Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
File: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft (raw, json)
Hash identifier: KiV/ZOBowgImTs78OvVX06mDs7FLuwmUu4RWPWLRlc8=
Subject key identifier: A5:1D:B2:E1:C5:DE:9E:92:02:3F:9F:1F:05:AF:74:9A:AA:E9:32:79
Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
Certificate issuer: /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Certificate serial: 019CAB34000B6F600BA4AD284666CFF71749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 21:00:37 +0000
Manifest this update: Sun 01 Mar 2026 21:00:37 +0000
Manifest next update: Mon 02 Mar 2026 21:00:37 +0000
Files and hashes: 1: cjO-JSKeIeKfhSr8BfkC9JUrsaw.roa (hash: FDKs6XQEKS17A+eX40GCtBIucy/T4VULlaGZ/uQb+zQ=)
2: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl (hash: om3ICoeM+ILH2v+CbB2rDIRsRyXZjWEmYtvdXxvTPL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:00:0b:6f:60:0b:a4:ad:28:46:66:cf:f7:17:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Validity
Not Before: Mar 1 21:00:37 2026 GMT
Not After : Mar 2 21:00:37 2026 GMT
Subject: CN=a51db2e1c5de9e92023f9f1f05af749aaae93279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:f3:d1:20:bf:f8:b1:45:03:b1:5c:76:ff:
61:66:a0:d0:c3:86:0f:0d:45:a8:67:2b:e2:9b:4e:
7a:e0:a3:04:0d:b8:bb:6e:23:01:55:cb:50:5b:76:
d4:60:78:ca:54:fd:43:d8:32:50:23:a6:19:73:5f:
ca:6c:51:1e:02:b2:53:c7:7f:de:cd:80:26:7a:0f:
fd:9d:a6:8a:3a:6d:b0:86:90:1b:dd:7b:5d:ce:cd:
ad:3e:6b:be:b3:84:d3:38:68:00:9d:25:b6:a5:78:
a8:44:7a:c7:52:a7:d4:a3:cb:2a:f7:90:89:cb:f6:
62:58:cc:3c:1f:b4:d9:2a:eb:ba:b5:17:d1:50:d1:
72:21:f1:45:f3:3c:60:30:e9:85:50:ae:68:a5:c2:
25:ba:dd:27:5e:bc:72:80:74:23:e5:b9:c1:b1:86:
c7:4c:07:a9:e2:d1:8d:91:52:dc:7f:f9:77:39:52:
e4:d4:7e:ec:06:db:84:ff:29:c1:c8:59:97:cf:37:
db:d2:30:af:e4:bd:2e:6b:74:dc:aa:46:a5:15:ec:
d1:90:46:7e:41:a5:57:28:fe:87:a7:84:e7:6d:99:
21:3c:91:ae:fc:c7:59:68:56:08:c3:2d:c7:3f:db:
12:b3:bb:f0:63:a5:6f:b5:b6:30:62:e0:11:39:21:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1D:B2:E1:C5:DE:9E:92:02:3F:9F:1F:05:AF:74:9A:AA:E9:32:79
X509v3 Authority Key Identifier:
keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e0:2c:61:93:e9:f2:83:03:be:8e:ab:26:06:b5:5c:0f:64:
dc:61:9b:15:b4:94:34:2a:1d:fb:6c:04:5b:84:8e:3f:34:f6:
34:ef:25:43:47:af:d7:08:8c:8e:60:70:78:6e:75:73:e0:5d:
00:94:cc:46:20:c4:11:ea:7a:ae:7b:41:46:e7:07:26:26:8d:
33:a8:51:48:37:0a:0f:e3:1c:17:b4:dd:8a:23:02:ec:04:52:
12:11:71:ca:20:71:32:5d:5d:fb:13:db:11:d4:8b:39:eb:59:
cc:39:4a:f3:5d:73:21:0e:cb:7b:7f:05:62:44:33:d4:94:37:
fe:5e:49:84:29:e9:9e:7d:d6:04:2f:c9:da:67:21:1b:e9:2b:
22:6f:bd:81:97:72:49:a4:d1:5f:6c:16:66:74:8d:ef:eb:76:
88:3e:38:c1:be:50:24:49:ee:be:4a:87:b1:54:42:5e:13:20:
ef:20:de:33:53:8b:86:25:d2:a2:cd:c0:f7:3c:f0:9a:5c:da:
b5:d8:70:32:4d:0d:b5:ea:70:31:30:89:b7:a1:08:0d:96:d2:
ab:c4:47:2c:a0:7c:74:a6:e1:0e:a0:b7:42:18:d3:1f:e0:11:
7d:1d:e9:8b:df:ac:f9:df:79:a1:f7:4f:5b:53:44:57:97:11:
b3:66:16:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:31 2026 by rpki-client