Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
File: 9TRtPtvsbacngHIsCkGr7qY2Ydg.mft (raw, json)
Hash identifier: mMAsqEnpGYOfjLgBo2H5LecOw7gRS6qvye2+pMJjlIA=
Subject key identifier: C0:DA:7A:A8:1E:00:35:7D:6A:EE:15:33:7E:33:5F:9D:C6:DF:9B:55
Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
Certificate issuer: /CN=f5346d3edbec6da72780722c0a41abeea63661d8
Certificate serial: 019D389BC70B59B170EEB04C124A272CB32C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:26 +0000
Manifest this update: Sun 29 Mar 2026 08:00:26 +0000
Manifest next update: Mon 30 Mar 2026 08:00:26 +0000
Files and hashes: 1: 9TRtPtvsbacngHIsCkGr7qY2Ydg.crl (hash: yNAAkp0LQH0PDCE1pdQ7jsUXdF4lFgh1hBAL2UR9wSE=)
2: D6pbu6PuaXGUO72aluwouFmWjyE.roa (hash: 8nTR6hgWB05NUmie1kc3rGQpyUGmaI7APNhiLwhFbGA=)
3: rcuhAyb47ghJSUkGluQz5xbi7a8.roa (hash: dSp7RJi/mX+RduoQcYjQOlir9QxlgPqiE3UuXIucR2M=)
4: tR_zS3A481vfOfnyyYvyFxLHia0.roa (hash: Qhq0h0WmbkiB7Z075UwkzQfNFRsgPnPMZNA9izf97NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c7:0b:59:b1:70:ee:b0:4c:12:4a:27:2c:b3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8
Validity
Not Before: Mar 29 08:00:26 2026 GMT
Not After : Mar 30 08:00:26 2026 GMT
Subject: CN=c0da7aa81e00357d6aee15337e335f9dc6df9b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:44:eb:e7:63:0b:cf:fe:66:6e:80:39:b7:
50:66:86:94:0b:6b:1d:a6:db:0f:17:5e:c5:f9:29:
16:34:fc:66:d3:d1:c3:78:1c:3e:76:f6:79:c7:d9:
da:e5:bb:82:6f:0b:22:9f:7b:10:fd:17:66:f8:21:
b3:e6:8b:dc:3e:27:36:88:cd:1b:9d:d7:74:36:b4:
d5:0a:59:7e:55:71:4d:d6:d9:14:39:9f:48:45:b5:
f2:fa:9c:c2:4e:d6:c9:67:2e:56:ef:76:8d:1c:61:
d9:34:96:ab:4a:93:0f:1d:56:5a:c5:89:20:b6:0e:
00:e3:ec:c0:45:02:d4:28:db:20:09:fa:16:1f:23:
b2:c9:46:10:70:5e:32:3e:43:d1:99:c8:51:4f:2e:
ea:60:bd:cf:db:c5:79:2d:d0:9f:42:3f:9b:dd:bc:
db:6c:70:c5:c8:82:2b:b7:0e:9c:ff:fc:4f:6e:ea:
4e:f6:68:d5:47:aa:ca:59:24:7c:26:b0:a3:0b:fe:
a2:ef:a3:47:23:46:41:59:78:1e:4d:6c:18:0a:3e:
56:93:b6:77:dc:bf:ba:dc:f6:d4:6c:0c:ea:70:50:
f5:f1:73:2a:bf:f4:92:a5:7e:6b:b4:e3:2d:61:3c:
05:b4:f5:64:a9:03:59:86:ba:b6:4c:0c:48:9f:80:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DA:7A:A8:1E:00:35:7D:6A:EE:15:33:7E:33:5F:9D:C6:DF:9B:55
X509v3 Authority Key Identifier:
keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:65:c3:23:05:86:6e:bb:35:a1:33:28:9e:14:64:4f:3e:b0:
f7:10:c0:a1:43:e9:b8:fa:49:0b:45:fe:e3:76:1c:a0:c3:c1:
57:82:da:16:95:ec:0a:b1:77:7f:b3:9f:f0:88:ff:ce:fc:4a:
75:a7:e6:68:ff:c8:8d:18:20:ed:fd:57:98:fc:a4:76:c1:4b:
93:84:15:04:e9:0d:de:f9:e8:98:c9:12:f2:d5:ce:91:70:da:
9b:ce:62:b9:24:f2:a7:5e:19:74:9a:c8:13:e0:65:f4:83:f3:
bf:8f:d8:55:94:a1:7e:49:7d:73:d1:97:d0:54:95:b7:6c:b5:
fb:a8:11:76:ec:4f:26:cf:25:32:8c:b5:31:33:87:52:bb:a6:
26:0d:85:2e:6d:cf:94:d2:5a:53:c0:3a:04:49:dd:df:60:8b:
fe:c5:83:ad:61:9f:c6:61:2f:6a:7d:0d:15:13:8a:d2:49:c9:
9e:45:99:d3:2c:b9:55:e8:fa:4b:0a:b1:96:dc:f3:33:c5:ea:
cc:76:92:2f:63:c0:f5:17:0f:03:e4:ea:1f:16:ea:42:29:84:
73:f8:98:26:09:e6:ca:10:75:8c:5e:55:6a:ac:7e:c0:d5:f8:
b6:dd:fa:66:0a:7c:de:f3:05:c4:70:c9:31:20:a1:5b:80:60:
8f:47:35:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:21:01 2026 by rpki-client