Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier: qkW9VtDSBf5A8AJf/8Dqlw3RcMBhgJ6sjaaNVPvBr54=
Subject key identifier: FD:D1:11:14:A7:E0:14:7B:E3:A8:6E:8A:C5:58:29:AA:BB:54:F3:4B
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 019CE66D748BAAB3F45F824DF16B6A22474D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number: 1864
Signing time: Fri 13 Mar 2026 09:00:58 +0000
Manifest this update: Fri 13 Mar 2026 09:00:58 +0000
Manifest next update: Sat 14 Mar 2026 09:00:58 +0000
Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: hJOuVgWKgqdfeiDQAQ1+lAEo6J7HeN91gwXdbM4jmT8=)
2: _UE15j8dt-0E4MNHI1SJ6VAbDdo.roa (hash: RpMmPkih2MaIwwmI1CZ2YI65k33Pkn9LWYdRz9m4yPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:74:8b:aa:b3:f4:5f:82:4d:f1:6b:6a:22:47:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Mar 13 09:00:58 2026 GMT
Not After : Mar 14 09:00:58 2026 GMT
Subject: CN=fdd11114a7e0147be3a86e8ac55829aabb54f34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:40:15:9b:89:b6:f8:00:f8:5e:ab:2c:fc:02:
2e:8e:bd:fa:9c:9b:ed:61:6e:29:8e:48:54:fd:b0:
8c:01:0d:a1:e1:b1:a1:d2:c3:9b:da:bb:16:97:5c:
35:ea:2b:ba:73:ac:67:b5:8e:8f:2c:9f:0b:bc:de:
dd:ef:fc:83:c8:01:6b:70:e3:da:45:e8:56:56:34:
c4:1f:2a:a8:61:08:a2:fa:f2:e5:74:af:10:3c:2d:
98:d0:a6:f3:5a:db:12:1e:8f:cc:af:ea:24:03:f2:
3a:5c:c6:ad:5c:8c:fc:2b:2e:13:bb:61:e6:9b:65:
07:01:62:27:bb:44:26:88:f9:b8:48:e0:54:1e:16:
78:9a:fe:f0:55:fc:87:5c:99:72:03:11:6a:cc:c6:
ea:bb:45:de:b8:e6:b0:cb:fa:00:b4:35:6f:1e:82:
08:44:b2:5c:7f:f3:f2:64:7f:53:81:4a:72:a1:2c:
d8:ad:47:a3:ee:82:91:fc:7e:d5:fa:aa:55:0a:59:
9d:8b:a4:16:cf:a8:a7:68:54:d4:92:6d:6d:c8:55:
c1:bc:c4:bf:2c:bb:69:fe:99:c6:54:ec:1b:ba:88:
b6:96:16:b4:c6:40:f4:7f:b8:08:16:00:3a:2d:26:
c9:26:0f:28:e9:1c:50:7d:45:15:73:78:80:99:89:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D1:11:14:A7:E0:14:7B:E3:A8:6E:8A:C5:58:29:AA:BB:54:F3:4B
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8e:52:a4:d0:58:6b:b0:2b:0d:a9:13:86:dc:c6:ec:50:ae:
a8:ff:3d:ab:76:44:d0:ae:30:81:d2:6b:28:7a:5b:86:c1:dc:
92:17:40:cf:fc:87:a4:0a:d3:64:3f:77:37:46:67:0e:37:1d:
76:08:c2:c3:7f:8a:47:25:b6:82:ec:ad:32:39:1c:50:46:96:
77:86:32:44:b4:f7:e6:29:6a:3f:af:d4:b7:09:59:c1:ce:b2:
27:fe:f6:c3:c0:3a:45:61:8e:6b:74:db:00:9b:f3:16:b8:35:
74:4f:e0:e9:94:cc:36:02:87:b5:4b:e5:9e:18:fd:f3:53:dd:
4c:ea:4c:12:c2:4a:17:ed:67:cc:70:4b:07:94:37:5a:3b:80:
9f:ff:9c:5c:8d:29:6e:31:d6:5f:66:55:47:c4:e1:79:e9:0e:
be:11:f6:13:b2:f2:6f:f5:be:16:59:61:d9:72:8a:a4:c7:29:
27:d2:fd:27:c7:84:6d:e7:cb:7b:4b:42:56:f9:22:0f:7c:60:
22:e9:93:f6:5a:2e:3c:4c:a0:a8:9e:6b:9a:39:1f:6d:a8:7f:
b3:25:7e:62:86:0f:f2:fa:7a:55:cf:8e:74:e3:2f:7d:ce:4f:
d5:9b:bd:50:ce:0a:cb:75:8e:e4:71:89:12:31:dc:4c:11:3d:
73:80:05:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:15 2026 by rpki-client