Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier: 1NkgHliPc28rUsR2b7ypCQigfb0KBswAm8R2K/PDHYQ=
Subject key identifier: F2:EF:6E:7F:02:9D:FF:C0:93:92:22:AE:28:F1:F0:B4:63:92:15:B9
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 019CAB34513483033D4ED83FD13032C082E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:58 +0000
Manifest this update: Sun 01 Mar 2026 21:00:58 +0000
Manifest next update: Mon 02 Mar 2026 21:00:58 +0000
Files and hashes: 1: P_jLMjRudiodEgP9kGrX8xlbrMY.roa (hash: pHZFqcdySsOo+3kqKRPv2p7vAXOUuXEA4zp+BKSFMns=)
2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: cYkhr/UY4tmmCLGNMRuZirGGwC2c1IH50cP51zmExHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:51:34:83:03:3d:4e:d8:3f:d1:30:32:c0:82:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: Mar 1 21:00:58 2026 GMT
Not After : Mar 2 21:00:58 2026 GMT
Subject: CN=f2ef6e7f029dffc0939222ae28f1f0b4639215b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:43:c4:0f:1b:7e:3e:c3:90:ac:e9:4f:54:
1c:ae:4e:99:71:e1:88:95:2d:08:27:22:75:81:0a:
8d:b8:25:1b:94:59:02:23:e7:8f:15:44:fc:9b:ae:
d0:98:dc:90:db:81:3a:a4:e3:c8:ee:db:1b:67:7a:
75:0d:99:6e:bf:06:eb:af:91:61:0c:22:c1:36:9c:
4b:cf:2c:11:19:21:a7:e6:54:12:0a:e2:ec:62:75:
eb:a9:38:be:1f:b3:ed:9d:a1:32:df:72:fb:c4:75:
a2:9c:7e:59:47:dd:b1:6a:56:e3:64:fc:73:c6:1d:
4e:c3:f7:b1:72:40:04:4b:c2:34:88:af:03:13:f4:
85:7b:b8:7a:5f:a6:f4:58:ec:97:e9:93:dc:ad:f9:
b2:fe:da:6a:ca:96:ee:1f:0d:2e:55:97:e3:43:c2:
02:d0:d7:a3:34:60:f8:7b:45:f5:d5:7c:5c:72:b9:
a2:2c:0b:40:03:b9:a3:87:ac:62:fd:f9:dd:28:f5:
e4:2d:c8:20:13:36:38:e0:08:88:a1:36:73:6c:cd:
0b:cf:c8:7b:43:b7:70:f8:e1:4c:15:9f:22:81:4c:
ca:5e:d6:00:8c:41:84:4f:e3:7b:c2:b5:05:d4:7e:
9a:09:df:ce:55:02:57:b0:3e:40:9b:eb:a0:ed:35:
66:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EF:6E:7F:02:9D:FF:C0:93:92:22:AE:28:F1:F0:B4:63:92:15:B9
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:76:78:ae:6d:6a:67:8e:dc:12:2a:c3:ee:00:3b:bf:19:44:
71:07:af:2b:74:ee:c6:38:71:7c:dc:e6:a9:5f:f8:6c:55:ad:
a1:fd:58:62:ab:c2:2a:25:1d:f1:f8:1b:99:a5:f9:bc:25:58:
80:4f:f0:a7:cf:e6:3d:65:e4:22:86:cd:3c:78:ae:e0:75:4b:
16:f5:fe:59:bb:bb:ab:f4:10:81:b3:00:8d:3f:4d:fd:3b:fb:
07:08:13:5b:4b:9a:19:80:9f:ec:d3:ce:c8:c3:e4:a9:dd:90:
d9:56:04:5f:df:06:7a:61:9e:c0:0e:6a:05:df:e9:5a:09:9a:
8b:6b:4d:01:c2:f9:9b:6b:53:34:6e:50:be:f8:96:cc:d5:e2:
e8:0c:fe:21:fb:de:7f:f4:42:6f:ac:a1:24:34:96:6d:26:b8:
08:12:31:98:60:e9:51:ab:4e:36:c6:a1:2e:6c:74:b2:c2:75:
fd:6d:31:5f:f1:e5:2e:6f:5d:55:a1:08:0a:18:0c:29:49:72:
e1:b5:89:3f:87:b6:01:28:4b:cb:cd:1e:05:e3:f6:8a:10:7b:
e2:f0:37:13:d3:32:bb:02:14:97:21:cb:43:1e:69:84:f6:ab:
b6:a1:e8:e9:8f:c5:98:51:c4:b6:6e:40:61:24:0d:0c:1f:9a:
85:b8:51:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:07 2026 by rpki-client