Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
File: rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft (raw, json)
Hash identifier: 54LgrZxdXhAAhGhjTXkKAH3nlOqmKscKtNjxhKQArKg=
Subject key identifier: 93:82:BF:99:99:2B:A6:17:A2:79:FB:65:96:C7:01:49:D5:4E:E3:11
Authority key identifier: AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
Certificate issuer: /CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Certificate serial: 019D38655DE59D3B59C3F1DA624D8AF92BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:00 +0000
Manifest this update: Sun 29 Mar 2026 07:01:00 +0000
Manifest next update: Mon 30 Mar 2026 07:01:00 +0000
Files and hashes: 1: PWOIsM1RgkYVqSbqLsT7k73pFWQ.roa (hash: 9bdrQrsfFHUHU7k9g9RNN8b9Hzrdzx2GE2UfmdhgdoI=)
2: rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl (hash: W7mMfle7Ms1ASSXHVJXokQg5vxubbVUCgTaJxiu6EDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5d:e5:9d:3b:59:c3:f1:da:62:4d:8a:f9:2b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Validity
Not Before: Mar 29 07:01:00 2026 GMT
Not After : Mar 30 07:01:00 2026 GMT
Subject: CN=9382bf99992ba617a279fb6596c70149d54ee311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:a3:45:ff:7f:d8:ae:5b:85:b7:12:31:bf:
b8:87:13:ab:55:81:80:ae:f5:b8:c2:c3:43:9f:fb:
28:cb:fb:39:71:42:8c:34:00:cc:85:ec:a6:e7:96:
b9:80:4c:85:23:8c:d9:f2:2a:c5:b3:16:fd:18:87:
28:44:81:51:d3:5c:85:d7:c4:f5:2b:b6:cb:ad:e7:
30:b1:26:63:9b:31:05:88:e4:80:47:e6:37:15:c9:
a5:56:39:03:2f:12:e4:5b:12:59:c0:aa:ef:9f:8e:
34:ac:12:6a:a4:3d:3e:5d:5f:16:52:80:90:7a:ec:
b0:bc:0b:ef:0c:f4:67:6d:fa:5d:7b:d8:b2:ce:e2:
0a:36:5e:db:89:e3:bf:09:84:8c:fe:a9:ab:21:b1:
f1:8f:09:e6:07:ee:91:64:20:74:77:34:d9:44:1e:
45:3a:2d:3a:10:46:ad:f8:95:9c:02:61:36:38:26:
62:2e:89:4d:76:66:60:14:91:92:46:90:31:ab:75:
4b:93:9d:ae:dc:e3:21:6d:34:d5:1d:16:8c:a9:65:
78:b6:be:1a:fe:36:84:9c:75:94:ec:2c:e1:45:90:
e0:da:51:d5:6c:27:e8:7c:ad:40:3e:a0:74:cb:d7:
4a:d6:4a:a3:b0:93:6e:de:5f:56:26:ea:95:6a:53:
ec:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:82:BF:99:99:2B:A6:17:A2:79:FB:65:96:C7:01:49:D5:4E:E3:11
X509v3 Authority Key Identifier:
keyid:AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9c:2f:79:36:1a:28:c8:34:54:11:21:f3:3a:1e:f3:08:50:
20:bf:82:36:0a:4e:f8:83:23:a2:f0:e9:2a:16:64:25:de:60:
75:2c:99:79:b9:fd:4c:86:45:f0:f9:ef:b2:d2:88:fd:1a:09:
ad:2a:1c:00:dc:af:8b:ed:a2:dc:cb:51:9d:76:a8:05:b6:2a:
aa:3f:91:6c:c6:96:60:08:93:c9:7a:22:93:83:62:ce:0c:9e:
c8:ac:f3:c6:31:f9:ba:90:91:b2:86:cb:d8:df:e9:31:b1:51:
fa:9e:29:93:e7:18:d4:e1:92:9b:d4:79:cd:91:f0:4e:f6:88:
63:3d:e1:8a:16:cd:2e:5b:83:2e:30:25:0e:22:a8:7f:c3:44:
d3:c0:e4:9d:fb:e1:24:b9:44:34:71:79:45:68:dd:5a:da:bf:
db:aa:4e:46:d2:4c:b1:8b:8a:4d:78:87:c3:25:e4:82:c3:17:
d7:9d:02:be:b6:5c:52:b9:c1:c5:ff:5e:a3:60:36:de:68:bf:
f0:a3:23:01:56:e4:ec:7e:a6:56:f8:01:a6:10:33:27:e7:46:
60:6f:ed:8e:55:97:d1:6a:bf:73:e5:00:8a:8a:4e:ee:b1:2e:
e4:1e:17:cf:d9:e6:89:ae:d7:8b:50:db:11:67:ec:78:95:60:
09:21:83:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:39 2026 by rpki-client