Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json)
Hash identifier: 8G9scma3YzUVM06LJeISgYFXmzt+RAsEALx+ZMyho4k=
Subject key identifier: C6:EC:2F:A6:27:8E:D4:E9:99:0F:E3:08:7C:D2:6E:22:91:1C:1B:DC
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 019CAAFD00718720B5055D3BD89EEA240835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
Manifest number: 1850
Signing time: Sun 01 Mar 2026 20:00:33 +0000
Manifest this update: Sun 01 Mar 2026 20:00:33 +0000
Manifest next update: Mon 02 Mar 2026 20:00:33 +0000
Files and hashes: 1: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: LdYINteFhOtD7wnttR9L952ukZksIev3ni/pbmidyWE=)
2: k18lVXCHbb1-8v6yyvWMJ8VYVHU.roa (hash: In1eQKHvGTUmAaOtsHiEQVzo1kSRudjkKkxMelV/95Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:00:71:87:20:b5:05:5d:3b:d8:9e:ea:24:08:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: Mar 1 20:00:33 2026 GMT
Not After : Mar 2 20:00:33 2026 GMT
Subject: CN=c6ec2fa6278ed4e9990fe3087cd26e22911c1bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:5c:47:f0:0b:69:52:89:b4:b7:f9:81:1c:
39:8e:be:5b:3e:d3:77:8d:f4:40:6a:77:c7:9c:2a:
57:b3:4e:c2:64:d3:81:46:bc:0e:bc:68:a5:c8:ae:
cb:c7:01:66:e4:61:49:3d:19:60:7a:70:a9:21:92:
e2:73:60:8a:5b:8a:3e:de:e1:44:51:b9:be:ef:b7:
1f:84:36:fb:08:9b:f9:96:0f:c8:14:0c:39:8f:06:
4d:a7:5b:55:1b:e3:ee:0c:1d:c7:93:c8:38:de:39:
70:0d:e3:68:15:19:76:c2:dd:83:6e:68:2e:0c:bb:
02:2d:a9:06:3c:d3:ed:5b:db:44:2b:75:eb:63:e8:
3f:59:49:cc:fb:41:fc:55:9b:8a:e5:db:98:f1:35:
2a:5f:9b:66:2d:a1:49:2a:3b:34:61:de:ff:2a:da:
41:f6:b7:1e:d8:d3:e6:a1:f9:12:66:db:b6:b0:b4:
12:39:46:13:9d:8b:24:47:29:d2:66:c2:a5:e4:33:
66:7a:b1:34:02:50:56:4f:89:8c:92:47:49:ed:8f:
fc:df:f0:01:4c:ff:5a:c9:ce:fd:7a:5b:f2:28:f9:
34:78:08:e8:e7:31:d3:dc:c0:b8:e1:3e:20:64:44:
6a:17:75:9a:87:41:be:d4:31:65:c6:eb:9d:73:27:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EC:2F:A6:27:8E:D4:E9:99:0F:E3:08:7C:D2:6E:22:91:1C:1B:DC
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:89:e5:1e:f0:58:23:75:29:1c:fb:6b:e3:da:ed:d6:ff:8c:
b5:73:09:c5:4a:18:27:f3:c8:07:41:6b:1a:f6:bc:bb:c8:f7:
78:7b:bb:d3:b8:34:29:da:c0:59:5f:34:f3:20:a0:c4:ad:88:
90:65:e6:6e:da:13:b2:be:e7:59:df:52:ea:22:6b:c0:ab:7e:
3b:7b:f6:75:ec:1d:6c:e8:90:db:e2:a2:66:0c:b5:13:9f:49:
ea:44:d8:38:d4:77:a3:68:b1:96:bb:71:01:27:1f:b9:1e:32:
70:66:f1:7b:e9:81:48:3d:ec:b2:70:8b:6d:38:72:a4:56:70:
59:a7:5b:6b:57:a1:8d:ff:92:87:17:28:a2:48:42:73:67:14:
3a:f9:7c:d0:0d:03:bd:84:50:c6:3c:07:7c:52:42:7b:6f:26:
d4:02:21:c5:7e:af:30:f2:fb:b6:f9:90:8b:7b:53:90:e5:b6:
2a:e9:75:7b:be:08:0a:b8:3c:04:06:36:60:f8:b5:69:02:9a:
71:e1:9b:e1:8e:bd:80:e4:41:bc:7a:5e:2b:46:4f:0e:7f:96:
20:d9:ba:ea:c4:ae:8f:5b:0d:b3:71:52:7e:ca:a7:fb:42:26:
bb:06:2f:8e:e6:fd:93:07:ed:12:b3:95:d0:bf:09:2c:ae:23:
a3:3f:e6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:59 2026 by rpki-client