Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
File: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft (raw, json)
Hash identifier: jvALwmW7h4ykbqTyqPNXohGhywsbWB1G4/3RQCDvLNU=
Subject key identifier: A7:0D:9E:EF:0B:D6:F3:F5:49:4E:B1:EA:05:8A:C8:CA:88:F1:B6:AC
Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
Certificate issuer: /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Certificate serial: 019CAC469CBDE962EEF2E9D59BF9D453AF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
Manifest number: 1851
Signing time: Mon 02 Mar 2026 02:00:34 +0000
Manifest this update: Mon 02 Mar 2026 02:00:34 +0000
Manifest next update: Tue 03 Mar 2026 02:00:34 +0000
Files and hashes: 1: KyN0CWaCH1SDWYOUqLNksdNsPzE.roa (hash: /rmcscD08dlHwE/FpDvYW0hn0CSDsvSiHmlRiI8+lQg=)
2: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl (hash: dQmRAXAWn7vIcIintQXej+gZomSMQdXSwr4hfSH89ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:9c:bd:e9:62:ee:f2:e9:d5:9b:f9:d4:53:af:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Validity
Not Before: Mar 2 02:00:34 2026 GMT
Not After : Mar 3 02:00:34 2026 GMT
Subject: CN=a70d9eef0bd6f3f5494eb1ea058ac8ca88f1b6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b6:c4:0e:44:45:d5:df:6d:ee:ce:ea:c6:6f:
60:70:1c:68:fe:b3:0c:ec:4d:5f:8b:26:02:f7:fe:
f3:22:72:c2:5c:3c:d0:6c:1d:49:13:e3:b4:e5:f6:
49:11:c0:d1:5c:af:ed:49:70:15:fb:fc:de:9f:66:
74:03:a2:7f:d3:36:20:1e:df:28:1f:a4:bf:82:e2:
50:c0:a9:10:3c:b0:63:28:d1:0f:88:c7:44:b8:99:
a5:85:0c:ef:49:69:b4:a3:f4:85:3a:81:cf:37:ff:
b7:4a:a4:08:7a:5b:30:64:94:8b:f8:60:f4:2b:6b:
5a:e7:4a:a6:6a:a9:ad:09:ad:21:09:41:5c:b8:62:
de:7a:e9:a1:88:4f:5c:0c:9a:35:97:75:26:6d:79:
0b:f2:97:aa:82:be:c3:1c:af:ef:da:ba:d7:af:c2:
7b:2b:15:4c:61:88:28:e9:f4:20:ea:a8:ce:a7:d0:
5a:e6:0e:fc:35:ba:c7:89:bc:69:7c:81:2e:0f:7c:
90:73:55:12:dc:73:d3:b8:cf:88:f6:87:48:e8:3d:
d5:aa:24:04:a1:ce:1b:6d:ea:0c:21:50:ac:a7:9a:
af:3a:3f:1e:5d:62:fc:14:04:df:3c:4c:77:01:b6:
e7:29:1f:6b:2b:76:d1:32:db:fe:4c:6c:df:5c:b8:
48:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0D:9E:EF:0B:D6:F3:F5:49:4E:B1:EA:05:8A:C8:CA:88:F1:B6:AC
X509v3 Authority Key Identifier:
keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:16:3c:0e:18:96:65:fd:e2:6c:10:22:8f:16:ef:35:53:1f:
d5:25:47:6e:a4:68:63:2d:5a:81:1b:e6:68:ea:fe:4e:8e:b2:
47:37:35:1b:ab:2a:cf:b3:bf:76:6d:d3:1f:a1:d2:ce:b3:57:
3a:cd:cd:07:41:1b:fe:14:10:b3:0e:cd:49:27:22:c1:a9:27:
9c:22:8d:48:a8:b3:53:4a:4c:41:ba:f0:da:9a:f1:ed:84:c1:
6b:71:c3:50:99:a2:af:23:5c:ab:e7:11:b7:2f:f6:c8:78:af:
db:cc:e3:b6:58:7d:ec:25:8d:8e:e1:93:8e:84:a3:69:1f:0d:
a5:7f:d8:47:2c:a5:20:af:9b:50:74:23:6f:2b:f1:5a:04:46:
84:29:6d:8f:18:64:c4:c9:ab:71:fc:16:e2:82:d3:2c:13:e8:
61:fe:c9:9d:3c:2e:9b:f1:89:11:e5:3f:43:7f:e5:94:77:1c:
60:ff:e7:5d:44:8f:d1:12:75:d8:d3:bd:87:62:7c:b3:4b:17:
6b:d5:b0:25:ab:c4:b2:d3:4d:63:44:16:58:b5:bd:31:c7:69:
f7:a4:34:99:be:b6:34:56:20:d0:90:88:e8:c0:1a:91:e2:ca:
d9:e4:7a:e3:14:d0:81:bf:59:28:f4:ec:1a:27:9f:21:f6:7e:
f7:47:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:05 2026 by rpki-client