Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
File: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft (raw, json)
Hash identifier: 3Y7USjIyxVO/ZQeX0uOTNTZ/yEsT6OiM//JOjs1WvW4=
Subject key identifier: 03:B3:55:84:26:48:C9:46:66:8E:D0:87:F7:1F:A2:57:6F:CA:34:37
Authority key identifier: E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
Certificate issuer: /CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Certificate serial: 019D3940AE8B1BB3C9129EFB19D4841FFEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:33 +0000
Manifest this update: Sun 29 Mar 2026 11:00:33 +0000
Manifest next update: Mon 30 Mar 2026 11:00:33 +0000
Files and hashes: 1: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl (hash: vtLUNhroemhUCfGrHJrOVUOBLDYbfA/IYa9HhN/swCA=)
2: P39ugDcLvRSRgxyi-0KZpHQEqhs.roa (hash: hvw+iWajh4kVRMPbjAFg3SlmXwK5dhZKnwTAvA/Phbc=)
3: RutY2PEzNNQaSoLjnZ05mYIop5Q.roa (hash: XzQEjLEwEdF5fa58iJ8ASdj8lsvXpmYLt3uKDH2dqwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ae:8b:1b:b3:c9:12:9e:fb:19:d4:84:1f:fe:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Validity
Not Before: Mar 29 11:00:33 2026 GMT
Not After : Mar 30 11:00:33 2026 GMT
Subject: CN=03b355842648c946668ed087f71fa2576fca3437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:59:f1:1d:a8:bc:c9:0a:06:50:6d:fa:5a:
04:56:1c:51:e7:33:24:e3:c6:01:be:4f:2f:69:6c:
92:8d:46:45:66:cc:3b:9b:de:6d:68:87:37:f6:a2:
c1:52:94:86:eb:78:61:9a:f6:b9:21:3d:20:45:0d:
0f:96:50:0d:db:7e:ef:f1:d9:4c:c9:63:b7:c2:2e:
b1:76:be:6b:8e:76:73:52:06:54:1f:96:bd:6d:09:
c1:f9:4d:e1:1d:92:8f:69:df:f0:a3:9a:1d:2c:8d:
85:99:c4:ad:7a:27:f5:dd:11:54:c6:e5:b1:d8:23:
e5:11:94:aa:0d:77:f3:df:43:98:d0:b5:35:88:fe:
c1:99:9c:3d:b0:07:a8:42:39:8b:21:6d:a3:2d:83:
f4:bc:02:ef:c6:16:54:0a:ed:56:a9:2b:9a:87:ea:
a6:9b:54:81:f7:ee:51:38:1d:bb:d3:c2:cb:67:64:
6d:a1:8f:59:e1:07:8a:5b:6d:23:b3:91:41:c1:4a:
fd:43:f0:ad:c0:0d:ee:06:20:2a:2f:d9:7e:39:57:
fd:a8:6f:65:f6:7e:62:d6:29:3a:4e:83:aa:47:a2:
32:f7:82:fc:15:e1:f5:0c:9c:00:e6:13:26:57:4f:
39:69:49:09:9d:e9:90:93:cd:8a:fd:f6:9f:56:8c:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B3:55:84:26:48:C9:46:66:8E:D0:87:F7:1F:A2:57:6F:CA:34:37
X509v3 Authority Key Identifier:
keyid:E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1b:a5:ba:dd:dc:81:02:80:48:44:33:aa:4a:ac:26:f6:a9:
ce:b7:02:21:66:0b:14:b5:56:7e:e2:23:c0:71:db:ba:0c:84:
6f:3a:a3:3f:cd:dc:58:cf:db:84:e0:1a:7a:81:af:44:68:8c:
a9:30:1d:79:48:12:ab:13:bb:8a:ef:e3:dc:00:a9:1a:94:ea:
bc:aa:b0:83:51:8e:05:f5:2d:19:f3:41:64:7a:f9:7a:35:e2:
9d:f9:46:81:ff:2d:8b:bf:6b:b6:c0:9a:2c:d2:c4:bb:32:27:
9d:d6:33:37:50:01:11:76:f9:68:2c:5b:d7:45:97:20:12:a0:
01:65:dd:67:cf:d2:51:70:e7:ba:d6:00:d2:32:af:f1:af:d8:
16:bc:ee:f6:2a:4c:a8:e3:64:f5:1e:7a:e0:ed:09:09:77:39:
e4:d6:e2:9a:f8:42:b6:31:ca:c4:17:c2:98:d4:b6:a8:ff:6d:
4c:de:07:56:a5:32:fb:23:9a:31:25:9d:6d:dc:51:1f:72:0c:
92:4a:b5:6d:b0:15:30:5f:97:02:6c:f7:9f:da:ae:d6:c9:5b:
dc:37:4e:5e:f4:51:fb:82:95:93:19:bf:d5:38:e3:cf:0a:ce:
60:f5:27:2c:7a:ef:54:56:79:1c:3d:0a:02:40:00:30:e9:37:
f1:b3:a3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:30 2026 by rpki-client