Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File: 121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier: pSBAVK5k0pCIICnXtxOBKRLEw+mUWsbd6SS4kXKRZ0E=
Subject key identifier: 3C:2A:E4:A8:57:31:10:59:B0:69:BF:2F:38:A5:49:B5:5B:6F:A0:6E
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 019D39E6039A369EDD7B2661578F5FA86A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 14:01:08 +0000
Manifest this update: Sun 29 Mar 2026 14:01:08 +0000
Manifest next update: Mon 30 Mar 2026 14:01:08 +0000
Files and hashes: 1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: CYMHmTAaWQWAOvuExlxPu3vd8XhEZcQLzrLCaJEvgJ8=)
2: PYC5VmfJr8R_CWcpbSFGWUPORN8.roa (hash: ni//q5JfG12C/jFNrjnRjeiKy+Pl48zK6T66mzOL5KA=)
3: ucYb6qB_KaTWYUSU6LAo8719FDs.roa (hash: +ASle/PB3Ogg8HVIw0p9waPXwti0vvLog6UAfw5L79w=)
4: x04dCWjItyDGXFoquqgz5jnrMRg.roa (hash: hVlcjFxSr+ykf+gKZRqjXZQpnt9aXT76dSufsRzsGvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e6:03:9a:36:9e:dd:7b:26:61:57:8f:5f:a8:6a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: Mar 29 14:01:08 2026 GMT
Not After : Mar 30 14:01:08 2026 GMT
Subject: CN=3c2ae4a857311059b069bf2f38a549b55b6fa06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:31:c7:28:9c:76:4a:92:09:19:c0:af:71:
ca:38:d7:a8:37:0c:e1:09:fd:2b:2c:4b:95:a4:fd:
ad:69:53:19:da:09:b4:35:81:54:49:d1:60:9f:8e:
fb:e5:99:a4:a2:7b:fd:47:db:da:ea:96:48:b8:cc:
82:12:49:ca:29:e2:f6:33:31:9b:da:7b:e8:50:cf:
9e:81:4a:7a:d5:39:e9:d2:db:88:84:74:26:d1:de:
f4:e0:90:c7:1e:d0:9b:c0:0f:1e:ba:05:a5:83:60:
2e:4c:58:6c:0f:ee:81:3a:b4:7b:07:58:a3:cd:f8:
cb:ab:d3:99:26:5f:25:fd:a2:cf:ca:68:61:d3:2b:
eb:32:57:da:6b:2d:44:d2:a0:7e:ad:27:e8:38:e9:
31:bb:1f:16:67:72:b9:23:3d:f3:16:0d:6b:bf:3c:
ae:64:35:d9:97:9d:97:59:05:c0:57:2a:93:c3:f1:
72:93:63:fd:09:ee:9f:3e:81:25:bf:1a:9e:de:a7:
c8:e7:29:ae:c5:32:a1:c1:4d:ef:cb:5c:1b:ec:a6:
af:39:53:3d:c3:e0:ef:99:02:3c:7d:4a:96:d0:b4:
a7:7a:3a:f3:de:99:4d:e5:b8:05:8a:55:e2:83:d2:
7b:18:f7:03:f7:ff:9f:05:61:d6:7a:71:6d:2b:fb:
e9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2A:E4:A8:57:31:10:59:B0:69:BF:2F:38:A5:49:B5:5B:6F:A0:6E
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e7:c7:22:7f:4a:97:74:22:31:93:a4:a4:b3:fa:7f:89:18:
9b:05:9a:e1:d6:01:3f:c2:92:2d:5e:ba:e5:e1:69:76:d7:2e:
0a:d8:b5:35:bc:49:e3:d3:3c:ab:7e:dd:71:5b:8b:cc:95:16:
78:40:22:2b:a8:89:40:30:51:57:8e:fb:92:79:4f:83:c0:76:
5e:d8:9c:6b:26:ed:ae:12:bf:a4:8c:a7:ad:ee:01:a9:3d:3c:
b7:3b:94:ea:6a:47:25:74:96:a6:77:d2:ee:3d:52:59:8e:9b:
24:e4:23:28:a6:fc:13:d8:4f:0f:ef:16:16:21:68:27:6e:d7:
aa:8e:94:f5:f1:11:ca:3f:14:84:f5:14:c3:d3:94:c0:d3:5d:
5a:13:6f:53:7c:f7:2b:12:bb:cf:c3:66:c8:87:86:f7:a1:ec:
7e:5f:e5:63:14:c5:17:92:89:67:01:d5:3d:d8:2c:fe:de:0e:
50:5c:46:a7:58:9d:c9:0a:4e:94:49:8d:66:3b:42:75:43:11:
a7:38:95:55:67:1c:31:05:8c:fd:fe:15:d1:ae:1e:8c:5a:61:
a5:34:58:79:26:d8:df:fd:e4:a7:f7:e9:e0:94:95:b9:bf:54:
4e:3d:3e:83:52:b0:11:74:04:ca:da:da:ef:3a:df:a6:f3:db:
ff:31:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:50 2026 by rpki-client