Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
File: riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json)
Hash identifier: aBRMiepWR1wUQ1lFn6TSft8ABoJFSqkyHtw4aN1tlLM=
Subject key identifier: 04:D9:2E:FF:57:EB:B5:93:46:1F:0C:50:DF:13:F2:60:A5:33:AD:84
Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Certificate serial: 019D382E79FBC1ABA9CB28F5183D983A3BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
Manifest number: 1093
Signing time: Sun 29 Mar 2026 06:01:03 +0000
Manifest this update: Sun 29 Mar 2026 06:01:03 +0000
Manifest next update: Mon 30 Mar 2026 06:01:03 +0000
Files and hashes: 1: Nw5e2XBeWz1F5V3fCUooSdjIByw.roa (hash: hszO3zUWOu3PHw9A9VPhEVEpCWtMNuuin6SDD3mP7Bc=)
2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: 3Z19LyPlG1sK+OkAgYsZDIXPIjdN35owfjx2DXkBLsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:79:fb:c1:ab:a9:cb:28:f5:18:3d:98:3a:3b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Validity
Not Before: Mar 29 06:01:03 2026 GMT
Not After : Mar 30 06:01:03 2026 GMT
Subject: CN=04d92eff57ebb593461f0c50df13f260a533ad84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:90:81:a3:72:9f:fa:32:2d:c9:17:63:b4:
43:2f:2e:ce:0c:f1:13:45:06:56:9b:b1:42:c1:c2:
1f:74:f0:13:0e:f5:ea:f8:3b:84:b2:42:90:ce:28:
4a:69:e0:e1:be:84:69:95:87:86:78:59:c8:56:08:
f6:3c:95:e3:bd:57:9f:db:05:56:a1:fe:ac:35:0a:
95:47:cd:57:2d:e7:47:59:09:95:c1:61:85:12:30:
f1:75:64:84:c0:b3:41:7c:a2:88:4b:80:28:80:a9:
99:60:ad:db:73:97:c7:d8:9d:59:61:0d:b6:7f:6f:
b0:b8:9d:16:c8:9e:18:dc:a8:ee:b4:97:11:62:f7:
39:47:88:f5:b1:7f:28:a0:f7:1d:f2:ec:93:14:73:
75:43:d4:a6:32:4a:39:10:c1:4b:f8:cb:65:fb:8a:
bc:e7:59:42:7c:29:67:1f:c0:d9:62:9d:6d:d8:50:
af:af:18:e9:f7:f8:f7:ce:c5:7e:e7:ed:76:53:89:
93:49:ae:f5:92:2e:d4:01:6b:1a:18:fb:9f:1e:1f:
a6:6e:10:e5:41:39:be:58:b3:6a:0a:aa:ad:90:6b:
72:90:ff:79:5e:b2:29:b8:17:4b:bc:6d:6b:49:59:
c3:d2:17:5d:5d:5e:a1:b9:ee:84:5d:1a:70:6d:8b:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D9:2E:FF:57:EB:B5:93:46:1F:0C:50:DF:13:F2:60:A5:33:AD:84
X509v3 Authority Key Identifier:
keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c0:d4:58:4e:e8:2a:ef:5a:c6:44:50:d3:71:a4:ad:ef:71:
ac:34:c1:65:45:6d:87:31:4b:2c:73:28:8d:8b:29:69:44:71:
97:67:12:58:b0:2e:ac:56:54:6f:ee:bc:b7:14:31:24:26:94:
24:44:d4:3b:df:80:ed:ed:06:e6:7c:bd:00:22:e4:85:43:88:
44:c8:64:7a:f0:cc:54:8a:32:ae:95:79:ac:a6:bb:5d:e3:01:
dd:a8:5e:5b:51:7e:04:58:ca:0b:2b:d6:fe:39:51:70:11:28:
bb:75:cd:4e:86:d2:02:ff:43:1a:6f:fe:81:96:a1:a9:b5:cc:
e5:b2:ba:7b:b3:f1:bb:e7:5e:03:52:50:c9:8a:00:29:83:84:
08:20:2a:45:cb:a8:b2:b6:fb:82:56:7a:e2:49:18:bc:e0:7a:
d6:db:1a:74:fc:07:59:1b:45:e0:bf:e3:6c:10:09:66:ca:78:
7e:17:58:00:ef:c9:1a:82:1c:32:d5:78:92:a8:ee:ef:30:05:
72:5e:10:45:33:b8:f7:54:ce:ed:41:0c:59:cf:d3:2a:f6:3a:
82:90:89:6e:4c:93:5e:b6:94:f5:32:8c:fd:0b:9e:36:72:64:
90:c4:ed:e1:73:29:d3:be:c9:5d:fa:2a:cf:59:3f:44:d8:16:
f4:69:0d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:22 2026 by rpki-client