Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
File: _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json)
Hash identifier: ddlnc88gPzyeIVZ9pfKw9uPl6KtIVFXLMEYLqeX4HBs=
Subject key identifier: 49:13:E4:B5:89:AA:E9:40:7A:DD:14:D4:AC:82:F0:A5:43:9C:CF:52
Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
Certificate issuer: /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Certificate serial: 019D38D35D3D91D91F739EB4EC14DFA8DAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:09 +0000
Manifest this update: Sun 29 Mar 2026 09:01:09 +0000
Manifest next update: Mon 30 Mar 2026 09:01:09 +0000
Files and hashes: 1: V5P32cfEgu92S1VlI1kMBBPo3Ag.roa (hash: T7KoapqHODXnycaN9qCgI68x/qZdCltg//u0iSK2v+k=)
2: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: qtMC6WrclfHsYAFuCVYVdP3vWyoPWBZ8mqfckOV8b0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5d:3d:91:d9:1f:73:9e:b4:ec:14:df:a8:da:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Validity
Not Before: Mar 29 09:01:09 2026 GMT
Not After : Mar 30 09:01:09 2026 GMT
Subject: CN=4913e4b589aae9407add14d4ac82f0a5439ccf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:b2:50:c7:3f:d1:24:5d:df:8f:6b:34:8b:
d5:40:1e:15:66:3c:97:69:b1:62:45:ad:c9:12:8d:
4d:00:af:f6:ec:34:09:9d:1c:12:23:8a:0a:6f:af:
83:e1:28:35:73:05:64:74:c7:e1:37:12:cf:fd:06:
93:37:a1:f3:12:85:3f:22:ec:ba:ec:65:e4:00:dc:
dc:ac:fb:63:28:95:12:b9:de:b4:5c:5a:5e:86:00:
12:b7:4c:f0:95:d8:3e:ad:74:41:21:f6:df:52:c2:
d3:bd:83:c4:c8:25:ef:64:e4:b0:dd:98:5a:39:85:
8b:c9:1b:e5:ba:f3:c7:30:87:6e:3b:aa:b8:52:d1:
7e:55:f4:2c:38:38:68:39:7a:08:d9:18:18:9e:9e:
c2:e1:71:9a:cb:6f:be:2f:d0:d1:46:c4:ca:00:61:
fd:43:cf:2e:81:78:36:28:50:c8:f3:53:2c:3e:a9:
86:20:a3:a5:38:e6:e3:d7:ff:1e:5b:fa:f8:05:e3:
e7:f7:63:85:07:b1:f9:fb:b6:62:50:8d:b2:ed:91:
cd:f7:65:b3:f2:9f:90:e3:65:b9:06:b0:e7:32:6f:
ef:d4:51:1d:44:48:d8:be:a9:7f:db:3c:eb:1d:cb:
57:cf:71:86:7b:b1:4f:71:6b:32:3b:68:d4:4d:2c:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:13:E4:B5:89:AA:E9:40:7A:DD:14:D4:AC:82:F0:A5:43:9C:CF:52
X509v3 Authority Key Identifier:
keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ae:df:4d:a0:e5:4c:05:02:5c:cf:61:39:b1:b1:b3:7c:27:
78:d7:30:59:48:01:5d:e0:ed:f4:8b:21:e1:b8:14:c3:d1:bf:
73:e5:ea:8a:1f:2b:59:ba:a7:d6:bc:57:28:31:b7:86:32:4f:
95:ea:37:8f:8d:5f:e6:d1:06:74:4c:08:f4:36:96:89:d1:16:
5b:5f:ec:4f:c2:a8:0e:d9:de:2f:8e:d6:95:e3:43:15:42:c0:
04:9c:71:12:a1:45:37:ad:c1:e0:60:2e:1f:03:6a:e2:49:59:
b4:be:22:92:21:21:f2:3b:6c:55:11:17:c2:09:b4:58:00:64:
50:58:cb:40:6c:f3:e4:b8:f6:95:24:19:81:5c:f0:0f:d0:1c:
7c:c3:44:7f:63:fb:26:4d:bf:02:07:f9:cb:f6:66:63:11:7d:
d1:70:81:93:b6:03:d3:37:08:7f:9f:07:40:d0:f1:9e:3d:f1:
ad:7b:27:28:e3:c3:87:6d:df:1a:59:24:c9:59:7e:ee:a1:65:
4a:78:d6:37:14:11:d7:b7:fa:ad:2b:c1:e1:ed:b4:b8:c0:51:
11:5a:23:d3:4d:c3:03:68:02:b0:ee:15:3f:6e:2c:fa:5b:af:
6e:ec:9e:9a:4e:d1:a1:c2:2a:86:fd:d8:66:43:3d:01:85:0c:
57:e5:79:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:02 2026 by rpki-client