Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: ukEYxRCn6BHiz9mEiGLCZcjCyUP9TiPUnJg1iuDe5qA=
Subject key identifier: B9:6E:E1:9D:32:DD:29:EA:49:D3:47:0C:D9:15:C3:98:89:D1:8D:25
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 019CAB6BBAD0B08ED381BCCC5DEE225035E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 22:01:29 +0000
Manifest this update: Sun 01 Mar 2026 22:01:29 +0000
Manifest next update: Mon 02 Mar 2026 22:01:29 +0000
Files and hashes: 1: as_rlXqJ-9X5yyFioptlwk_3ywE.asa (hash: WOqxDpfG0009xOfBOkYF5jMYghhxHEkdiXrFFzH+iVs=)
2: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: 9FlLzTUIwu/LnoBSoSre1QXqJITC8W3r7dvhru+nu+k=)
3: mCi8IXM78zEe8k6a11x1wQYJJHk.roa (hash: XXRc/LdihJuiCQ6i4r0S3QErFt5j7/TSAtBg4nnm1BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ba:d0:b0:8e:d3:81:bc:cc:5d:ee:22:50:35:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Mar 1 22:01:29 2026 GMT
Not After : Mar 2 22:01:29 2026 GMT
Subject: CN=b96ee19d32dd29ea49d3470cd915c39889d18d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3c:36:ae:7f:94:8c:b5:36:05:6a:3b:61:c5:
6a:26:e5:2c:27:5f:96:32:39:ce:1d:a7:43:00:e1:
49:f8:24:a2:7b:a8:f8:ca:19:e5:57:0c:ce:ff:c5:
6a:c2:99:41:8d:40:de:c3:47:de:dd:cc:c1:50:31:
f9:e0:87:a1:15:26:df:1d:f0:33:c0:9f:0d:97:82:
4d:96:88:ed:5d:ea:2b:02:eb:12:f4:50:83:c4:d4:
5b:3f:19:3d:8c:eb:3e:93:46:53:3b:2b:2e:70:9e:
cd:60:1f:a0:13:2c:64:05:88:60:95:37:c2:17:25:
02:ae:fb:3e:7c:47:38:79:ef:bd:6c:bf:b3:33:92:
6a:a6:e6:0f:0f:7e:95:32:b7:26:be:ea:9f:37:e4:
04:9f:b9:79:1e:5e:32:77:f2:30:0e:f1:33:27:6e:
37:a8:79:07:a0:c6:62:48:78:07:29:8f:34:ea:8f:
74:41:d2:af:d2:b3:ca:a6:06:1f:c9:29:bb:e6:63:
ef:0d:49:97:f5:80:80:54:4b:90:99:d9:39:a3:25:
4c:85:e1:62:6f:31:0d:72:93:2f:85:2f:c6:fa:84:
ee:9b:41:e2:66:d9:8f:63:74:15:12:a4:af:01:db:
4c:e3:16:41:37:70:aa:19:e6:c9:b5:3a:4b:d7:d7:
50:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6E:E1:9D:32:DD:29:EA:49:D3:47:0C:D9:15:C3:98:89:D1:8D:25
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:fd:fc:66:88:c1:53:5f:c8:c8:85:12:49:2d:1c:72:b8:0d:
62:e0:1c:d8:34:81:75:0e:fe:2f:0a:ec:ec:7e:93:ab:f8:59:
82:f8:e2:1d:99:5d:5d:33:9e:7a:fe:86:d7:ad:9c:bf:bc:45:
99:f0:7e:e3:30:0d:bc:aa:13:cf:98:f6:79:4c:6f:2f:91:b8:
b6:a8:b2:52:77:f9:bc:c0:09:5f:63:41:dc:f0:eb:a0:4d:19:
d6:e9:4b:a3:00:fe:db:84:e7:11:e2:0d:89:3e:f3:b3:8f:83:
90:53:15:4c:af:4a:76:09:d5:f8:55:63:79:9b:bb:25:0c:54:
78:ec:95:de:65:be:30:de:d1:97:17:f6:b2:24:8a:96:67:ae:
01:da:68:08:67:2a:b9:c6:d3:88:15:1e:de:46:6f:e5:7a:3f:
ac:2c:1a:42:0c:24:fa:7b:66:16:6b:dc:df:a5:8b:a4:66:59:
4b:3b:aa:2b:fa:d9:15:2d:28:46:2b:d5:61:ed:ee:9a:9f:15:
0b:f3:79:db:99:6a:c6:ee:75:54:9b:a2:a1:25:59:04:76:f0:
ca:92:03:e7:97:de:57:98:dc:dd:7d:0b:b8:b2:7a:01:d6:56:
f2:d9:af:6d:e3:c7:62:d2:f8:eb:a7:5d:58:67:06:14:de:bd:
51:7e:9a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:53 2026 by rpki-client