Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
File: RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft (raw, json)
Hash identifier: GSbIwA+lgqv4Mh4QyNJSdfU4vYak7yzo9SNzNEOfzH0=
Subject key identifier: BD:00:FA:D1:BF:5F:6C:C3:04:72:75:24:E9:00:B7:FA:1D:50:7A:B8
Authority key identifier: 44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
Certificate issuer: /CN=448ca39537597cfae60ae0421db8e098b4e26130
Certificate serial: 019D3865934650C33ED9432E1CFA6E73EE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:14 +0000
Manifest this update: Sun 29 Mar 2026 07:01:14 +0000
Manifest next update: Mon 30 Mar 2026 07:01:14 +0000
Files and hashes: 1: RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl (hash: XAwab19aPCUl8QHaMiSaXRPzuIRA5lkp/Y4blGJWeiA=)
2: UXnKo4Ey-1UOsTwsFxzecNca4ws.roa (hash: ilB1dCXfkW75QAbnFoJP+oitYYjAJLiYJ/zgOjFv/HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:93:46:50:c3:3e:d9:43:2e:1c:fa:6e:73:ee:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448ca39537597cfae60ae0421db8e098b4e26130
Validity
Not Before: Mar 29 07:01:14 2026 GMT
Not After : Mar 30 07:01:14 2026 GMT
Subject: CN=bd00fad1bf5f6cc304727524e900b7fa1d507ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:b0:15:ed:95:15:c3:56:ce:e4:b3:d1:ab:
67:38:97:dd:fc:6e:75:83:f6:f5:41:09:24:86:bc:
df:85:97:eb:27:f3:b3:73:ee:a2:39:51:42:8c:cc:
97:13:55:77:cd:4f:35:55:5c:62:a3:25:b6:d3:b9:
65:af:06:f2:9d:02:7e:c0:69:f5:ad:da:ce:72:75:
b1:6c:d0:d0:1f:1a:b0:e7:76:92:a2:fa:cf:39:9e:
1c:5b:80:8f:bb:42:04:2b:78:80:db:0f:13:c7:b8:
43:7b:80:be:8f:cb:43:45:44:ce:86:37:d7:f7:db:
07:5c:57:70:a4:1c:52:07:48:47:5b:31:5f:20:2a:
d2:5a:de:cc:20:e6:6e:ea:21:18:c6:d3:2a:9d:3f:
3d:cd:f0:6a:f4:e7:32:58:e8:d7:ca:d7:d0:b4:fe:
9f:b4:35:04:a2:bd:5c:19:38:f2:ed:1d:d1:bc:56:
e9:35:19:b3:f1:3d:0f:bf:c5:07:ae:38:8c:61:f6:
83:dc:7a:3a:92:da:47:44:87:70:51:49:75:ca:8f:
96:37:bb:40:80:6f:a9:c1:13:9a:6b:53:73:ed:f2:
3d:49:43:bd:9c:31:99:25:08:fe:0e:aa:34:c0:c5:
d3:69:93:ef:e1:b3:0f:87:bb:0c:20:0d:e7:24:46:
2b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:00:FA:D1:BF:5F:6C:C3:04:72:75:24:E9:00:B7:FA:1D:50:7A:B8
X509v3 Authority Key Identifier:
keyid:44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2d:92:9e:ee:65:fc:90:93:9b:4f:40:4d:07:0a:75:94:0a:
d0:e5:ad:00:1b:0f:09:65:98:d3:f7:9c:ea:20:d8:55:d3:23:
64:f9:63:3f:17:16:23:71:27:b2:6c:e2:b3:08:8a:4a:47:31:
c7:62:b7:14:2a:59:41:2c:2a:0f:62:05:96:71:8d:d1:d5:c9:
9d:53:84:e7:4a:95:0b:b1:72:19:d1:ca:18:1f:8d:ff:09:a7:
90:22:54:0b:a5:33:a5:8a:fe:a4:84:21:1e:4a:e8:d3:7f:cc:
17:6f:ec:cf:ab:fb:93:ee:1e:d8:26:33:d9:14:58:47:0d:c7:
00:ca:d2:22:bc:87:ae:28:22:80:90:36:4b:4f:95:a5:0b:25:
5c:43:b9:96:3d:a0:d1:fa:ff:b2:c6:21:0d:34:0b:ee:9c:a6:
b9:4e:d3:6f:70:00:24:e9:9d:03:e1:31:64:d2:fd:29:33:bb:
86:36:17:1c:31:76:b8:14:00:7d:a3:fb:c5:32:19:6a:0d:b9:
d4:e2:a6:ce:24:2b:38:c7:89:83:13:4d:c0:5f:1b:bd:7f:18:
07:14:e5:73:13:b6:28:ae:25:79:51:f3:ca:46:31:de:85:2d:
39:98:a7:7f:8e:4e:d8:dd:68:40:f7:92:73:5d:e8:69:11:c1:
6e:bb:3e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:11 2026 by rpki-client