfD8MidqMc91XwAkkZSECg=
Subject key identifier: A1:82:80:30:66:D2:72:AD:FB:6D:F2:50:CA:FF:38:17:B4:3D:BF:17
Authority key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
Certificate issuer: /CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Certificate serial: 019D382E744C86A48F8DAC12A1A1E455ACB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:01:01 +0000
Manifest this update: Sun 29 Mar 2026 06:01:01 +0000
Manifest next update: Mon 30 Mar 2026 06:01:01 +0000
Files and hashes: 1: VKvLqtX1ppXEiXVa8scV9rc2Ci8.roa (hash: MN3OM8Px4rr+GRLiVct7muu1ZFs7Cc/Qcnx5KlMSz48=)
2: inQVrmNNYTFZy9LOdKwmGn1axNQ.crl (hash: ibzKTSMZmli9ylODPp7aCBub8LHFkOwzCVp0bwzlmwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:74:4c:86:a4:8f:8d:ac:12:a1:a1:e4:55:ac:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Validity
Not Before: Mar 29 06:01:01 2026 GMT
Not After : Mar 30 06:01:01 2026 GMT
Subject: CN=a182803066d272adfb6df250caff3817b43dbf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:59:33:bf:b3:d6:6b:43:ee:1e:1b:fe:56:
0b:21:cd:4c:53:e9:3e:84:7a:47:b4:fe:27:cf:22:
e3:aa:2b:15:a5:32:e3:1a:42:17:d1:98:8d:b6:9f:
3a:32:2a:94:98:ab:63:3a:ff:eb:11:df:f5:36:b1:
0e:58:94:b5:25:50:ad:0e:90:ec:6e:57:44:c4:ed:
66:d0:2f:63:99:6a:26:bc:2d:04:fd:7e:a7:76:22:
68:ae:72:63:d2:4d:b9:16:69:56:76:54:ec:1c:79:
ba:92:7f:44:96:18:7b:d5:22:c2:4d:43:af:f6:f2:
42:ce:fc:31:73:65:ab:3e:66:7c:98:1d:ad:ed:82:
24:eb:ae:d9:a0:30:ea:88:5d:7c:cb:73:95:38:81:
56:98:fc:26:1a:94:5d:84:2f:24:21:02:03:30:e4:
a8:5a:33:f2:92:91:36:d1:3c:fc:9a:59:b8:98:b1:
22:2d:f9:f9:55:6b:e5:55:a6:e5:05:1f:48:dc:84:
c5:46:17:9d:6e:52:dd:81:6e:0b:1d:b5:58:01:5a:
e3:c0:a2:13:07:81:11:1e:b0:ff:8a:d5:43:87:c7:
79:39:12:53:ad:15:8c:fe:cc:6c:72:42:c4:dc:df:
3e:06:f5:fd:55:78:99:f6:bd:ad:a9:e5:7c:8e:f0:
7c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:82:80:30:66:D2:72:AD:FB:6D:F2:50:CA:FF:38:17:B4:3D:BF:17
X509v3 Authority Key Identifier:
keyid:8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e9:51:75:69:30:41:0b:e7:71:8b:4b:d5:f2:1a:cf:24:7d:
6b:e1:70:5e:67:78:d5:3c:5b:81:16:40:de:0a:fa:4b:48:88:
f3:be:a9:27:a4:36:25:35:72:19:d8:ad:af:39:0a:f4:ab:f5:
73:6d:c3:f3:98:ab:2e:08:6f:58:70:4c:9b:4f:e0:f6:59:d1:
88:e5:fc:de:99:d0:5b:be:04:e9:ea:03:cd:cb:40:fd:29:72:
4c:e4:24:51:0e:c9:ff:1d:1e:47:ae:92:90:2d:ff:5f:0b:04:
a1:4f:1c:be:fe:86:cf:81:9c:43:95:0f:be:50:3a:90:7c:94:
4b:98:df:d9:83:ba:c2:d4:92:18:d8:d8:8b:15:91:25:d2:e3:
f2:fa:e3:f9:b4:5d:ce:91:f2:c6:33:b5:b3:a9:55:d6:e4:09:
4c:0a:77:86:d3:30:46:08:3f:15:a2:9a:3f:99:d3:ed:3e:07:
5a:3a:77:a0:d2:5b:28:84:e0:3a:36:cb:85:35:a9:38:38:2c:
52:b9:20:c4:07:73:b0:5f:37:cc:0b:09:99:8a:0b:02:a7:4d:
a8:fe:51:fe:ac:3e:2d:ae:80:94:8d:95:3c:f5:50:89:a2:b3:
a2:89:73:85:9c:35:f0:d3:a8:21:96:ad:7f:68:65:61:62:1e:
68:06:c9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:07 2026 by rpki-client