Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: xQEjM1qzFy7VrOzkGyt22uzeH9cNYr7CVrOjs/vJY54=
Subject key identifier: 07:E3:B8:68:57:B2:F6:3D:CA:E8:B4:89:54:C4:0A:E1:A3:FC:24:94
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 019CEE94A36497AEA22D280384EB24F0D957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 141F
Signing time: Sat 14 Mar 2026 23:00:44 +0000
Manifest this update: Sat 14 Mar 2026 23:00:44 +0000
Manifest next update: Sun 15 Mar 2026 23:00:44 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: 7WqMdviHSN6B9g5UAFIojmaE3OpObDNVdsQEo4ohTiY=)
2: G8RD2uK8jegsTsE-7XQ_nINovw8.roa (hash: bbRv59/fFxUF7NCQBw4VIduLszpjkq+XNByjPQilIdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ee:94:a3:64:97:ae:a2:2d:28:03:84:eb:24:f0:d9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: Mar 14 23:00:44 2026 GMT
Not After : Mar 15 23:00:44 2026 GMT
Subject: CN=07e3b86857b2f63dcae8b48954c40ae1a3fc2494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:a0:b2:18:c2:19:9e:27:c1:64:a3:fc:b3:
0b:eb:94:34:59:22:d2:49:fd:a4:f8:18:67:7b:3a:
1c:53:1a:87:da:8c:e4:b5:78:d7:28:e5:6c:de:1d:
85:7a:73:b1:38:ab:cf:a3:92:2c:0a:6b:9a:1b:bb:
af:4e:7c:cb:57:b2:f3:60:e5:ba:35:d3:9d:a1:a6:
c9:79:47:eb:1f:b3:b8:9b:1d:0a:66:c8:2e:ea:15:
64:11:0f:e7:0a:a8:81:b6:4d:38:2d:fd:40:ee:f0:
b1:0f:75:71:07:e0:b4:2d:4e:15:92:3a:6c:69:4a:
83:13:c8:61:22:16:0c:3e:17:a5:68:42:e2:e5:26:
6e:90:09:f5:52:92:f9:22:52:c1:79:99:60:ad:87:
c2:67:c8:a4:da:9f:19:49:74:3f:77:5b:f3:ba:2e:
10:d4:db:ce:9b:48:57:96:5e:50:95:bd:5e:11:99:
f3:6b:d3:41:30:93:2b:4a:1a:a6:86:f3:36:11:03:
1c:12:5d:89:54:61:49:9a:cd:90:95:12:85:0b:6e:
91:d5:54:9d:be:0a:b4:a4:1c:9c:cf:f7:02:e2:3a:
02:7c:09:7f:9f:16:5d:e9:9f:68:f2:1b:2c:76:0a:
73:3a:d6:a2:2a:c3:4b:00:d9:62:ba:53:f0:1c:5a:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E3:B8:68:57:B2:F6:3D:CA:E8:B4:89:54:C4:0A:E1:A3:FC:24:94
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fc:a1:61:02:b7:17:12:d5:c6:f1:49:07:77:6f:c5:85:19:
da:bd:32:b7:e4:d0:e5:fb:2a:57:7c:7b:7c:dd:ef:c3:f4:fb:
50:45:d3:37:2c:4a:88:78:13:9f:b8:8e:e7:0d:d6:d4:0d:fe:
0a:1d:2d:4d:1f:8a:2e:52:d8:af:b7:47:3f:85:67:7a:f3:37:
39:ef:25:e1:4f:ed:ad:69:96:b2:31:91:a1:14:ed:37:d7:73:
8f:df:e2:29:f5:5b:1c:19:7f:5c:ed:3f:a8:a3:be:10:d1:7d:
62:ac:37:d1:9a:cb:10:a0:a5:67:1f:d8:08:c9:68:fe:25:e8:
c2:33:62:82:31:32:3d:d6:70:b2:63:56:af:f4:e5:37:3d:49:
46:a3:ca:12:46:e1:43:41:8c:97:1a:99:51:a9:e1:50:47:9a:
66:e5:6b:c3:e0:b3:a5:67:59:ae:bd:bb:97:e1:56:13:0c:2a:
73:34:5a:74:36:73:3f:60:51:25:84:e4:98:3d:43:39:16:13:
80:68:18:9d:8b:6e:93:8a:82:33:52:e1:49:b3:c3:43:62:37:
c3:97:e5:04:74:9a:2a:1d:6d:d4:13:1a:6e:c6:81:09:ae:f7:
3b:c6:a3:2b:c9:24:a2:1c:16:8c:ff:ec:9b:ec:2f:51:2f:bd:
ed:8b:70:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 03:08:43 2026 by rpki-client