Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier: yU+Kxl0S2Dl8DMhh+Ex+iiukBPVXIabKUmxKe1/ph5g=
Subject key identifier: B4:34:B6:84:BB:5D:B1:5C:CE:C8:CC:FC:2F:17:11:06:1C:FD:8C:96
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 019D382E60F88330E95EA5C9F6A9DF48BDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:56 +0000
Manifest this update: Sun 29 Mar 2026 06:00:56 +0000
Manifest next update: Mon 30 Mar 2026 06:00:56 +0000
Files and hashes: 1: GvNFYyBUTZVKqfxGJ29AQ8ybUOI.roa (hash: uZnUMOZEaipYyz6w+Q0CeYwOVjF6E1oqOIzqR9nYZ4k=)
2: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: L02pg/Wgvm3R+q3CRc9QQ06mgpbIjYTtAZkabyJ0QiE=)
3: nFyJiI2QEmXq35fuiG_EUZU-0Tw.roa (hash: cLxbEZlxAIqYS86le/aYrGcroGy0E1YAeKBMSi+G8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:60:f8:83:30:e9:5e:a5:c9:f6:a9:df:48:bd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Mar 29 06:00:56 2026 GMT
Not After : Mar 30 06:00:56 2026 GMT
Subject: CN=b434b684bb5db15ccec8ccfc2f1711061cfd8c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b5:80:ac:52:32:d6:ee:11:4f:7e:73:c6:7a:
1e:40:90:9a:e2:70:91:33:c1:fa:bf:8a:fa:e4:0b:
9d:05:06:f5:17:5c:e6:ad:b3:a8:b9:49:ed:2f:68:
d6:08:3f:33:67:10:b6:ee:2e:97:88:92:97:e9:bc:
0d:8a:3c:0f:2a:58:75:92:36:21:9f:b3:db:d7:b3:
19:4e:7f:8c:92:d8:5c:a2:ef:70:11:36:a8:92:f7:
47:fe:42:be:21:78:64:fe:db:5c:6b:33:5d:e2:64:
c3:23:3c:5e:b5:a1:18:b5:c9:85:12:0c:f4:6f:1c:
1a:67:cb:ac:c6:32:d2:15:ba:18:7b:e7:e9:ce:f3:
e0:b2:22:48:64:dc:64:8a:6e:6b:3f:50:ce:37:9c:
ee:d6:dd:ad:c8:fe:22:ac:55:10:07:64:23:c3:17:
a4:93:3c:94:b3:83:d2:a6:15:93:29:69:e8:ea:4f:
bd:7c:d2:35:17:eb:12:38:ea:a6:a4:55:da:e2:a2:
8a:37:c8:a6:99:0d:9f:cf:a7:ef:88:66:9d:fd:b7:
3d:29:08:31:74:5f:94:0e:80:de:f6:ad:d6:d3:2d:
da:06:f0:72:d2:85:6b:13:a5:af:71:2b:5f:7c:bd:
3e:ab:1a:4c:74:c4:81:0a:32:0d:df:69:cd:0a:c6:
74:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:34:B6:84:BB:5D:B1:5C:CE:C8:CC:FC:2F:17:11:06:1C:FD:8C:96
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:16:c7:14:0c:39:15:c3:b3:b3:97:f3:bb:95:46:df:b5:98:
be:3d:06:1b:19:50:74:49:8d:6b:d4:21:56:23:6c:06:e5:7e:
da:fc:2b:de:06:90:15:f0:ba:c3:f6:48:d7:27:fa:d9:64:22:
ee:94:d5:92:7a:ee:34:de:7e:88:d8:41:a4:59:f2:b2:55:78:
cf:1c:86:11:22:15:40:50:a3:00:61:02:21:4e:09:2d:86:01:
f0:a2:e1:e3:be:ce:fe:bb:9b:67:5f:2d:e8:75:33:cf:97:04:
f5:f6:7f:d8:07:d2:ff:6c:0c:8c:10:c7:ff:11:22:58:97:fb:
23:ff:71:c3:7f:7f:d4:12:7c:eb:d0:86:9d:73:6b:ca:a1:9a:
0b:cd:9f:e2:d2:e2:b6:b0:26:d0:a1:09:3f:d9:a7:fc:c7:dc:
50:84:65:d5:a0:57:e7:f2:77:fb:3d:36:20:73:37:01:53:f7:
45:a4:55:2e:86:c2:60:ae:1f:75:9a:73:20:b1:10:45:92:98:
91:ab:2c:3d:ec:51:e8:28:de:6e:43:ff:a3:61:5f:fc:15:e5:
32:c3:58:9c:8e:7d:41:e3:fa:40:18:aa:e2:9d:83:92:fa:45:
34:f2:03:31:07:b3:63:3f:e2:b9:52:a5:aa:cf:08:7a:36:2f:
87:ca:cf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:08 2026 by rpki-client