Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
File: dLTNPt9SHfjsChURESctP7kbmcM.mft (raw, json)
Hash identifier: M5U3200q9vFnDF+ui6xQIi26DPt79ofUvKZgRfdvUzo=
Subject key identifier: B5:A8:8C:1B:0E:66:37:C6:4C:60:4F:A2:74:70:FC:7A:68:09:57:F9
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 019D3676FA184EF7F11A5F3890403E6ED6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
Manifest number: 1852
Signing time: Sat 28 Mar 2026 22:00:59 +0000
Manifest this update: Sat 28 Mar 2026 22:00:59 +0000
Manifest next update: Sun 29 Mar 2026 22:00:59 +0000
Files and hashes: 1: QORmhi_9epbeW9LCcd6n0EGtUY8.roa (hash: yh8fGZBqg446G7IvQWeFZ53Dmb/4eGEcmhE71J/WqVg=)
2: VISbwQPxKE4ZMWN4N2M-Ot4MfO4.roa (hash: 31aRf+y4KMCXXKPf61vmEKuD5SrxcJx1XR4Sfcx1mPk=)
3: d1KZjcdpNHIYVpiceFKi35WBNOI.roa (hash: bhgrHFOFhyZ/ACw8GjeBW0aMegg7PL6RgkmabbugbK8=)
4: dLTNPt9SHfjsChURESctP7kbmcM.crl (hash: AVh0kVorFhIQXVRLN8t757aRYMd6wbRCAOlbpCmdsuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:76:fa:18:4e:f7:f1:1a:5f:38:90:40:3e:6e:d6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Mar 28 22:00:59 2026 GMT
Not After : Mar 29 22:00:59 2026 GMT
Subject: CN=b5a88c1b0e6637c64c604fa27470fc7a680957f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:31:3c:dc:83:c9:4b:5c:2d:42:67:b3:5e:
3a:83:31:7c:f6:24:c4:3e:10:4c:89:db:d6:8f:0c:
43:01:6b:12:69:21:f7:af:c6:2a:c6:14:dd:16:bf:
96:dd:89:87:71:51:9f:76:0b:70:84:54:ea:f8:d2:
2b:e8:da:a0:f2:f5:38:19:44:de:15:eb:fc:87:35:
3c:4d:1d:fd:eb:4a:8e:82:93:35:56:f5:15:47:e6:
f1:cc:93:e1:74:df:04:a1:0d:5a:1e:7c:80:e8:07:
0f:33:5f:8d:c1:2b:7a:b3:b9:ea:39:a0:70:e4:1e:
be:17:dc:2b:b5:4f:64:d0:32:b0:19:af:f7:96:eb:
8b:4a:3c:fc:94:48:8f:e9:71:9b:6b:99:f0:f6:22:
1c:32:5d:df:eb:d2:86:35:89:da:1f:46:6f:bd:66:
55:33:0b:f2:c5:26:18:dc:99:52:79:a2:0b:c9:60:
e6:8c:3d:73:b4:a3:7e:e1:2f:1a:54:0c:de:23:56:
46:0c:47:37:95:d2:4d:a7:81:7b:f9:6d:a5:e2:b5:
2f:ec:ee:b9:38:6e:82:ea:11:92:e7:e1:47:1a:dc:
89:4f:18:53:6a:50:3f:d1:ae:f3:9e:b7:70:ec:54:
e5:f8:5d:0e:79:f2:2e:1a:a6:38:93:39:19:f5:b6:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A8:8C:1B:0E:66:37:C6:4C:60:4F:A2:74:70:FC:7A:68:09:57:F9
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c7:88:a0:10:2e:49:59:e3:6a:5b:10:2e:18:85:ca:bf:b9:
5c:7d:3e:15:d9:8c:51:81:61:6e:b4:f2:ce:1a:9a:08:4b:fc:
af:e0:3b:34:8f:f8:97:7c:24:dd:3b:d0:4a:38:cc:df:dc:7d:
8e:bf:8f:a5:9f:88:e2:01:7a:96:9c:32:b3:1a:f0:0f:88:62:
f4:1e:d5:fc:b6:0e:f3:f4:b7:d8:55:15:d8:1c:ae:3f:d8:ed:
00:70:61:d9:84:f9:04:8f:22:47:1a:a8:08:7a:a6:4a:73:a5:
bc:f5:56:7b:3a:12:b6:e7:4a:77:7d:9a:a6:b7:74:7c:75:bd:
c7:a5:02:d4:54:68:af:36:a5:ae:d5:3b:0d:6f:4d:dd:9e:6d:
93:b5:1b:f3:3a:7d:df:26:06:0a:90:5c:f1:f7:42:63:81:cb:
12:f6:ef:64:12:f3:43:73:66:45:47:cd:7e:3a:e2:2d:74:60:
fb:19:38:66:4f:0a:74:bb:e1:c2:4b:71:e3:e5:f5:b2:b4:9a:
31:8d:50:42:b9:b8:9e:5e:87:e5:df:a5:aa:ba:df:0f:ae:26:
59:c6:dc:95:0d:4e:19:31:44:53:ec:10:4a:fe:94:43:83:a1:
80:32:c6:28:b4:07:88:a2:47:b7:a2:8f:bc:75:c9:c5:44:fe:
9b:b7:d7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 08:32:46 2026 by rpki-client