Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json)
Hash identifier: RCB18nUSQ+PvK0qePiwxHQQbJBec94xtAIChufSaia8=
Subject key identifier: 7F:62:C7:CA:6D:CA:49:04:90:43:D4:81:84:5E:C7:7B:70:DB:0E:08
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 019D37F75280D52BEEBCBA1D30D3FE565F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 05:00:48 +0000
Manifest this update: Sun 29 Mar 2026 05:00:48 +0000
Manifest next update: Mon 30 Mar 2026 05:00:48 +0000
Files and hashes: 1: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: 0dENEHZt1HXM+0f9YcQMFeYaIcpEqITG/lT02bTE7t0=)
2: k18lVXCHbb1-8v6yyvWMJ8VYVHU.roa (hash: In1eQKHvGTUmAaOtsHiEQVzo1kSRudjkKkxMelV/95Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:52:80:d5:2b:ee:bc:ba:1d:30:d3:fe:56:5f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: Mar 29 05:00:48 2026 GMT
Not After : Mar 30 05:00:48 2026 GMT
Subject: CN=7f62c7ca6dca49049043d481845ec77b70db0e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:97:00:dd:4a:38:e5:08:3f:52:93:71:3e:30:
e1:d0:7a:f6:4d:d6:5a:32:2f:bf:24:40:1f:51:01:
c3:78:86:a2:7a:78:74:5d:d8:09:71:a8:b3:c5:e7:
7e:2c:40:ff:46:24:66:31:9a:a9:ea:96:85:9f:3d:
97:6c:a0:c3:66:0e:5d:eb:8a:85:a4:65:19:fc:8e:
d0:c3:1e:51:f5:3d:6e:21:15:e5:75:9f:04:64:aa:
38:af:58:94:9a:e6:46:d3:4e:3b:93:91:f5:fe:84:
ff:11:ef:30:1c:4c:e8:3c:c9:92:5b:f3:0e:a5:e1:
5a:56:45:98:7a:93:d9:d2:81:09:d2:33:ce:e5:7d:
dc:f3:84:5d:0a:87:d0:57:e7:c7:ae:ac:a4:a1:c0:
be:2f:2f:04:13:78:4e:0a:15:cf:b5:c0:75:fc:45:
3e:fd:3a:bd:2d:0e:97:78:c1:79:8f:0c:cd:ef:a8:
8e:9d:9c:15:fb:69:87:73:4a:32:9f:8d:3d:55:49:
41:d5:69:15:b5:fb:a0:f0:d0:fe:35:5c:5e:94:13:
3e:37:32:6e:59:d8:f9:3a:f5:17:41:9a:74:f7:4d:
91:4a:24:57:5d:f7:45:65:1e:3b:19:f6:3d:77:23:
f0:8a:4f:a6:d8:59:7e:a4:75:d3:ec:e0:47:af:c8:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:62:C7:CA:6D:CA:49:04:90:43:D4:81:84:5E:C7:7B:70:DB:0E:08
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:41:4e:8b:bf:68:9f:6b:a5:80:e8:92:82:04:3b:17:da:55:
e4:e1:59:b3:52:fd:8d:3b:0b:88:a9:aa:5e:ed:f0:6f:8a:c6:
77:2d:8b:7c:1f:d0:97:d2:16:cf:61:c0:66:30:0d:5d:20:f6:
f1:ac:e2:75:3b:ea:f8:39:2a:56:85:69:d9:a7:0c:48:75:74:
82:31:61:5d:70:a0:19:3d:bc:7a:3c:88:49:93:81:1b:d2:b5:
c1:8f:d4:26:82:0c:06:a2:5d:73:8c:e5:3b:80:aa:05:fd:1f:
a0:54:5a:2d:ec:cd:24:08:58:dc:d8:7b:41:e5:55:1f:7f:1f:
96:11:08:63:44:a6:05:a7:7a:99:c2:c8:8f:16:31:1f:34:a2:
70:07:6b:86:15:55:75:8b:a0:3d:d4:53:0c:14:d7:b2:c8:20:
66:82:08:e2:d8:b2:02:1f:68:26:b4:1a:ea:4a:c6:0e:41:25:
8a:12:9a:94:dc:30:83:8e:04:67:ea:56:2f:3e:91:e7:55:26:
c6:ef:c6:4d:80:ac:d7:31:ab:e7:ab:bb:68:5a:76:d1:11:20:
fb:3c:89:a6:b5:95:89:ce:14:72:92:60:13:4a:1a:85:0d:3d:
6f:17:8d:ed:92:4f:c5:63:e6:ae:72:c8:bf:cc:c7:7f:14:e9:
8d:08:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:04 2026 by rpki-client