Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
File: rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json)
Hash identifier: 70cpR/ju5LADNRqmMTUDe1f+vKHv2slmef85R30KAAA=
Subject key identifier: 64:2C:29:78:A6:52:E7:FD:A6:D2:D9:6F:0A:CE:B3:E3:74:59:83:82
Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
Certificate issuer: /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Certificate serial: 019D3940825CF772674115BDB269BF52D2C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 11:00:22 +0000
Manifest this update: Sun 29 Mar 2026 11:00:22 +0000
Manifest next update: Mon 30 Mar 2026 11:00:22 +0000
Files and hashes: 1: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: PT6EduSSgf11acIb1jZJdtBTcwFMeaU75OZSi4vKxUA=)
2: zilAvi0gPY9JFc-GVd3-_608WgE.roa (hash: ZyVYNr8SF0SGWYnff8EK2MHWbU5TL3VAzX0qJ7R6ce0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:82:5c:f7:72:67:41:15:bd:b2:69:bf:52:d2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Validity
Not Before: Mar 29 11:00:22 2026 GMT
Not After : Mar 30 11:00:22 2026 GMT
Subject: CN=642c2978a652e7fda6d2d96f0aceb3e374598382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:6c:5f:83:52:16:38:9e:d1:c3:de:92:96:
78:e3:6e:79:74:44:5c:26:50:12:cd:57:59:aa:24:
3b:40:b5:88:b0:3b:dc:ef:41:ae:fb:71:98:b7:72:
4e:38:65:62:19:12:69:94:d9:95:0f:09:e5:9e:37:
4c:56:91:2f:d5:e3:ef:02:01:90:3a:8a:10:6a:98:
16:6f:88:c1:b2:3c:eb:09:83:56:0c:41:87:14:89:
94:42:e5:8b:7b:52:66:9a:40:3f:c6:1e:9c:57:3e:
53:fc:c0:cf:56:4a:9c:80:8b:76:fd:95:b5:0b:cf:
ec:4a:12:20:79:ef:78:00:35:c0:d8:f7:37:a2:87:
8e:98:5d:a0:01:b8:e6:9b:d6:a3:90:10:35:f0:ed:
0e:27:29:fc:09:36:f3:2f:21:4b:2e:bd:f1:ed:b6:
8a:9f:4d:1b:61:b9:41:66:6e:27:53:eb:58:da:0f:
0d:02:44:44:44:c7:f0:db:78:3c:2d:dd:e8:49:ee:
bb:bb:36:8f:7e:51:2e:b8:41:35:aa:33:a3:fc:7b:
32:df:08:9d:22:6d:2d:50:4b:42:d9:16:6a:09:5b:
4c:d5:8e:0a:bc:9e:4e:39:1c:30:86:37:8f:4a:d5:
72:44:92:fe:dc:5e:22:53:1c:4b:b7:c1:51:4f:e3:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2C:29:78:A6:52:E7:FD:A6:D2:D9:6F:0A:CE:B3:E3:74:59:83:82
X509v3 Authority Key Identifier:
keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c8:df:70:ef:39:ea:57:bd:ac:fd:34:15:d4:17:26:3d:a8:
83:f4:6e:13:41:c8:a7:e8:9c:95:0f:d1:15:ad:7f:89:f1:21:
8b:6d:4f:be:18:f3:b1:70:af:33:c5:0c:d8:e1:56:ed:02:51:
2c:df:fe:40:2e:72:5f:eb:f5:01:c2:c0:0f:a1:f1:54:fe:c8:
51:2e:d2:75:d4:b5:a6:5e:b3:5c:cb:fd:ce:00:79:c9:ca:4b:
d5:a5:bc:7e:ef:a6:37:f9:96:52:d8:96:07:a7:f1:21:68:e1:
c6:0b:29:90:c3:2b:98:ca:29:f6:4d:f1:70:83:e7:c8:ef:64:
17:97:a7:ff:3b:55:8d:dc:a5:6b:83:69:35:83:48:ed:92:1f:
31:75:b3:7a:a9:4f:fd:97:92:ec:0e:3d:80:d0:68:e3:e4:1a:
24:75:de:e5:cd:be:15:0e:ac:82:54:f5:fd:1e:a1:c7:ff:54:
1c:66:b9:24:46:18:8d:8a:86:f4:26:4a:f9:a9:23:a3:47:eb:
7d:ea:7c:08:bd:14:a9:81:41:47:f4:0f:69:83:cf:fc:92:88:
3e:03:7d:68:fb:ba:4f:9b:37:9f:f0:9a:cc:ee:7f:79:1b:ae:
62:a9:7e:ae:e7:7c:92:d0:da:2b:f3:57:8f:4a:0e:ac:12:bc:
a2:a2:fc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:44 2026 by rpki-client