Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: YWnk80njFVuVq9R8O0OrkZqWL2qeH0IrPMJEn6sUx58=
Subject key identifier: 9C:EC:95:54:72:72:AD:FA:A1:0A:65:07:4E:31:62:1F:AA:18:D8:28
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 019D3941C9BCD6BDB2C21B9AED1BBF4C18C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:01:45 +0000
Manifest this update: Sun 29 Mar 2026 11:01:45 +0000
Manifest next update: Mon 30 Mar 2026 11:01:45 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: KQywQa9ziZcqxV+ST1SPTZCWFgZfFDnmADBsSyely8k=)
2: sGfgaW1LiewBhrOBJvsdriioaTU.roa (hash: op9iNN949E3VNzRYyQTY+5GgLdt3CTSRD0WZrCE+fbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:c9:bc:d6:bd:b2:c2:1b:9a:ed:1b:bf:4c:18:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Mar 29 11:01:45 2026 GMT
Not After : Mar 30 11:01:45 2026 GMT
Subject: CN=9cec95547272adfaa10a65074e31621faa18d828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:94:2e:ed:86:94:d6:00:90:4a:1e:f7:3e:
0e:f3:86:e7:1d:1a:0e:d6:bf:0c:78:5a:f7:cd:e7:
2e:26:8b:99:15:bf:de:96:44:fc:01:ee:b5:4c:3d:
df:5c:6f:21:da:b4:f3:ac:37:46:6b:45:04:57:d4:
ac:82:37:67:ae:b6:99:16:39:f6:09:23:ae:e0:b0:
9f:1e:37:03:f1:95:4e:04:8c:e9:01:06:aa:5c:28:
ed:e3:51:74:ad:41:09:a2:fc:df:98:66:91:24:60:
be:f1:36:28:b7:f5:03:61:91:ac:4a:2d:42:67:62:
87:02:2d:2e:d5:e1:14:9f:11:98:39:05:4d:5d:29:
88:a5:3f:dd:0a:7e:3a:46:3d:56:77:2b:8d:48:a2:
3a:a1:b2:10:e0:d1:bc:52:2b:d6:02:8a:c9:3e:2c:
15:9c:ca:21:57:85:4b:9f:79:a3:da:f5:3a:57:d3:
67:be:77:cf:9c:76:e7:6a:c7:f0:46:ce:7a:ef:01:
71:67:76:b2:a3:75:4e:ce:27:a6:9a:8c:50:49:9d:
ca:8d:ad:fb:d9:d4:a1:c0:a9:8b:02:44:f6:b5:a7:
d2:8e:11:28:c8:47:d0:66:5e:b5:f1:9c:7d:29:fb:
0b:aa:83:bc:0c:01:0f:1d:21:6c:0b:40:ba:67:27:
2a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EC:95:54:72:72:AD:FA:A1:0A:65:07:4E:31:62:1F:AA:18:D8:28
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4e:be:b6:90:44:31:15:cf:a6:97:32:06:65:e5:4c:56:92:
50:e1:58:18:e2:5a:10:9c:80:d0:ad:57:fc:5d:46:89:4c:87:
d6:84:0b:66:74:df:65:67:15:6d:c2:80:dd:36:2d:8c:41:26:
66:5d:14:74:16:cb:7e:a6:2b:6b:d2:1e:14:3a:5c:ef:0a:5f:
be:09:e3:e2:9f:da:83:76:c7:09:75:0e:f1:6d:f2:72:ec:4b:
89:98:f8:f5:80:09:e8:65:fa:c1:98:08:a0:35:b3:9f:35:74:
12:45:dc:53:04:d2:51:7a:ba:c2:7f:c9:36:5d:71:71:4c:60:
11:3a:1b:53:01:b6:88:1b:09:cb:e8:72:1b:99:92:a3:a0:a4:
15:85:ad:ec:22:59:2a:cd:c0:69:a5:6b:f9:4b:48:d9:32:fc:
0a:b5:27:2a:6f:08:f8:ec:2d:fd:8c:53:41:40:28:23:15:c6:
8f:28:7e:f9:75:b1:1a:a6:9b:14:cf:10:6e:62:d2:77:8d:34:
94:a5:cb:39:58:68:44:0c:78:b1:76:c0:e1:a8:35:16:ea:94:
54:73:c4:98:66:53:53:7b:bc:a4:69:26:ff:e7:10:d4:f9:da:
bc:5c:4d:f8:cd:6d:6d:c4:ec:8e:66:70:f1:f4:ca:8a:5c:a8:
0a:83:24:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:25 2026 by rpki-client