Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
File: In6Vgaaaz4EZMg4TeYV6UTvSONs.mft (raw, json)
Hash identifier: +4Yn5Mzj8s/fnFkMvf9uKJzQ0E2nqmVKdsJ4snyr4Ig=
Subject key identifier: 8C:15:F1:01:21:02:4B:BC:4E:4A:1B:0E:0F:BC:F6:0C:C4:24:BE:2B
Authority key identifier: 22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
Certificate issuer: /CN=227e9581a69acf8119320e1379857a513bd238db
Certificate serial: 019D37525F71B10E6BDAE722A3BD4C6ECA31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:00:38 +0000
Manifest this update: Sun 29 Mar 2026 02:00:38 +0000
Manifest next update: Mon 30 Mar 2026 02:00:38 +0000
Files and hashes: 1: In6Vgaaaz4EZMg4TeYV6UTvSONs.crl (hash: czna6C7VbZd3IMqjS95HpCVlS8z2cZnF5IEM3UWLOtE=)
2: mscwxPZcPbLJOKy1J-8IvjK-dMA.roa (hash: SehCRKbcK0pMfEDJLBg+4FVLJTa+tBwqRk0UywbNktM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:5f:71:b1:0e:6b:da:e7:22:a3:bd:4c:6e:ca:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227e9581a69acf8119320e1379857a513bd238db
Validity
Not Before: Mar 29 02:00:38 2026 GMT
Not After : Mar 30 02:00:38 2026 GMT
Subject: CN=8c15f10121024bbc4e4a1b0e0fbcf60cc424be2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:30:04:9a:7a:e3:2e:a7:a9:63:a2:40:20:
f7:e7:71:0c:fd:22:2b:34:62:70:0b:34:4f:b3:75:
af:41:a5:d0:15:41:ba:f8:04:b6:3e:6a:23:9b:6e:
17:3c:b8:ab:2f:c3:c9:47:5e:99:61:8a:04:44:39:
41:84:c7:fc:3d:e0:12:a8:6e:8a:d7:b1:3c:05:bc:
08:5e:f3:91:5c:45:40:cc:c6:b3:c2:a5:aa:56:e1:
77:4c:49:20:ea:4a:68:a8:5a:8e:89:82:2d:6b:ba:
ed:fa:eb:5d:70:81:18:21:b4:53:b5:6c:13:0e:60:
88:65:38:09:fb:aa:e6:79:4f:0f:0c:50:8a:a6:20:
47:1c:53:9a:75:20:38:c2:08:f3:ee:c7:af:fd:ba:
1f:64:7e:3f:40:13:6b:a6:a3:1b:52:4d:62:10:3e:
a4:0a:d6:4a:16:3b:10:8f:70:6d:ee:80:3b:5c:74:
4e:c3:b0:31:94:48:bd:d7:c1:ae:d2:39:7d:a5:6d:
92:f4:21:9d:18:f1:77:a1:76:fb:83:34:9b:13:68:
dd:81:e5:87:17:6b:c5:17:a3:fc:93:77:74:15:41:
07:6e:6f:5c:de:90:36:0a:f0:4e:fb:0c:e3:60:a4:
11:83:61:0d:b1:af:14:11:b3:6d:54:54:24:ed:60:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:15:F1:01:21:02:4B:BC:4E:4A:1B:0E:0F:BC:F6:0C:C4:24:BE:2B
X509v3 Authority Key Identifier:
keyid:22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:43:86:2f:21:36:da:d3:36:30:b3:6f:32:3a:19:26:9f:f1:
51:f6:b9:56:56:90:0c:f4:09:8a:b8:1f:ab:71:3a:66:95:b4:
7f:0f:0b:ee:4b:03:27:7f:cf:87:8c:00:fd:4d:13:62:47:83:
03:5f:7c:fe:62:2e:9e:9a:a9:b1:fc:c4:ef:e6:08:e2:26:4e:
d3:c2:6e:8d:35:80:fc:71:43:bb:45:31:5d:4a:71:31:f7:6c:
43:d8:89:28:38:d0:c4:84:85:b6:80:e8:f0:0c:98:0f:b8:91:
fd:92:fd:12:f1:cb:be:44:23:92:1c:d4:c1:a3:14:1a:1e:6e:
ba:88:ae:f6:fb:81:4e:9f:f3:06:58:bb:f1:48:97:30:78:ab:
23:e0:a6:e8:6e:58:ef:55:04:2d:eb:36:12:02:9e:59:44:57:
df:00:d2:c2:d2:fa:43:99:3c:ba:6b:30:b9:14:7a:f6:27:87:
df:d9:bc:15:0c:af:7f:9b:46:2c:8f:6a:d5:33:c9:10:0e:9b:
20:c2:00:ca:12:bb:e4:f3:d0:e7:25:49:c2:da:7b:a9:39:0f:
e9:95:f4:12:f1:34:c5:03:96:2e:c9:f9:4f:fb:9e:d0:a3:3d:
38:c7:8e:93:a0:10:5b:ad:f8:33:a5:c6:f0:c7:87:cf:5a:82:
0c:93:39:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:56 2026 by rpki-client