Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
File: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json)
Hash identifier: 8Bwm9LH1YxEONHN90OaGbMCp7pNvwGyMzSTUCmHV2b0=
Subject key identifier: FA:FF:A7:99:15:44:6B:63:F6:AB:E6:1B:F1:87:61:8D:53:42:24:10
Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
Certificate issuer: /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Certificate serial: 019D37C0C52BF339DCBC615D9A7E17FB1AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:13 +0000
Manifest this update: Sun 29 Mar 2026 04:01:13 +0000
Manifest next update: Mon 30 Mar 2026 04:01:13 +0000
Files and hashes: 1: JEVNwkBJGjPUCLbxmvoCLoGPZjs.roa (hash: ET03PFNNVrxiq4Y+fkFrz6tnsyAu93bMLHdSl5Q6kB8=)
2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: p4onj38mn5EqY4ZEoewRiTWrtAI/X5TiTczRtdlrnAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c5:2b:f3:39:dc:bc:61:5d:9a:7e:17:fb:1a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Validity
Not Before: Mar 29 04:01:13 2026 GMT
Not After : Mar 30 04:01:13 2026 GMT
Subject: CN=faffa79915446b63f6abe61bf187618d53422410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:38:a1:2f:9f:b3:93:46:71:df:d6:af:da:
91:ef:56:b9:45:97:3e:c4:7e:53:74:21:5f:3c:bd:
4e:2c:9f:a0:b7:05:33:ac:38:85:ad:eb:9c:af:6e:
68:1f:5d:c8:c2:ee:f8:41:b2:09:65:50:b9:43:60:
c1:44:ee:4a:46:3d:c1:d1:cf:48:b4:3c:ed:aa:a3:
03:a5:38:6a:57:36:8f:00:7c:5c:c1:86:73:ed:e2:
a1:98:3f:2b:d9:d1:56:7f:42:b5:5a:20:bd:06:2a:
40:4c:90:c7:ea:bd:eb:45:a8:2f:88:2e:7d:0e:e9:
74:ff:91:64:8f:41:f3:08:de:5e:9b:74:80:1c:8d:
ee:ef:70:5d:55:e9:76:a9:8b:89:00:b8:c7:41:cc:
f1:78:34:dd:fc:08:7a:5b:72:07:ab:c4:c2:fd:2f:
82:77:da:90:98:7d:33:ca:a3:83:37:b5:af:fa:c5:
90:f4:73:65:b0:a8:96:63:99:3b:ef:78:46:c5:eb:
1a:1c:7f:18:85:3e:03:6d:bc:b5:c8:2b:6b:77:f2:
6f:c5:c2:ab:bc:89:8c:bd:27:52:90:74:58:3e:4a:
35:c0:38:5a:8f:18:3d:8e:96:6c:7f:a3:1e:11:06:
2b:d5:9f:19:bb:5c:92:69:82:4f:2e:67:83:17:76:
f7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FF:A7:99:15:44:6B:63:F6:AB:E6:1B:F1:87:61:8D:53:42:24:10
X509v3 Authority Key Identifier:
keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:eb:ea:22:b7:31:61:7b:c0:1b:d3:80:b7:eb:8d:96:53:b4:
dd:82:d5:0e:95:6e:bb:df:60:08:f6:cc:fd:50:8e:d5:81:fb:
1a:08:d4:f6:70:75:a0:dd:3e:b0:46:8e:19:c3:87:c0:96:67:
7e:be:c5:f6:ca:26:cf:0d:51:42:ce:1c:fe:bb:8b:1b:c4:2a:
bb:2f:d3:67:17:25:07:3e:5d:a1:c5:4d:75:4b:40:c3:52:7c:
af:42:2d:47:cc:ad:ad:84:1b:24:83:7a:ef:42:23:21:27:d0:
0f:1f:9c:fc:0f:8f:c3:96:b5:87:e4:fa:a1:8d:18:11:46:f7:
09:c1:43:3f:c2:07:45:3b:37:35:c3:5b:9f:2d:5f:70:1b:9e:
4d:20:62:b8:a0:1b:54:09:0f:4f:dd:2d:39:f8:7d:ca:71:03:
e6:02:4f:79:ea:13:77:b0:a4:49:05:29:36:eb:81:61:9c:9c:
78:0a:64:a4:38:d2:9c:b3:2d:28:75:e2:0a:66:7a:0c:b4:12:
62:38:aa:9b:c6:62:ed:83:a1:3b:8b:b0:06:a6:a9:25:c8:0d:
af:ae:35:2a:8f:fd:e0:2a:83:7d:be:b6:88:32:e3:12:b2:b3:
4d:55:1f:67:fc:08:b5:19:b1:85:19:06:ef:c6:2b:0a:01:aa:
a4:fd:97:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:19 2026 by rpki-client