Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: iDyuopoipK1s/vYmukACPJhng5ZnHIaKyK4xza1rLwo=
Subject key identifier: DE:06:89:0F:F8:8A:DB:90:E5:BC:85:BD:DD:E6:49:12:D6:5F:1A:B7
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 019CABD986D6A74B5E198873191625F9B82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:25 +0000
Manifest this update: Mon 02 Mar 2026 00:01:25 +0000
Manifest next update: Tue 03 Mar 2026 00:01:25 +0000
Files and hashes: 1: PzKWoUJeFLqjUWS7LgF4BdwM7PI.roa (hash: OsmHic4Ai/0j0JqDsk2Y5rGOjUKPGoeMip/8Vo2h1CM=)
2: UsG3baUGIxj41J_YNnv0F0uvJ9g.roa (hash: Ou9qv1YwHjFroWI++/0y93X1Q7gw8mUqZv7cZxbQ++U=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: ITtqq7KHzDbwQrcJ45YH5touskMqi9yfNuRY29GAbKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:86:d6:a7:4b:5e:19:88:73:19:16:25:f9:b8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Mar 2 00:01:25 2026 GMT
Not After : Mar 3 00:01:25 2026 GMT
Subject: CN=de06890ff88adb90e5bc85bddde64912d65f1ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:07:dc:bd:33:2e:12:f6:06:71:d2:d1:f2:
7d:9b:f2:82:94:18:cb:d2:f1:d3:19:c6:30:3b:bd:
47:c3:d0:10:c6:4e:47:73:68:1b:c4:e9:1c:24:04:
a2:05:67:83:ae:7b:b5:b9:e8:88:19:11:ed:b1:fb:
7d:d9:de:92:08:68:5b:85:ff:25:93:76:75:7e:3a:
e7:9b:da:13:cc:46:18:95:46:d6:8e:64:db:31:75:
9a:db:ea:ce:9f:8b:63:c4:0d:d0:f6:0e:ba:80:00:
10:af:d8:70:08:97:33:71:b4:e8:6f:cd:70:94:b3:
17:5a:da:da:5a:63:17:32:89:e4:52:56:83:fc:19:
eb:07:4a:b1:c7:b6:f2:9a:01:a1:5a:13:2c:a1:a4:
56:30:e2:b1:a5:97:e8:ee:be:85:0a:5a:b3:38:3c:
d4:2d:43:50:84:75:bb:31:6e:7a:26:a2:4d:bd:cc:
ba:1c:36:94:ee:3d:04:d5:40:4f:8d:3c:34:f8:c6:
46:2b:d1:2e:66:2c:54:ec:75:b3:96:60:58:9e:e8:
c7:a9:23:7c:42:cc:75:87:a1:45:bf:34:72:25:75:
3b:2f:7b:fe:8f:21:a7:c9:d3:3d:52:76:1c:c6:5e:
d7:ff:66:f8:54:6f:50:69:57:da:1f:75:6a:cf:e3:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:06:89:0F:F8:8A:DB:90:E5:BC:85:BD:DD:E6:49:12:D6:5F:1A:B7
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e5:1b:79:09:39:d6:15:b7:3a:77:be:b8:51:66:05:b6:4d:
00:4d:f1:73:53:52:d0:ab:86:bf:48:90:00:66:9b:1e:d2:ca:
8a:ff:40:d3:87:63:ca:9a:df:6b:4d:c0:7b:8c:b3:34:81:13:
28:36:1b:7c:cb:2e:5a:57:f8:4b:eb:49:ae:41:3e:85:34:45:
27:70:24:e8:f7:7e:e6:54:19:9d:3d:8a:2e:5c:7c:96:bc:3a:
8c:73:dc:92:7b:66:46:cd:4e:5c:c4:59:b9:cc:02:98:fe:a0:
f7:01:e4:57:07:3d:72:0f:40:c5:22:c9:2b:89:14:37:73:b0:
8f:b9:80:ee:91:0d:d0:ba:fc:db:b0:65:18:0f:d7:f1:56:a7:
65:00:a6:b4:58:6d:81:98:dc:6e:f4:04:8c:1f:ff:4f:17:9c:
1e:33:b3:80:61:2b:3e:d3:f5:19:83:45:a9:3b:4a:8b:21:d0:
74:b8:b4:23:e0:94:c6:d8:d3:44:cf:f1:61:0c:99:64:a6:11:
d3:71:06:de:42:40:99:ff:9c:e6:07:2b:0e:84:5e:53:e1:80:
b7:f9:80:7b:ab:f4:be:18:ea:e6:5b:f9:a7:aa:38:85:4c:99:
34:52:a3:47:3e:f5:65:2a:b1:a8:05:0f:97:8f:be:ef:12:36:
33:4e:1f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:13 2026 by rpki-client