Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
File: idOpFFlzx5o-e5VTHj0N99KMSgQ.mft (raw, json)
Hash identifier: bPOLAYUdJtJ8aWLGdBIXl3o12YI/FRLrnUcGFp14xT4=
Subject key identifier: 59:68:F4:DE:D8:6D:32:45:1A:00:E5:4C:F8:4C:AA:77:07:5B:5A:A1
Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Certificate serial: 019D3789794CDC81864045D01AC8C58052DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:49 +0000
Manifest this update: Sun 29 Mar 2026 03:00:49 +0000
Manifest next update: Mon 30 Mar 2026 03:00:49 +0000
Files and hashes: 1: h9ZEFQ_M3eqG9SpeL-9Vf7khClE.roa (hash: F0ol1/t/MHG3rheVuTMinY7d1uEEc3ChRKFw6MqUlUk=)
2: idOpFFlzx5o-e5VTHj0N99KMSgQ.crl (hash: Bk4Hwaecb9ECQz7D7UgsOOyhJRx2hIf5uME5jTf2gJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:79:4c:dc:81:86:40:45:d0:1a:c8:c5:80:52:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Validity
Not Before: Mar 29 03:00:49 2026 GMT
Not After : Mar 30 03:00:49 2026 GMT
Subject: CN=5968f4ded86d32451a00e54cf84caa77075b5aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:33:15:0c:a8:ee:e1:80:ea:39:b7:e5:a8:
d5:77:bc:4b:80:db:66:06:b4:29:c3:1d:bb:52:fd:
50:c1:ea:1b:f8:58:96:a5:25:51:dc:2d:8a:24:f7:
90:25:71:ae:f4:d7:93:c3:70:11:b0:5d:9a:c3:9b:
45:d4:c9:94:5b:88:5d:ad:5b:62:69:a8:60:53:b5:
44:3e:5f:9a:d8:fb:52:f3:e3:84:d8:ae:d3:31:45:
21:94:f1:37:54:7c:bd:d6:55:c6:fb:54:09:ad:90:
37:c0:c4:1e:d8:41:06:cc:ac:28:f0:7f:b7:fa:90:
f5:a0:92:ed:12:08:3c:22:51:46:ac:46:e3:30:0c:
60:f8:f1:9d:67:3f:6a:cb:ca:81:93:54:08:e0:cb:
25:4d:b0:af:4a:02:7c:a5:dc:36:d0:4f:4d:f6:28:
42:3f:43:5b:bf:60:54:b4:2f:bd:8c:1d:14:f3:8a:
34:d1:26:77:b8:79:a3:c8:5d:30:ea:5e:0c:a9:77:
18:d7:cb:f2:4c:e0:c0:c3:83:82:6b:8f:64:f5:65:
28:19:47:fd:74:d1:93:38:16:20:cd:d4:9f:df:ce:
7f:58:2d:6b:06:94:41:13:7b:b4:70:bd:1c:06:3a:
9d:ff:86:c4:3c:98:78:f7:be:64:f9:fa:ed:49:4b:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:68:F4:DE:D8:6D:32:45:1A:00:E5:4C:F8:4C:AA:77:07:5B:5A:A1
X509v3 Authority Key Identifier:
keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:da:5f:67:4f:96:5f:88:39:e2:44:4f:e3:59:eb:c6:1d:29:
83:95:2f:67:c2:5c:02:21:a0:4c:7c:87:cb:4c:a1:f2:00:b1:
52:6d:34:8d:5f:e1:fa:f0:a8:0b:dd:1f:b6:04:44:52:05:8b:
f9:fb:c4:d3:ee:6a:6a:0a:5b:fb:57:fc:0d:8a:97:71:ce:d5:
5f:b2:f3:49:54:64:9f:d5:5a:10:df:78:a2:7a:70:ea:c0:9f:
20:be:8b:b0:b8:51:cc:f2:a7:7d:49:79:cf:7c:df:ba:2b:f7:
08:d2:f3:44:0b:90:fc:25:32:be:b7:76:17:04:76:48:45:cc:
56:48:42:da:2d:e8:3b:06:17:b8:57:22:25:6d:a6:b8:b4:d8:
8e:46:93:e9:19:33:31:01:89:6b:c9:cf:28:99:be:d2:7e:3c:
60:85:1f:c2:88:b4:6d:a4:a1:1c:cd:71:94:72:ce:6d:51:38:
73:f6:ab:11:a3:99:2e:22:55:b9:65:2d:88:06:7b:9a:bb:83:
dd:a5:db:55:85:2f:00:58:ba:73:40:91:88:82:32:1f:69:2d:
71:25:50:f5:fb:e4:1b:42:14:79:d7:38:23:91:a8:d4:45:c3:
b7:ce:f2:92:67:98:0e:ac:8c:23:1d:2d:02:a2:15:ab:a6:04:
38:d9:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:21 2026 by rpki-client