Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
File: 19sTK0fI7dg_7QLVYedQYEwgsfg.mft (raw, json)
Hash identifier: KltsLuTd5UVBEGXYa8OEywPaUxxj7hCe7BBQ/jB5sKI=
Subject key identifier: 2D:CC:15:95:BC:BA:C0:83:2D:9B:71:CA:85:31:C1:E7:97:62:9F:BE
Authority key identifier: D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8
Certificate issuer: /CN=d7db132b47c8edd83fed02d561e750604c20b1f8
Certificate serial: 019D37C042C0BD4383AA4F3D03A876FC3520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
Manifest number: 0BAC
Signing time: Sun 29 Mar 2026 04:00:40 +0000
Manifest this update: Sun 29 Mar 2026 04:00:40 +0000
Manifest next update: Mon 30 Mar 2026 04:00:40 +0000
Files and hashes: 1: 19sTK0fI7dg_7QLVYedQYEwgsfg.crl (hash: j4UBMC8K8tiiri4X9iHye/MOKQ+rcVmAZjvW5xE+Im8=)
2: mVHhVBL3b2rgETZb9_1hmIJtYoQ.roa (hash: UVnquJ+GGNXvnJEV311l0LcTpr92LD6i72Q9lhofEe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:42:c0:bd:43:83:aa:4f:3d:03:a8:76:fc:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7db132b47c8edd83fed02d561e750604c20b1f8
Validity
Not Before: Mar 29 04:00:40 2026 GMT
Not After : Mar 30 04:00:40 2026 GMT
Subject: CN=2dcc1595bcbac0832d9b71ca8531c1e797629fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:79:b9:08:64:99:6c:6b:2f:8c:2f:fd:81:
22:3f:0c:72:d7:f4:3b:dc:77:f6:f3:d2:95:5d:16:
78:d0:ac:8a:fd:ff:63:48:05:b2:34:9e:28:90:13:
b4:72:4a:c3:f8:c9:7f:09:9b:bf:36:1a:22:c6:50:
32:1e:a0:ce:76:4f:65:85:0a:23:c9:01:f0:bd:d7:
5e:77:5d:40:56:01:a7:c3:15:b3:b3:75:5d:89:ed:
a9:89:0f:5b:5e:05:05:fc:56:52:b3:6e:82:01:e5:
18:47:fc:1e:9d:c0:a1:82:b0:f5:bd:4a:32:7d:8a:
e6:ab:0b:ea:d1:1f:79:6b:84:fc:f8:e4:db:2a:b8:
11:2c:3d:d6:2d:3a:03:6c:db:2f:f5:c1:28:e7:2f:
2c:47:59:e9:c9:20:72:2b:51:e7:68:43:24:ba:60:
1d:5e:89:37:df:0e:e9:de:ba:02:95:8c:3c:ae:4f:
99:a6:a9:2d:e2:2b:c1:bf:bb:be:a8:67:11:9b:d4:
f5:b0:2a:fe:e1:75:ee:9c:dd:15:83:0b:4b:ea:04:
23:f2:c5:39:6f:fb:41:18:5e:c1:71:67:17:7d:39:
dc:72:7f:eb:6e:8a:e6:e1:b2:ef:52:b8:ec:84:b3:
f8:61:6a:71:63:82:4b:c6:80:be:e6:d2:23:40:ff:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CC:15:95:BC:BA:C0:83:2D:9B:71:CA:85:31:C1:E7:97:62:9F:BE
X509v3 Authority Key Identifier:
keyid:D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:82:4c:b1:70:74:17:8a:ee:eb:74:26:3b:98:79:3b:16:13:
f8:62:a3:6e:03:13:01:1a:db:1f:dc:49:6f:5f:a1:52:1e:67:
a9:07:23:cd:ae:5c:5e:cd:4d:d1:4e:0e:5f:61:ec:41:aa:d9:
52:2f:0a:9b:bf:bc:e4:b0:93:a9:84:70:a8:bb:83:3e:5c:0b:
01:a6:59:d9:d2:61:13:d1:1e:a8:f6:f0:52:73:4f:5e:1b:8b:
11:d2:4b:c3:12:8e:85:de:c5:01:89:52:24:27:5a:cf:dc:78:
fc:13:a9:ce:7f:23:38:ae:6f:73:b1:ed:97:b4:00:cc:a0:f1:
4b:93:14:46:9e:de:f7:64:6c:0c:c0:25:0a:60:fb:d0:04:a3:
25:9e:28:5b:29:62:19:52:0a:a9:32:b1:f1:3c:36:04:36:12:
e6:e2:a1:de:93:da:fe:a7:d1:68:dd:98:d7:0c:31:97:b1:c9:
a7:c3:61:ca:e0:22:70:bd:c1:14:9e:80:82:69:d5:56:19:d1:
f1:31:ec:87:5d:7e:28:37:8c:e3:be:3e:9a:ce:58:34:56:44:
22:50:19:a9:24:af:fe:f5:9e:e2:4e:f5:72:ea:86:02:be:b8:
0b:43:ae:a9:ee:a9:0c:0b:1d:42:af:d5:36:63:b1:43:93:c5:
c2:c4:7d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:59 2026 by rpki-client