Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File: deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier: zRyNwLWYtxG2f5yWSBrXQ+qu40loKCprnyJE6JjsHgA=
Subject key identifier: 7B:D6:1F:8F:57:5E:43:EE:59:E4:2E:ED:76:89:8F:41:FF:C3:DF:65
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer: /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial: 019D378981BFC4961789A0C95989BC48A6C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 03:00:51 +0000
Manifest this update: Sun 29 Mar 2026 03:00:51 +0000
Manifest next update: Mon 30 Mar 2026 03:00:51 +0000
Files and hashes: 1: 2_ip97ddlj1cQ2mlpG8VnnAhSa4.roa (hash: 6R1vvhI30TeNiE30+I3zfpPJroDLNETGICaQVhgLg/w=)
2: KoVt6Xy7gkv7j_38ctTdwANrLe0.roa (hash: f72VqLp88rf5xfXfyl+PJYk0ViN53QtQMBfU74Y077U=)
3: LMl6QCFGZ6NTfYGlowyafW63Beg.roa (hash: BhySL2ahxdsB2rFdsSzbUlZCzHf0m4FchHvGZ6v2dx8=)
4: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: FHPhIeI6y7P0P4y0z8vDvKoK/isOvy3k7zxzROC8DHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:81:bf:c4:96:17:89:a0:c9:59:89:bc:48:a6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
Validity
Not Before: Mar 29 03:00:51 2026 GMT
Not After : Mar 30 03:00:51 2026 GMT
Subject: CN=7bd61f8f575e43ee59e42eed76898f41ffc3df65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:c0:9c:19:7e:e4:49:09:20:3b:19:ef:27:
11:de:6e:29:fd:4f:0a:2a:39:b7:13:c2:bc:d2:90:
bd:e7:4a:e9:ed:36:32:81:df:2b:8e:f4:10:db:db:
79:f8:ce:3c:87:ae:b6:87:6b:cf:8c:c8:82:b6:1e:
06:c8:ad:f0:bf:97:28:09:b7:a5:db:bf:b5:52:13:
9b:3a:b5:12:8a:95:08:5c:d1:f1:5f:83:25:2f:54:
a4:da:86:16:a9:68:81:df:a7:a8:e3:bd:14:67:f2:
e5:2e:1c:66:f4:9d:fa:1a:5e:29:35:cf:bc:b7:0b:
f2:85:3d:73:b0:d8:1b:56:37:31:fd:4a:c0:1a:c7:
a8:f5:ec:f9:4e:f5:18:e6:22:c7:18:54:7d:8a:1a:
bc:aa:5f:4f:63:64:ae:bf:26:d2:3f:0f:2e:bc:a4:
11:d7:23:77:c6:ce:bc:89:4b:0b:81:55:60:9e:88:
c8:ef:dc:f2:3d:96:5f:13:fe:92:ce:00:01:e7:c2:
31:74:a2:04:e2:d4:19:9d:a5:7a:e5:76:13:38:9b:
2b:45:fb:31:0e:6a:be:27:ca:5d:18:f0:9b:96:80:
43:be:d5:be:55:9a:48:58:28:10:3e:05:4d:a7:aa:
4c:f0:52:71:b2:6c:d2:91:fe:41:61:23:43:b1:fa:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D6:1F:8F:57:5E:43:EE:59:E4:2E:ED:76:89:8F:41:FF:C3:DF:65
X509v3 Authority Key Identifier:
keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:36:97:16:05:a0:9e:7a:d4:e2:2c:5e:2d:21:c2:14:8e:ea:
27:e1:38:73:ac:d8:69:df:c0:21:81:ee:bf:a3:55:1c:c8:76:
a7:8b:a6:c4:df:7d:03:75:86:62:09:b8:9f:36:64:b2:8d:e2:
0e:5e:ff:f5:02:f8:74:ef:85:2b:16:66:55:bf:cd:11:bd:18:
4e:fa:30:59:2b:c6:ce:8e:cd:9e:42:45:af:79:4b:ed:e8:e3:
5e:6e:1d:1d:32:27:50:19:82:53:2f:2c:0b:7c:e0:01:aa:35:
09:d9:a3:b3:2c:cd:bd:5c:44:2c:ba:d0:14:91:77:ff:8e:c4:
26:53:64:60:42:cc:69:eb:ad:63:f5:b1:c4:50:44:af:1a:03:
27:fb:32:28:07:fd:34:66:ee:99:d9:95:bf:3c:a6:66:51:0a:
ed:80:e9:67:61:98:1f:d2:d6:f4:de:ed:48:b1:0d:4c:c3:b2:
ef:a1:99:a6:e4:e0:16:d5:49:4d:68:5c:e6:c3:db:96:65:67:
ac:c7:44:f7:a6:49:c4:d5:28:76:41:b9:6e:4f:20:ea:e6:3a:
8f:b5:a1:43:5d:23:cf:cf:ea:62:36:85:95:e7:7a:46:ae:24:
8b:21:ce:13:69:a7:e0:57:ed:91:97:23:c1:47:e4:40:61:98:
8c:15:2e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 04:51:02 2026 by rpki-client