Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
File: A83mT0Foo_OZt3SU2Urqdyksm88.mft (raw, json)
Hash identifier: DaHzCsak9GuOLuRas8O5Jj5zyzH1Ce/UBgwUG7rJOjo=
Subject key identifier: 9D:0E:4D:D2:54:01:E6:5A:D4:67:2D:DF:BB:48:4C:5B:E3:EC:7F:77
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Certificate issuer: /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial: 019CAE6C3DE8AFB176CAE65B263476AB49B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
Manifest number: 13AE
Signing time: Mon 02 Mar 2026 12:00:55 +0000
Manifest this update: Mon 02 Mar 2026 12:00:55 +0000
Manifest next update: Tue 03 Mar 2026 12:00:55 +0000
Files and hashes: 1: A83mT0Foo_OZt3SU2Urqdyksm88.crl (hash: +NlIwlMajwZ75tMfUqslBIU5t6nlryNWXi/RrFn+iYw=)
2: VqbW8hWa6U_90YgDAsOUDVLHuCw.roa (hash: quQX28Hjb85Vem897JezSZ+lGMfYDszka76M0Xq2SLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:3d:e8:af:b1:76:ca:e6:5b:26:34:76:ab:49:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Validity
Not Before: Mar 2 12:00:55 2026 GMT
Not After : Mar 3 12:00:55 2026 GMT
Subject: CN=9d0e4dd25401e65ad4672ddfbb484c5be3ec7f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:ec:f0:99:28:cf:b1:b2:c0:39:8f:2f:4e:
bc:92:0a:f6:c5:67:3c:4d:35:1f:ec:e2:66:22:1e:
66:1f:1e:53:6e:a5:ad:e3:c0:2e:9f:f4:8b:72:03:
3d:fa:b5:21:17:73:82:25:b4:b7:0f:3b:bd:7d:17:
6e:50:ae:a5:ec:fd:7a:ee:3f:6a:0f:0e:94:45:11:
ee:0f:72:66:23:0b:bf:c3:a5:db:09:df:eb:b9:b3:
da:23:13:3f:2e:7a:4c:ef:73:b3:6d:16:d8:b5:48:
1d:98:0b:45:18:0f:6b:87:f7:29:97:e6:0d:cb:04:
e6:39:3e:29:0d:02:fc:12:f4:b2:d5:14:b1:75:fa:
57:b9:13:c2:78:4e:6f:b3:37:76:1d:78:21:a2:fb:
31:ad:e1:b0:e8:a8:66:4e:53:a1:97:6d:43:4d:7d:
18:65:52:5b:f3:73:28:aa:43:af:89:07:db:9c:76:
f6:12:f4:b8:2c:f5:c0:6c:16:08:32:7c:5e:4b:20:
82:c5:b8:6b:db:cd:d9:1a:69:5e:a7:d4:9e:2e:54:
9f:46:aa:c0:87:be:7a:2a:8e:53:76:91:d6:82:5b:
4d:40:57:be:04:5c:64:a8:e9:bd:a0:ce:cc:11:29:
5b:34:1c:10:17:f5:96:81:ab:a0:d6:dc:06:78:d0:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0E:4D:D2:54:01:E6:5A:D4:67:2D:DF:BB:48:4C:5B:E3:EC:7F:77
X509v3 Authority Key Identifier:
keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:53:7f:92:e3:2e:a1:83:97:fa:8f:16:dd:06:5c:50:ac:41:
96:11:d9:3e:b6:a1:84:d2:0e:d8:bc:43:cc:01:53:9a:5b:65:
78:be:17:81:c1:24:92:54:36:3e:d9:20:8b:e1:84:0c:77:2d:
9d:91:81:d8:bb:e4:97:78:34:9f:10:ce:60:de:e6:10:e5:81:
06:c8:71:38:b2:2d:90:a5:b4:8a:52:c3:c8:7d:89:02:07:83:
66:fc:37:87:78:2f:e1:a9:f4:fc:50:38:af:7a:12:f0:71:0b:
a7:17:b2:6f:43:69:59:7f:20:2f:02:35:88:2a:ea:b6:f3:72:
b2:27:b8:26:7f:ca:44:35:16:c4:4b:a7:c1:9a:30:6c:87:fe:
7f:a6:a4:8c:33:9f:02:fe:e9:23:9e:05:d5:09:72:ed:7b:f2:
00:e2:d4:51:7d:78:73:64:db:1d:a4:24:58:b4:50:c8:98:bf:
a1:e7:4a:19:26:ff:49:b4:18:ce:57:35:40:c1:86:eb:23:b0:
de:c6:2c:1d:42:f6:a7:89:86:37:8f:cf:63:d2:88:84:16:e5:
1f:e3:e4:b6:96:e6:53:91:70:31:e7:3f:c2:d2:96:b7:de:be:
23:29:97:ed:6e:48:67:c1:23:ef:f5:c2:24:8f:5a:03:35:2c:
f9:3f:48:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:14 2026 by rpki-client