Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: 4ZKD8gGDiHW0RfzISTpmXhEAHweZUhjaDV1lsh1F890=
Subject key identifier: 43:F0:E7:CC:07:46:D7:85:99:52:47:AF:4B:10:FA:6E:ED:40:14:2B
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 019CAA593A71027B6FFF14FEF23B5EA7088C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 0AC7
Signing time: Sun 01 Mar 2026 17:01:40 +0000
Manifest this update: Sun 01 Mar 2026 17:01:40 +0000
Manifest next update: Mon 02 Mar 2026 17:01:40 +0000
Files and hashes: 1: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: sAHikV4Tp0N2oq1wUNJe3awIf24xEzZGZpe42Hlqg+U=)
2: schhp52ulEJ2Q5lWWzeviWV-gSw.roa (hash: HhUn0pI+C/AL7qljIPdAHULHb8txQJ+RtoE68bF3XwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:3a:71:02:7b:6f:ff:14:fe:f2:3b:5e:a7:08:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Mar 1 17:01:40 2026 GMT
Not After : Mar 2 17:01:40 2026 GMT
Subject: CN=43f0e7cc0746d785995247af4b10fa6eed40142b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a7:56:79:3b:83:c1:cf:8b:89:59:c0:ec:4b:
83:c1:e5:be:68:c2:d1:12:3b:a1:64:c9:82:e2:02:
d0:4a:23:95:9f:c2:a8:cf:25:93:6e:73:3a:53:e5:
f5:e0:e6:fa:0f:b1:5d:f7:d0:ef:c6:2c:01:88:b5:
42:72:21:03:d3:dd:88:86:c1:a9:e7:bc:19:43:61:
ab:20:eb:65:47:5d:9a:9e:dd:3d:36:e7:26:84:66:
93:b3:b4:52:80:2c:b6:1c:6b:6b:45:02:92:7e:6b:
51:52:e2:63:ab:4d:78:93:26:de:2f:8f:a8:86:c3:
50:9e:a5:d3:fb:98:d1:74:5b:9a:38:05:85:a7:3f:
9e:df:62:81:de:eb:11:c0:5b:3d:3e:6f:d8:4a:bb:
53:7f:1b:f1:72:83:fb:a9:ec:98:b8:a0:8f:29:a5:
57:21:64:52:e7:0e:2e:67:02:64:08:ad:ef:e7:ed:
1b:f9:bb:12:18:28:eb:b8:af:cb:62:7f:97:9e:ee:
29:7f:26:d1:11:e0:d2:d3:b7:21:f4:26:ab:10:28:
3f:43:2d:29:2a:b9:74:d3:73:f1:9f:5f:ac:42:40:
25:5a:69:41:44:db:f7:42:e5:de:7b:69:64:52:ee:
90:c6:5b:b0:ef:75:b5:e0:ed:d6:e3:0a:06:c6:7d:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F0:E7:CC:07:46:D7:85:99:52:47:AF:4B:10:FA:6E:ED:40:14:2B
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d5:47:2f:36:6b:9b:da:a6:83:bf:8e:6e:04:33:d9:8d:bb:
98:e0:27:25:1b:76:2d:f7:99:79:ac:5b:11:61:d0:d0:63:6d:
14:d0:a3:83:e3:b1:d9:1d:31:b6:32:28:80:1e:04:24:c9:be:
d1:64:d3:a2:5f:dc:05:6d:5e:d8:20:b9:51:31:41:87:9e:45:
c4:d1:47:d6:e0:be:65:31:bd:61:ea:ec:03:d6:59:36:eb:e1:
0b:b0:10:ee:a9:1a:c2:77:0a:49:f8:53:ef:79:ef:0c:67:b8:
9c:d5:e8:56:8b:e8:31:c8:e9:51:c1:f0:d7:43:f1:41:8a:1c:
f9:e8:47:78:53:0e:ed:af:60:13:6b:3f:0f:e5:32:ee:20:52:
0e:4e:30:89:8f:27:63:45:5f:fc:cf:e7:e5:ea:2a:a5:d2:fd:
14:0e:3c:1d:de:14:d0:f0:b7:2a:b7:70:c2:fd:26:26:26:0c:
9f:26:f1:2c:87:b6:4b:04:91:aa:51:e6:12:52:ed:d0:8b:da:
2c:ef:3a:c6:7e:43:c1:66:21:2f:6c:17:fd:a4:1a:06:f6:47:
11:7d:10:a8:cf:89:aa:af:67:cd:93:41:4a:00:44:5c:b6:a9:
4b:9f:71:00:9b:4d:85:e1:0b:e2:c1:c9:c9:f8:ad:66:5a:11:
2b:7b:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:23 2026 by rpki-client