Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
File: diI5iTgH6wmEboKXJ9cakuljp8g.mft (raw, json)
Hash identifier: VeMglvLKpBgjVjUxcOAtkWZtwYh6iB1uwm133t6nJKw=
Subject key identifier: 91:CA:D0:47:B6:2E:95:E0:5F:60:0D:15:36:A6:5A:48:D2:70:9C:75
Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
Certificate issuer: /CN=762239893807eb09846e829727d71a92e963a7c8
Certificate serial: 019D3AF83149FF02DF00C5003926D0C53F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 19:00:37 +0000
Manifest this update: Sun 29 Mar 2026 19:00:37 +0000
Manifest next update: Mon 30 Mar 2026 19:00:37 +0000
Files and hashes: 1: diI5iTgH6wmEboKXJ9cakuljp8g.crl (hash: etPixPczLU62DrGppEZm7USgRwPEJ3UwimuGFOa3R9g=)
2: xmOzcr6lxPTRPADy6CpR95O7sF8.roa (hash: XkTf2vdpptILRuqJJs0WI2X+ppey6cgWY94/Zljo9tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:31:49:ff:02:df:00:c5:00:39:26:d0:c5:3f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762239893807eb09846e829727d71a92e963a7c8
Validity
Not Before: Mar 29 19:00:37 2026 GMT
Not After : Mar 30 19:00:37 2026 GMT
Subject: CN=91cad047b62e95e05f600d1536a65a48d2709c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:30:d6:08:36:b2:2a:31:1e:26:8c:fe:d6:
80:67:46:36:45:98:96:e8:b6:d3:b9:ec:56:00:a8:
f8:a2:36:d0:e2:38:68:9f:09:8e:be:ea:b2:24:46:
f6:1d:88:b3:69:35:17:8e:d9:2f:cd:44:a6:91:7d:
a5:55:13:68:c5:52:bf:da:59:0f:5a:b5:2b:41:23:
19:95:41:94:74:12:fc:c2:e6:8e:ae:05:34:df:4c:
4d:c0:97:d7:08:d5:51:94:31:5b:37:10:4e:3d:6a:
a2:a9:eb:08:29:21:dc:57:42:7d:a9:8d:61:43:7c:
02:16:f4:68:de:5c:74:50:86:b5:77:c3:90:b9:3e:
f8:7a:b1:fb:84:49:2c:b1:bb:9a:fe:e9:7d:db:f9:
54:02:7c:1d:92:9a:cf:2f:d2:8b:8e:fb:6a:22:2e:
90:37:fa:26:b9:c9:5f:c6:ec:68:96:7c:85:86:07:
e3:05:8b:a1:49:8e:3a:4a:f4:67:b0:75:54:81:20:
71:0e:c3:83:08:88:32:37:46:ef:fc:f4:c6:72:14:
f2:bf:d0:96:d1:cb:63:00:82:9d:6e:95:6c:c2:b1:
b6:0a:0d:7e:67:42:27:26:41:c9:59:78:5d:1e:eb:
0f:75:5e:69:8f:e0:c6:a7:af:5f:ed:03:18:84:af:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CA:D0:47:B6:2E:95:E0:5F:60:0D:15:36:A6:5A:48:D2:70:9C:75
X509v3 Authority Key Identifier:
keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c7:95:36:31:d6:ba:49:55:f9:32:87:4b:ed:6e:40:74:16:
7e:47:7b:31:2c:d9:74:70:e1:65:45:5c:b0:36:1d:21:a4:16:
4d:e3:82:9a:03:12:78:11:4e:dc:84:63:fa:89:6e:bf:a1:17:
59:64:bd:87:0c:12:c7:40:47:55:f8:0b:b8:ee:36:69:48:f3:
5f:ae:9a:38:d7:d1:9b:d8:fb:e0:0c:d9:34:e6:33:5d:cc:19:
5e:95:80:b2:48:f5:d9:9d:ba:6e:f6:e9:67:0a:ce:4c:8f:3e:
89:79:b4:71:69:ab:f9:26:b4:11:46:26:7a:fb:ad:1c:b6:02:
f0:a6:a1:76:50:c8:b1:21:3e:83:0d:fa:28:a9:00:1e:cc:53:
f7:01:d6:62:00:37:59:8d:a0:2a:a7:e7:56:8e:8f:98:28:f6:
05:d7:07:05:cd:3a:41:cb:b4:73:34:db:ce:5b:ec:3d:9a:25:
73:5c:fb:7f:48:1e:2a:62:e2:68:a7:89:f0:f1:49:e8:ad:fd:
5b:58:98:42:11:85:cd:46:45:26:43:ef:8e:e8:63:27:07:f0:
ee:30:bb:1d:d1:0f:00:db:0e:55:f4:9c:56:59:83:39:5d:71:
d3:1b:fb:4b:0e:ec:ff:6d:3e:67:bd:f2:e9:92:d6:51:2a:e2:
bb:b0:5a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:15:45 2026 by rpki-client