Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
File: D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json)
Hash identifier: TzVyQGkX8Pk+pOixt4QPl2dVz+PEsAUG7TWSsezUjgE=
Subject key identifier: CE:42:D4:B1:AC:C0:F0:1C:D0:BA:7B:37:8F:E3:6C:88:0E:0A:B5:63
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial: 019D3A1CDA80BE8DB9A0D50DE7B207AC080B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 15:01:02 +0000
Manifest this update: Sun 29 Mar 2026 15:01:02 +0000
Manifest next update: Mon 30 Mar 2026 15:01:02 +0000
Files and hashes: 1: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: 0aEnSvTv/sQkfEgts7K5zU3KAe2SIZG4/Kp1EdFaq3Q=)
2: VS5UOf4Oqufmk1nDLv2qDmY9aAk.roa (hash: yxhJeQxv5OL2X3W33orxeTr4UI2HV6MbDSVgY4g3PdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:da:80:be:8d:b9:a0:d5:0d:e7:b2:07:ac:08:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Validity
Not Before: Mar 29 15:01:02 2026 GMT
Not After : Mar 30 15:01:02 2026 GMT
Subject: CN=ce42d4b1acc0f01cd0ba7b378fe36c880e0ab563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:50:44:86:1d:4b:9d:b9:fb:13:57:57:3e:76:
ad:cc:c2:90:ef:48:9f:dc:4e:6a:89:b5:5b:71:7e:
2f:f3:e9:17:c8:8d:e2:bd:94:22:8e:0e:7f:c2:4f:
0d:e8:d8:a0:14:ea:10:ca:5d:b0:07:63:be:49:75:
a9:f8:ed:89:0c:87:e4:43:29:00:a7:d1:5a:9d:99:
70:d5:84:e3:da:68:6c:ae:d2:80:d6:44:a7:ef:a8:
77:90:ab:c1:ed:ab:5f:53:64:52:03:7f:f1:aa:02:
fb:51:ab:3c:76:5f:8f:73:14:4d:2e:56:65:93:98:
7a:f3:1b:46:e3:ea:1e:78:9a:88:c7:16:55:23:2e:
65:91:ec:93:41:da:3b:e9:0b:d5:f4:32:72:99:1a:
c5:30:4c:6b:8e:a9:3d:3e:50:37:0f:2e:f2:aa:f0:
17:a9:ec:3f:71:1c:a1:45:05:55:5c:10:c1:de:08:
90:a8:91:e7:0a:72:13:d6:b0:17:94:1d:76:3e:e1:
9d:8d:f5:c7:89:87:26:f8:4f:5c:81:a4:64:db:00:
4a:17:04:ca:c9:6b:b9:d9:e6:30:e7:1d:3d:dd:3d:
b3:dd:4f:d6:44:52:e7:db:a9:a3:3d:40:a6:7b:a5:
15:ee:f1:69:9d:39:f0:c9:20:7f:fb:27:e9:50:b3:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:42:D4:B1:AC:C0:F0:1C:D0:BA:7B:37:8F:E3:6C:88:0E:0A:B5:63
X509v3 Authority Key Identifier:
keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0f:cc:c7:4c:d6:4f:50:1b:86:8f:52:20:10:9e:97:a9:73:
5c:3d:2f:06:38:58:0b:6d:d1:40:05:ab:85:35:7b:63:6a:91:
c0:d4:ac:24:d4:3d:ac:76:e7:74:fe:80:8c:20:f1:c9:3e:e1:
93:38:7b:11:fa:a9:d1:a5:d5:13:60:06:dd:23:e6:fa:7e:3f:
28:ea:ea:cf:6e:1d:e2:5b:80:92:7b:44:63:bb:89:5a:39:ea:
13:9b:ce:ef:c7:26:7c:ea:db:c8:c9:71:fc:e0:b4:8b:05:f7:
8d:cc:41:6b:54:29:fd:e6:c6:8b:0e:0c:c4:93:2f:cb:35:a0:
7c:25:df:18:a8:61:83:87:14:a1:2a:31:9d:5a:e5:9d:e2:72:
13:39:57:23:3c:78:4c:74:75:6c:9c:47:cc:85:98:8b:b2:b9:
07:01:29:c9:d9:d4:52:82:66:92:28:17:42:ee:9b:57:90:c1:
36:ad:27:76:28:71:84:44:a7:34:d3:eb:1a:49:94:ce:d4:5a:
41:5d:18:9f:21:01:50:b3:99:08:3a:bb:42:0b:cc:e3:d8:a4:
73:fd:12:68:9d:9c:ec:b5:27:55:74:98:a6:74:23:f6:72:71:
3f:2b:4f:89:b6:99:eb:2c:08:fe:5e:fe:cd:bb:98:72:8b:02:
4f:80:0c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:03 2026 by rpki-client