Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier: wcCK3Jt9cSIYgha/+5wJbj1dyVQLOksa9600Pe26rrY=
Subject key identifier: 4D:15:8D:B0:21:48:38:43:C0:04:91:D4:FF:DE:A3:FE:B4:50:D2:FD
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 019D35D1F3FDCC58C1B492BFBBDB39A1357C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number: 1892
Signing time: Sat 28 Mar 2026 19:00:45 +0000
Manifest this update: Sat 28 Mar 2026 19:00:45 +0000
Manifest next update: Sun 29 Mar 2026 19:00:45 +0000
Files and hashes: 1: bVyEsAAvKQpoixKzifb7SAIwq1U.asa (hash: Hhp/2raaHt+BHUMvrNvJ13U1em+DJrRPvGuzd1hW10U=)
2: bpSsw3u17paxn3-AVlEf6jIUUto.roa (hash: T2untNFj40KYleuC+qNxJNMzybkWShTxVqPmDZMj7zk=)
3: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: tDFIbToqffJWYftliIemlmDq/keBjwpM+cZ0mD+YdWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:d1:f3:fd:cc:58:c1:b4:92:bf:bb:db:39:a1:35:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Mar 28 19:00:45 2026 GMT
Not After : Mar 29 19:00:45 2026 GMT
Subject: CN=4d158db021483843c00491d4ffdea3feb450d2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:68:45:28:e5:3d:94:6d:e3:78:62:50:fd:
45:38:ff:ed:0d:dc:30:a8:8b:ad:36:14:ae:59:60:
0b:4e:df:80:d6:39:ca:fc:50:30:6a:e7:11:3b:75:
e5:d8:ad:88:30:86:2a:0c:67:f4:31:4c:25:7f:d1:
b7:de:5f:7d:ec:3b:e8:63:3d:bb:4f:56:14:fd:77:
57:18:94:94:72:6b:b4:89:5c:22:b8:cf:52:2a:9f:
da:94:c1:fb:7c:12:e5:38:80:a7:a4:88:6f:85:05:
21:80:13:be:e3:d7:5e:dd:bc:f3:96:16:82:aa:83:
e5:17:d1:f2:e3:cc:53:6f:24:41:a6:da:c6:34:c0:
40:2b:66:4c:a8:62:c3:dd:b8:e4:c3:48:b0:e3:7b:
85:56:3a:b7:49:9f:76:a5:4d:3d:53:9e:ef:b5:ab:
0a:2b:d5:9f:77:b3:b2:48:4b:13:9e:e9:9b:9b:5d:
83:59:c9:63:b5:2b:a5:ec:8d:6d:60:25:bb:0a:bd:
40:9b:01:0c:f7:b0:ff:32:ff:3f:23:60:df:f5:7c:
d9:d4:e5:82:2f:23:ac:91:27:8b:fe:e5:23:e7:19:
98:d2:82:76:4c:1a:ac:70:dc:48:ea:93:4a:00:73:
2e:2e:2a:b8:fa:1e:e4:58:5b:16:d7:7a:18:2c:97:
58:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:15:8D:B0:21:48:38:43:C0:04:91:D4:FF:DE:A3:FE:B4:50:D2:FD
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b9:46:93:cd:ec:c5:30:81:40:ff:fb:e1:7a:af:c4:8a:0e:
dd:e7:56:27:82:01:a0:d7:49:b9:f6:23:d1:f9:82:1d:7d:ad:
6e:28:fa:85:cb:ba:2f:e3:45:bd:83:e1:f4:44:be:0e:79:32:
7f:ba:a2:5c:1c:8c:c4:f7:3a:46:81:65:da:33:ee:c1:50:c8:
4d:7c:4a:31:c9:00:36:f7:93:cc:c4:2e:46:e3:ac:6e:f3:9a:
a2:02:57:0b:e8:60:d6:f2:ed:df:81:53:cd:1d:1f:90:33:db:
e8:1e:c9:9a:34:92:1e:57:25:1b:3d:00:b9:90:5c:d3:a1:7e:
2f:0e:50:52:5b:fc:c5:e6:0f:71:72:53:f3:8d:77:a1:a4:79:
a7:b3:b4:a0:79:7b:99:18:15:de:92:90:71:0f:b6:25:0c:e0:
c7:c9:d2:ac:d1:7a:26:80:85:5b:d7:fb:0a:29:0f:f7:18:dd:
ce:49:c6:be:a5:70:09:47:59:1a:85:2d:e3:58:5b:f8:80:87:
ed:56:c3:70:c5:2b:06:02:43:ac:ad:da:58:33:b7:83:c1:24:
b1:d2:4a:20:df:08:84:20:60:8a:94:ed:2c:56:d1:40:75:d6:
0a:e5:ee:24:35:d4:dd:a3:5b:7d:fb:f1:db:5b:fb:9f:f2:43:
32:59:f2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:45:22 2026 by rpki-client