Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: VH0ef9/jU7jFvrs2nAUDxfT2hwWROfxRjb3euzzO3yQ=
Subject key identifier: DE:EB:73:37:A0:97:37:27:18:DE:48:57:93:89:E2:11:07:F9:44:CC
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 019D37C0A0A744C83793DE3251385FAFA19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:01:04 +0000
Manifest this update: Sun 29 Mar 2026 04:01:04 +0000
Manifest next update: Mon 30 Mar 2026 04:01:04 +0000
Files and hashes: 1: H_QluTcmBXymBQ4nPpf21yCtfgs.roa (hash: uEZOVXv78aiCLR9+dOv0TDG+ndJ8sKw5tweYmG3KtMQ=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: I2kHZo7U2kIizYPsR3szQtV1N2/BqIDoyhFlsxNv7Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a0:a7:44:c8:37:93:de:32:51:38:5f:af:a1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Mar 29 04:01:04 2026 GMT
Not After : Mar 30 04:01:04 2026 GMT
Subject: CN=deeb7337a097372718de48579389e21107f944cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:f9:11:e6:21:85:ee:05:4d:4b:5f:af:c7:
ff:15:ca:0c:68:1d:f5:23:c2:40:e0:db:e4:20:92:
9c:a3:1a:95:fe:13:6a:93:d0:37:4d:0f:39:33:1c:
bf:16:f5:be:a0:ec:80:72:8b:37:84:ac:0c:01:6c:
d6:b5:e7:83:62:16:29:3a:b0:9e:45:6f:4d:e8:68:
71:b4:a6:b3:c9:f3:8d:31:6f:ba:4b:89:ac:0b:06:
f3:cf:d3:55:cb:4c:01:13:a7:e2:cf:c3:60:bc:5a:
bf:91:3f:b8:47:ab:93:a7:46:08:be:c8:b8:c3:65:
b5:fa:ab:9f:50:15:50:10:2d:bd:0f:01:87:37:b2:
5f:59:9f:2d:85:e2:c4:f0:8d:2f:cd:c2:bc:55:43:
ac:a1:b4:1e:66:53:c5:e7:81:2c:1f:93:8c:fb:5a:
44:7e:0d:f5:e9:9a:08:9c:d0:c6:4d:7c:bf:44:db:
5e:3d:af:68:42:a8:b1:d9:bb:e6:cf:50:2f:04:8e:
22:76:b7:81:5b:6c:58:49:1a:84:44:10:68:a7:2e:
0c:0f:6a:23:97:71:dd:d0:72:b5:b3:29:df:62:d3:
77:b2:1f:19:40:fe:3a:1c:58:0f:5b:2a:ea:6b:cf:
a1:cf:dd:4a:40:b3:f5:96:14:e1:6b:f1:20:dd:62:
63:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EB:73:37:A0:97:37:27:18:DE:48:57:93:89:E2:11:07:F9:44:CC
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:07:40:30:51:38:7b:9d:2d:56:de:93:30:8c:bf:6d:b0:e1:
07:c2:b4:a5:1c:10:ec:f3:76:fb:0d:ac:1f:53:2b:ae:8f:50:
39:a1:2a:ca:59:46:14:a7:de:94:f2:bb:79:89:03:9f:43:e2:
ca:a5:74:0e:9c:43:3a:9f:17:8a:3d:95:3c:93:23:b0:f1:bd:
1d:bd:8b:eb:aa:a7:22:bf:0d:15:75:fa:b4:fc:ba:ac:a1:48:
b3:b5:11:fe:92:0e:cf:99:e6:22:fc:8a:ab:94:fa:78:5c:40:
15:92:7a:e0:df:92:2a:b9:39:ac:c6:86:6d:7d:f8:15:2a:64:
74:32:98:b5:ab:aa:94:78:4f:c7:c2:48:25:b0:d3:90:ea:14:
df:7e:46:35:63:ca:b5:0f:9f:de:01:9f:85:aa:b1:65:dc:06:
0e:87:5c:16:90:b2:c8:6c:f1:f9:91:8a:ac:76:86:71:7b:73:
20:db:48:5c:10:2b:00:74:f8:cd:25:45:39:af:90:d3:be:15:
c2:33:de:06:1c:a0:5e:17:34:e6:ff:c2:45:d3:a6:c9:46:28:
c3:d8:85:ac:49:96:8a:e9:71:21:38:10:e3:34:72:e4:21:0a:
90:7d:3a:df:15:1d:82:21:e3:92:b5:2c:5f:b6:fa:2f:08:d7:
01:f3:19:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:46 2026 by rpki-client