Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: Y+743UYmOai0gGYOEwXjJhyvWpRxY6RLu+EBb3uMG8E=
Subject key identifier: 86:D8:03:A6:69:A4:F1:46:F4:CD:E3:63:02:06:77:8D:86:4D:29:8D
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 019D3866186777A7D6D97E2CDB4A8CD949D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:48 +0000
Manifest this update: Sun 29 Mar 2026 07:01:48 +0000
Manifest next update: Mon 30 Mar 2026 07:01:48 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: u6xF7tYHD4StWKLkOsFLvWMEAv73B8p8v8Tgp3L7Weo=)
2: iyOoKbcuiPTHCLxMCiy7DxXr5rk.roa (hash: PXqcza2cwz/3mR448+fTEDzYFSGuytoJUnD8yJR22Mo=)
3: rjqoaksN8bIK2O4SRzuLcMffaQQ.roa (hash: YtctfngTDGfahIUPg5R6y0N3cZYKDE1Tr+6r4LZlIhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:18:67:77:a7:d6:d9:7e:2c:db:4a:8c:d9:49:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Mar 29 07:01:48 2026 GMT
Not After : Mar 30 07:01:48 2026 GMT
Subject: CN=86d803a669a4f146f4cde3630206778d864d298d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:02:83:40:be:f7:16:58:ff:fc:ef:07:bf:
67:08:c0:f9:59:32:a7:52:87:5d:5a:e1:b0:bb:d0:
31:c7:1d:69:10:e6:6e:55:93:f7:b9:9f:f8:4b:66:
ad:0e:68:32:7d:5b:e8:71:24:f4:2e:5b:85:33:1e:
d6:0c:14:21:44:10:ea:8b:a6:9c:59:9f:dc:be:8c:
63:5b:07:1d:b6:91:db:61:5c:bf:2b:c1:29:d9:df:
e9:41:97:54:c0:5c:35:c3:ae:d1:24:58:b4:30:40:
47:b3:49:92:a4:35:05:fa:2f:6c:21:78:29:58:0d:
2e:b5:08:f0:11:6a:83:0c:fd:6a:4e:e8:ee:38:d3:
c1:94:4f:70:15:e2:09:cd:3f:e4:45:ea:24:b0:db:
e7:99:cb:cb:05:15:29:54:8d:71:06:e5:1f:a5:89:
d4:fe:a7:d7:81:98:57:bd:67:c1:98:64:af:28:3c:
a9:07:db:75:23:6a:42:93:e5:e6:c9:aa:ec:b9:04:
a4:02:ff:9b:48:fb:50:aa:1b:33:9b:40:d2:d6:19:
b9:0c:8f:4b:48:93:7a:82:40:4c:21:ed:46:73:60:
fb:16:17:a7:d6:60:50:07:89:88:a7:a5:1c:35:0b:
fb:7d:96:84:cd:29:ec:10:0a:66:4f:6a:b5:de:fd:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D8:03:A6:69:A4:F1:46:F4:CD:E3:63:02:06:77:8D:86:4D:29:8D
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4b:c7:73:5d:0c:78:a5:51:cc:89:64:16:32:fc:9c:c7:09:
22:84:4a:23:40:61:12:30:5e:89:63:6e:26:ca:3d:ec:b7:01:
d8:fe:47:d9:2a:58:b7:d7:f2:11:f7:8b:52:90:04:aa:f5:7f:
86:a4:f2:7f:72:6e:74:3e:35:65:ea:33:7e:ac:1d:a6:b8:a1:
8e:d1:c7:c4:c2:24:26:df:b7:70:39:73:b0:92:71:f8:24:0c:
43:b4:4b:2c:a3:62:c5:22:19:d2:ce:16:b4:f0:c4:94:15:be:
b9:a9:67:6f:75:16:d6:94:74:7f:bc:c0:10:f8:fe:fc:5b:6a:
79:df:6c:d4:39:a2:8f:23:40:83:dc:4e:73:77:3c:10:04:b7:
09:d3:08:a2:01:34:9e:ae:d1:1a:09:a2:9e:4c:c1:04:d0:04:
25:b3:cd:ea:f4:e3:7d:2b:4a:7d:4e:56:42:b0:42:aa:d6:ae:
f4:17:2b:e0:7f:5a:34:fe:9b:aa:7c:db:a1:3e:a4:73:87:35:
c9:16:c8:34:1f:8d:d9:6d:20:b7:04:d3:b6:15:69:3f:36:2c:
81:10:29:a8:09:d1:93:49:4e:99:7a:84:19:7a:9c:11:3c:1b:
f0:de:fd:df:c4:10:d6:73:d2:49:ec:90:ca:ae:84:67:3e:e7:
38:19:33:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:28 2026 by rpki-client