Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: ofwKNYZ6aa8RF0nhtTmGL5+tHBUud0QFkqTf0ZsoQuU=
Subject key identifier: 21:5D:C5:BB:D1:F3:68:A7:47:F9:06:0F:3A:DE:00:81:48:AB:12:AD
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 019D382DF3533DABC9D5A66CDB53603E8A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 06:00:28 +0000
Manifest this update: Sun 29 Mar 2026 06:00:28 +0000
Manifest next update: Mon 30 Mar 2026 06:00:28 +0000
Files and hashes: 1: Lh1w2stJ270Gej9xnTdwoInIgKA.roa (hash: o+GwhLAcoD1EMh7vyC4YZpvJmieyScRxzeQPPXDHKzo=)
2: mXT_95G0hHnwfzwy9GHCGff03us.roa (hash: MURLfvQpANHzg+d3efhUAoTh/8FNUBv5Zb/aAOYp3OU=)
3: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: oPlEqeKbMoVfKeT0BzAcn4N7sHYsi+y/iR7x9eA7xvg=)
4: x7mbec4cpv5N8U0_JFOsofDdp9k.asa (hash: xc6esLHJMBzAKQI4ygNtC8Fx32gcjy+TaKUBFG2ujWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f3:53:3d:ab:c9:d5:a6:6c:db:53:60:3e:8a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: Mar 29 06:00:28 2026 GMT
Not After : Mar 30 06:00:28 2026 GMT
Subject: CN=215dc5bbd1f368a747f9060f3ade008148ab12ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:0b:0b:cb:b1:31:bf:9e:a0:5c:1c:f3:80:
ff:19:21:89:39:28:3b:0b:1d:b0:6b:3f:a7:66:6c:
ac:c8:db:06:8f:90:4d:ac:13:62:a9:50:1c:48:2c:
ce:21:ed:26:5d:70:94:a3:35:3d:dc:91:44:64:9d:
8b:19:02:4f:61:d6:00:f6:2f:21:09:56:02:91:1a:
16:8e:73:31:ff:1b:43:e5:0c:4d:5d:8b:c7:03:bf:
9e:bb:c4:4e:da:2f:32:d9:06:02:e9:c7:01:68:41:
76:c1:e5:4e:bf:77:ed:31:91:77:73:39:8c:f4:b8:
f2:0e:40:c7:86:51:4b:03:cd:4b:0c:18:c6:d4:ff:
a1:d2:d6:0a:16:00:46:eb:59:4b:c5:28:12:d7:12:
38:9c:e3:a9:ec:6c:55:f9:12:f4:33:73:05:f2:67:
ed:f3:ca:15:ac:59:b1:0e:3a:b7:36:88:48:fe:74:
d1:c3:13:95:ac:ce:ca:9e:8c:61:71:70:40:c7:44:
47:8f:42:ea:41:60:26:41:2a:d2:41:a8:ee:7f:16:
b3:9e:04:bc:c9:dc:9f:1c:51:c1:4f:ac:46:b1:c5:
12:5c:16:b2:8c:47:56:52:f8:64:c3:69:91:27:09:
64:4a:3e:d9:a2:8c:3f:6a:11:d2:d0:f4:b5:d9:a8:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5D:C5:BB:D1:F3:68:A7:47:F9:06:0F:3A:DE:00:81:48:AB:12:AD
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ca:1c:3b:a2:f1:a7:fd:d7:b6:60:9b:4c:cd:5d:90:a9:c6:
fb:6e:15:55:90:85:ae:53:26:0e:e7:f9:b7:a1:4b:49:a0:5b:
2b:0d:ce:90:73:0f:33:37:78:35:34:8b:e6:87:bc:24:ca:89:
26:9f:cc:ec:60:d7:8a:b9:b7:82:f4:f0:5a:43:56:3d:5a:67:
97:97:78:e4:73:8b:53:ea:d5:f1:47:e5:d9:68:95:e2:50:71:
af:61:1d:91:ba:6e:c5:6e:05:60:99:30:93:7c:66:c8:e5:53:
18:31:9d:df:97:cf:ec:b6:57:3e:62:d7:ac:aa:d1:03:b1:88:
f4:d8:49:95:da:a1:15:77:74:70:ae:ad:65:e7:96:82:62:a6:
2a:4d:76:c8:42:09:6f:24:1f:a0:64:63:81:e0:74:a9:7a:4d:
15:b9:61:73:c7:e7:5d:0d:3c:52:ad:fb:32:c7:1f:df:0b:23:
02:c2:6c:5d:8d:aa:bc:e3:07:e3:cc:87:84:ac:28:07:24:ee:
5b:33:19:43:0b:9f:b5:b4:53:8e:6f:71:0e:2b:3e:ee:ec:96:
2c:75:5f:ec:ba:e6:ad:13:5b:4f:de:20:75:be:b6:bd:0b:cd:
d4:19:69:16:dc:31:90:88:3e:7b:13:d1:6f:49:2f:2f:ab:96:
32:58:1d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:27 2026 by rpki-client