Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
File: diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json)
Hash identifier: zl6KsCqXnqT878GBM9RJgW7K9tmHso3mkRtOIMk6TiM=
Subject key identifier: 92:82:81:68:9D:CD:A6:2A:4D:E8:2F:8A:60:FA:5A:8F:1F:2D:36:74
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial: 019D1E37A0E1747A49C2BD4B922C1842D1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
Manifest number: 1381
Signing time: Tue 24 Mar 2026 05:00:55 +0000
Manifest this update: Tue 24 Mar 2026 05:00:55 +0000
Manifest next update: Wed 25 Mar 2026 05:00:55 +0000
Files and hashes: 1: 0afuwwpSylnqyi1KRwMRDOM6r7k.roa (hash: z3MlidMuuLgNR1mdxxRmyn3fh5T6uAJcGz1Z1osDBjI=)
2: 4gGd7LcQ6qQ6avnurf3xejB1t0s.roa (hash: j3iW+b3EiZhGw5mm3ly7V+FoiiHAPGatR1ru3J1J6Vg=)
3: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: ZhSExt7jS83YlE2Jd5Y6yJ488FW5KsD+sXrJqGbx8mc=)
4: zNm5Qj7aAnNhn0PPXpRiZPpb-Cc.roa (hash: aecWS2V1Qv9HVqql7W0x5HQGtiHaZA7TdAFG/WsALog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:37:a0:e1:74:7a:49:c2:bd:4b:92:2c:18:42:d1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
Validity
Not Before: Mar 24 05:00:55 2026 GMT
Not After : Mar 25 05:00:55 2026 GMT
Subject: CN=928281689dcda62a4de82f8a60fa5a8f1f2d3674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:57:04:d6:7c:10:07:fe:43:63:30:bb:8f:
4e:87:be:11:1b:e8:ca:28:a2:f6:a4:89:f0:60:75:
af:04:af:c7:c0:a8:7b:a6:bf:ec:dd:5d:29:16:d9:
52:ca:c0:f9:b8:a8:7a:e5:32:a8:a9:e7:c5:69:31:
d4:0c:43:c6:a9:68:8d:3c:06:f7:1b:a2:88:a0:b7:
2d:db:2c:6e:21:fe:93:75:df:25:1a:75:a9:e8:02:
8e:46:6f:ca:a1:f7:16:9e:d7:c9:47:d8:fd:1d:02:
df:d0:ff:14:e8:4f:f2:5e:a0:93:1b:4d:5f:ec:26:
27:73:8b:49:bd:78:32:b9:0a:b3:5b:ae:2c:42:a4:
62:96:07:94:1f:a3:e8:c8:f2:8b:e1:60:d8:09:61:
70:7c:f2:cb:33:e3:cb:4c:19:c9:9a:52:b6:45:e1:
10:4f:c7:c3:1d:82:7c:6d:e2:c6:9c:83:a4:e2:ce:
65:54:e2:0f:ca:ee:ec:c2:9a:97:67:72:37:2b:68:
ea:b0:d4:51:ee:4e:ec:60:17:6a:76:42:b8:15:34:
01:4b:69:ab:5b:48:50:3a:0a:41:f7:c9:61:dd:05:
b4:36:e6:21:af:e5:c0:18:cf:d4:b0:4a:f4:83:5a:
2a:88:04:b7:c2:50:d4:9b:0e:f5:e3:e6:97:f9:ef:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:82:81:68:9D:CD:A6:2A:4D:E8:2F:8A:60:FA:5A:8F:1F:2D:36:74
X509v3 Authority Key Identifier:
keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b0:3b:0e:34:7f:b4:67:8f:a9:c6:b7:2d:c2:b1:aa:fa:cc:
11:cd:c0:c7:12:be:6d:94:53:61:2e:5b:d0:5f:df:93:e1:8e:
5a:7b:8c:6a:d7:6b:0a:ad:78:9b:1e:81:11:a5:dd:02:d1:cf:
dd:6b:cb:ee:77:76:88:96:b8:11:96:60:72:51:2d:6a:c0:16:
d6:6d:69:6b:99:b7:ba:ee:4e:5c:8a:60:dd:db:94:06:50:f1:
6e:2b:2b:f6:13:6b:7d:c0:c8:4a:cf:87:cd:6b:a2:dc:f4:f0:
7e:c5:ab:17:70:76:e5:91:14:41:0e:41:94:f4:b8:47:36:d3:
33:f4:c0:0c:45:53:c7:52:8f:7e:81:e2:50:b6:cf:65:a8:1a:
37:01:3e:f5:b8:0f:71:d9:9c:55:95:f8:d6:a2:83:d3:43:25:
31:12:9a:47:6e:40:49:19:9f:0e:de:c8:f1:8a:97:62:66:6b:
94:c8:3b:0e:da:c5:57:94:b8:60:af:83:0b:83:19:3f:e7:d3:
93:c6:66:4f:d3:39:96:a5:d6:e0:08:4f:88:c8:0d:8a:79:10:
76:f7:c2:ed:ef:f2:1c:8c:2f:ea:36:6e:0d:36:f5:fb:62:5f:
5b:c2:2e:e9:99:ff:a4:a6:40:ca:67:dd:03:f0:a5:87:f5:df:
c9:53:9c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 12:45:18 2026 by rpki-client