Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: pPU+K9NH4/XLlfW3rZXVG9yZ17lCpSd9mW2uZC9B4SE=
Subject key identifier: F4:D4:85:3C:E1:0B:CF:96:26:96:E0:5A:2B:3F:19:05:A3:10:0A:7D
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 019D37C00D436331BCFF1EB7866A21221044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:26 +0000
Manifest this update: Sun 29 Mar 2026 04:00:26 +0000
Manifest next update: Mon 30 Mar 2026 04:00:26 +0000
Files and hashes: 1: FKys4Xiow33v_h270A8VpmNDWTw.roa (hash: o4z6GWQar87z6QyuQkA9LK7MGeo2/aW3AYlCX5HnTz4=)
2: eJGdRqR19npkYtvPHiGG4FtsJ9I.roa (hash: 0EM+2GV5EUJcYRTF87nIhzm0VJnMFJsOgKeMDspDH20=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: VbE7o4wLfU4L4Ma6a8ArGeqTm8cy9gTNNNAqiURhCZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:0d:43:63:31:bc:ff:1e:b7:86:6a:21:22:10:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Mar 29 04:00:26 2026 GMT
Not After : Mar 30 04:00:26 2026 GMT
Subject: CN=f4d4853ce10bcf962696e05a2b3f1905a3100a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:42:ab:66:09:59:f3:9a:c2:a1:09:50:ad:ab:
be:56:2c:09:e2:0a:dd:1c:07:eb:11:1b:07:07:a9:
e4:ea:2c:db:28:d5:07:84:9e:80:a7:c1:de:22:47:
bf:f6:ae:98:1e:32:d6:df:08:fc:cc:cb:8f:d8:4f:
ca:79:f2:77:d2:40:bc:5f:b1:bd:86:ae:11:77:97:
5e:29:63:2e:2d:2b:6e:1e:64:3f:fc:13:1b:cb:05:
9f:e9:a4:62:17:60:8b:63:12:01:4d:27:b3:79:7a:
28:d5:15:4a:31:fb:0d:b8:82:8f:06:82:f4:fc:c0:
49:d6:74:91:da:9d:d2:55:51:d5:7f:ab:cf:6e:02:
af:cb:67:ae:0c:61:b6:06:50:f2:93:73:dd:b1:c0:
68:ec:30:89:bd:be:2a:92:31:7e:3f:44:c7:fb:68:
82:86:12:a1:c6:78:ba:69:10:96:c9:a8:0d:93:41:
48:1b:e6:46:d0:9e:63:2c:00:10:94:88:ed:f3:49:
35:ed:19:80:1a:d0:dd:9f:7e:4b:9d:db:98:90:6f:
b0:73:81:4b:18:83:91:0a:fe:ef:be:4b:1c:4a:6b:
43:83:eb:23:da:0f:b1:1d:48:60:a5:d5:7f:64:99:
85:33:f3:5d:98:ed:ee:e0:ba:98:f0:d5:31:86:d2:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:85:3C:E1:0B:CF:96:26:96:E0:5A:2B:3F:19:05:A3:10:0A:7D
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ec:cd:10:eb:37:16:a2:47:f6:6a:7c:95:d4:ba:1a:b6:5d:
8a:45:f9:61:a9:ba:31:9c:7b:be:4d:6f:c2:b6:51:92:90:a1:
d9:8d:5f:35:f7:fe:0c:b6:12:ed:f4:a3:74:0a:12:dc:7a:75:
64:41:70:49:9c:14:63:4f:82:23:8c:84:99:43:3c:c8:d3:3c:
1d:76:75:53:19:23:c7:07:da:44:81:4f:35:e1:5a:12:a0:f5:
e7:69:c7:0d:f5:d1:04:41:da:ab:50:6f:40:22:34:ee:b7:b6:
ff:7e:3f:cf:a9:15:b5:a5:10:26:aa:cb:8f:94:06:32:95:02:
7b:29:d6:b8:9f:79:ac:5c:65:71:78:79:1d:6e:04:b6:57:59:
96:d2:05:30:5b:c6:4e:d5:e3:73:d3:76:39:8e:4b:d7:8e:9e:
09:e2:c9:a4:31:82:83:22:e6:39:4d:bc:cb:de:92:e6:e2:22:
d6:7a:bd:6f:29:dd:8f:79:df:1d:69:e5:a2:37:0e:bd:cd:8d:
f5:f9:ef:c0:6e:47:d5:b1:d6:94:3d:c9:71:cd:44:6d:2b:51:
13:2a:45:5e:7f:0a:5d:0b:38:6b:a9:80:c0:98:83:9a:0e:85:
15:11:82:ec:c8:69:cc:b1:3e:99:e6:6e:21:ab:40:e5:c5:42:
be:31:c7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:06 2026 by rpki-client