Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
File: d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft (raw, json)
Hash identifier: FVpatC/rGsWZQjCWX/iAEUtGp2emVDahmJ+JEnQ+41w=
Subject key identifier: AE:F6:B2:60:B7:BA:B9:EB:A0:DA:DB:E6:9A:24:08:44:36:30:04:EC
Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
Certificate issuer: /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Certificate serial: 019CABD99300E5FB8A515E6AB329ED1FB689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:28 +0000
Manifest this update: Mon 02 Mar 2026 00:01:28 +0000
Manifest next update: Tue 03 Mar 2026 00:01:28 +0000
Files and hashes: 1: GdUUpV1tSpa6dExv6OdPOPN3bMo.roa (hash: JEBXOLiUs8+kGojQx9pRr2R8TcsHWxkp8T4KQDmx6n8=)
2: d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl (hash: efz+B53WcxpSjG0WtR3kymObq5z3OR8pZXBG3Jt7p4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:93:00:e5:fb:8a:51:5e:6a:b3:29:ed:1f:b6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Validity
Not Before: Mar 2 00:01:28 2026 GMT
Not After : Mar 3 00:01:28 2026 GMT
Subject: CN=aef6b260b7bab9eba0dadbe69a240844363004ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:23:5d:2f:02:3f:58:56:56:d9:f8:29:6f:
dc:8a:38:da:73:ae:b1:44:54:83:bb:e8:91:84:8a:
35:08:ac:3f:af:bb:c0:81:af:6b:b8:5d:a7:1f:91:
08:ff:06:c4:7a:51:6b:1e:1e:fe:15:1a:1c:f6:45:
21:8b:fa:4a:65:fc:3f:5d:43:fc:da:62:44:9d:a2:
75:db:7a:b2:57:99:4b:4f:d7:b2:ed:2f:7d:80:b4:
a5:4d:72:5c:98:a9:41:4e:d9:44:36:94:55:e5:4f:
55:cd:ec:18:56:05:21:49:16:1d:29:c8:62:8e:bd:
6a:4e:46:70:00:70:83:f0:24:07:3e:ce:4f:a6:aa:
4d:c5:79:92:ba:ec:fd:94:b4:b4:48:09:2b:a2:d8:
6d:1f:b1:6f:82:e6:10:c1:f4:14:5d:84:85:1a:db:
79:c3:09:d9:b1:c6:84:fa:87:25:6f:f6:34:27:56:
00:12:88:69:5b:64:c9:9e:a6:78:4e:71:ab:33:12:
b7:df:6d:d0:37:16:4c:f3:dd:b9:65:2c:3b:36:35:
ed:b1:4a:a8:6b:19:41:18:3e:f7:ed:56:cc:47:9a:
a6:bd:ff:0d:ae:45:67:7b:67:6a:08:56:cf:90:6e:
2d:f8:d6:82:80:99:37:43:17:e9:23:b9:b8:b2:1c:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F6:B2:60:B7:BA:B9:EB:A0:DA:DB:E6:9A:24:08:44:36:30:04:EC
X509v3 Authority Key Identifier:
keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:06:2c:be:d3:59:00:14:ef:aa:02:63:ac:a5:fb:c4:a4:85:
fb:de:61:af:72:e7:21:8d:6f:84:87:16:1f:64:ce:e8:30:73:
de:4a:73:64:db:7e:23:ff:80:ae:6c:9d:ba:3d:fe:dc:a2:f9:
ad:dd:d2:cb:40:30:f3:ea:d9:01:80:2d:04:6d:66:89:1c:0b:
6e:9c:5c:3b:fb:cd:07:88:a2:34:c6:d9:3a:08:50:e5:17:06:
17:89:e5:95:78:61:de:c3:2d:10:0c:3c:e9:8a:28:38:a2:82:
92:fc:b3:4d:8a:24:31:34:fa:01:38:d3:bc:0b:4a:bb:06:39:
44:30:08:f4:d7:30:4d:c7:e0:61:7c:c8:a2:cc:6f:50:f1:3e:
93:a2:8a:f0:af:14:fd:10:93:60:3e:68:41:6a:b3:89:d0:ad:
86:fa:2e:70:e1:85:c4:0a:32:91:f0:6d:2a:91:79:59:1c:86:
ef:a2:53:d6:77:2e:8b:16:37:b1:8a:8a:56:c8:e0:48:82:ec:
9b:af:5b:87:cd:26:2b:65:2d:7e:91:5a:ef:f8:9e:38:70:77:
b1:db:c6:85:6c:7f:16:11:c5:c7:39:6d:ee:a4:e7:5a:3c:98:
df:a9:fd:04:43:7b:16:a1:6c:73:f0:39:59:a5:1a:ff:93:eb:
b7:7f:70:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:27 2026 by rpki-client