Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier: whmkoaNQd7ZTeOXHxLTGQ8ACrSVoKW4z2LpFOTAl5XM=
Subject key identifier: 47:3A:C4:FE:CD:60:7D:3F:98:88:7D:5C:3A:90:D7:1C:BF:8E:10:A7
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 019D37C128E3CD7E1B02ABA93263B2838F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:38 +0000
Manifest this update: Sun 29 Mar 2026 04:01:38 +0000
Manifest next update: Mon 30 Mar 2026 04:01:38 +0000
Files and hashes: 1: hRQCi57thYOlY1i0Di_3OEU8RbI.roa (hash: CiJ/s78ir+15MqFOT5aaVIhr5Aw/xJZZ/G08VuU4cSs=)
2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: tHFi3JcDAZySW3M434LWitXNAvr4SmLr8+JEQvdu76A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:28:e3:cd:7e:1b:02:ab:a9:32:63:b2:83:8f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: Mar 29 04:01:38 2026 GMT
Not After : Mar 30 04:01:38 2026 GMT
Subject: CN=473ac4fecd607d3f98887d5c3a90d71cbf8e10a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:7a:8d:96:bb:34:86:ca:42:0a:71:e9:69:
b6:3a:84:24:b2:d4:f4:f5:87:ba:d6:42:41:3e:c3:
c7:9b:42:f1:a3:01:74:90:55:f6:a1:06:96:c0:4b:
ca:b7:d4:eb:03:5e:40:9d:4c:dd:64:ec:23:ac:e1:
49:af:49:16:34:77:a1:67:e5:77:72:51:ca:9d:52:
0e:11:99:16:5c:2c:22:b8:d3:a3:e4:7e:0a:f2:6a:
78:24:98:5b:8b:54:b1:96:77:88:3a:0d:65:ae:eb:
10:a8:90:b6:db:c7:0a:1a:00:94:bb:d1:30:c8:eb:
3f:fa:83:f4:bf:64:24:e0:db:5f:76:e6:d5:14:ed:
d7:3b:a3:b7:de:c0:4c:55:7a:c5:a7:cc:a7:b5:ea:
9d:c0:73:52:68:64:5d:af:24:93:75:b1:33:4a:a8:
31:f1:26:f0:dd:79:92:15:42:b9:45:a1:b7:be:47:
9b:29:03:9e:73:7c:e8:e8:01:a5:74:ef:c2:b4:e0:
a5:0d:05:45:0f:4f:68:37:0e:30:43:f3:49:dc:d5:
ba:9f:02:95:73:ab:cd:3b:90:59:12:f7:33:4d:f7:
fc:41:ef:00:60:eb:f6:e7:eb:fd:62:22:fa:21:52:
75:a4:42:78:b9:1a:ef:eb:f5:ce:65:7c:2d:59:48:
ab:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3A:C4:FE:CD:60:7D:3F:98:88:7D:5C:3A:90:D7:1C:BF:8E:10:A7
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b3:50:67:85:a9:6a:2f:6c:0d:dd:79:e0:88:2c:4a:93:e3:
9a:43:14:31:ca:fb:a7:2a:68:30:60:1f:c2:cf:04:b4:02:42:
2c:54:bd:5c:3a:02:47:11:39:f3:d1:d2:d1:13:63:cb:e0:93:
9d:01:7c:0c:c6:1a:2f:d0:ee:84:20:0e:b1:b0:cb:6b:5a:0d:
3a:1a:a8:fc:4d:95:40:d2:22:3f:41:a0:65:a8:2e:af:00:4d:
fb:86:6a:42:a5:bb:6a:dc:cf:56:6a:41:08:40:d7:f6:15:d7:
79:10:bc:d5:b2:12:a2:fc:ac:d5:91:29:9d:30:3d:e8:c8:64:
0b:aa:b3:54:dc:17:56:88:0a:9f:50:72:bc:22:1b:1c:4d:ac:
9d:7c:98:e6:cf:23:b6:e1:b7:44:d3:22:6c:92:55:48:3e:9a:
54:de:22:72:73:34:f1:c6:b7:b0:12:e3:50:45:49:21:c9:70:
1d:29:04:ff:a7:21:1a:98:68:88:3e:78:a4:01:86:cc:18:12:
45:c4:ab:8d:7e:58:32:8d:85:56:e9:8a:99:d5:5f:b2:49:ef:
05:a4:b6:0d:55:e9:6b:08:dd:4e:8c:bb:38:b9:25:cd:18:da:
3c:65:d4:9c:75:ae:9a:c4:f0:4c:ce:42:d2:71:3c:41:64:0c:
80:7b:04:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:05 2026 by rpki-client