Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier: rYTSLWB0K2DWIbYYM9JGTLjSqEtO3UKXnikd+uD+iCs=
Subject key identifier: 02:FF:1D:C3:B7:28:A7:07:93:71:48:1E:05:E8:FF:BE:68:B9:22:12
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer: /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial: 019D0C680F24CB8A3D302C1A91060677ACC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number: 187C
Signing time: Fri 20 Mar 2026 18:00:39 +0000
Manifest this update: Fri 20 Mar 2026 18:00:39 +0000
Manifest next update: Sat 21 Mar 2026 18:00:39 +0000
Files and hashes: 1: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: Tc3DYni7nrzAshrKmKquALCWxzNWRwq+jOXqu5i85gk=)
2: ffUc8_MFuN5GuGa6IoP-AwjDMng.roa (hash: KNgb7b/tPa4J6bvxUtY9aR+BXwQn3PEB0DvOOi2I63k=)
3: sM3tnsiZQn2B9YY5mcbZ8QMKhas.asa (hash: 8b+A4QTkJNsWBcHqmtMFMLgJOAkXA+/IFEAZETTjwiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:68:0f:24:cb:8a:3d:30:2c:1a:91:06:06:77:ac:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Validity
Not Before: Mar 20 18:00:39 2026 GMT
Not After : Mar 21 18:00:39 2026 GMT
Subject: CN=02ff1dc3b728a7079371481e05e8ffbe68b92212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:97:14:67:7a:49:fe:cd:8f:d4:ab:44:24:
27:11:6e:21:61:86:2c:6e:ec:18:91:28:22:f4:43:
b7:2d:4a:ad:fa:03:4f:fb:b7:04:9f:8e:61:ce:d7:
73:ab:50:b3:3e:cd:ab:e2:b4:70:5a:09:2a:3d:54:
90:47:bc:f4:59:cd:92:eb:36:ba:ea:4a:7f:ca:33:
ed:a7:64:c9:2e:fb:ea:ae:62:b5:be:de:f8:18:db:
12:6c:5d:01:07:4e:b5:66:02:5b:a9:87:49:fb:0a:
66:2e:86:65:7b:14:28:76:75:08:fd:25:c0:bd:4a:
49:1e:11:33:78:aa:db:49:f9:2a:ae:c9:f9:ba:a8:
18:e5:f5:75:4c:a4:1a:35:d4:85:b1:8b:47:61:0e:
d6:db:34:83:7f:1f:77:32:23:d8:f8:30:24:a3:3c:
aa:24:6e:c4:56:b3:30:8e:03:07:1f:eb:ee:45:ae:
77:bd:74:14:40:08:39:0d:b2:9b:e3:4b:fa:61:65:
e6:67:23:7a:c7:5b:2d:e4:16:f7:2f:13:3f:bf:f2:
06:1c:f3:5d:5a:00:68:fd:f9:8c:78:53:19:b5:cd:
94:99:9d:e1:c9:d0:61:8d:40:05:65:a8:8e:e5:fd:
29:06:84:61:dc:1c:c3:1d:33:86:0f:9e:d5:90:aa:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FF:1D:C3:B7:28:A7:07:93:71:48:1E:05:E8:FF:BE:68:B9:22:12
X509v3 Authority Key Identifier:
keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ef:b4:d7:d9:5a:53:32:cf:64:0c:a7:1b:42:59:4e:d7:c5:
3a:e8:ea:1a:23:19:8f:58:14:ef:68:4c:c2:1a:ed:59:c7:f4:
75:60:9b:42:3d:0e:25:6d:fc:24:f1:3d:84:ee:cd:23:bf:26:
67:8b:b3:e4:f7:0a:94:45:e0:2c:a4:d7:ac:33:b4:31:31:01:
3f:ea:6c:64:66:81:10:95:02:64:3f:9e:7c:8c:0c:47:84:01:
cd:aa:88:cc:8b:a7:8d:47:08:a4:ac:b4:da:61:ee:69:01:ba:
51:9a:6d:cc:4d:18:87:bc:6b:fc:34:91:ca:d2:f8:26:ac:3d:
37:54:7f:8c:64:85:46:fb:24:08:a8:c4:c4:44:43:3a:a4:b4:
cb:7c:10:9c:29:de:c3:60:17:9d:5d:e4:4a:70:69:1a:f8:78:
7a:47:78:0b:b0:a0:25:e0:d2:30:50:d6:87:dc:69:28:d9:7f:
e3:20:b8:38:74:9e:7b:42:e3:98:e1:1f:74:68:5b:3f:a7:29:
d0:9c:48:81:60:e8:08:ea:4f:5a:fe:66:49:a4:c0:4e:9d:e4:
bc:75:56:ea:de:28:5a:56:d5:ad:ba:11:99:4e:8e:2a:e5:70:
34:41:89:05:bb:59:d2:2a:4c:d3:9d:e4:e7:83:e7:aa:d7:64:
67:6c:93:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 22:45:58 2026 by rpki-client