Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File: RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier: WxdUbF3L1f/2GPv9EUBfMc3a8ZUL7Hec/DWgsWVOld4=
Subject key identifier: AF:F0:44:2F:D6:EF:BA:21:74:AD:07:3C:EA:F8:62:40:F6:45:AB:BB
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer: /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial: 019CAC4786AA194AF1352577D7E4D785D689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:01:34 +0000
Manifest this update: Mon 02 Mar 2026 02:01:34 +0000
Manifest next update: Tue 03 Mar 2026 02:01:34 +0000
Files and hashes: 1: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: rpbeSLBJhSz49U+XwShhFqR/aXTttwrWPtcNj20ptQc=)
2: cQbewkFEZ4acO97jlQJ5WKuKd7A.roa (hash: nw0VsiavZiymn/xF8CuU14khn+rz47RFDCWUotkUcgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:86:aa:19:4a:f1:35:25:77:d7:e4:d7:85:d6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Validity
Not Before: Mar 2 02:01:34 2026 GMT
Not After : Mar 3 02:01:34 2026 GMT
Subject: CN=aff0442fd6efba2174ad073ceaf86240f645abbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:6d:9a:ec:7c:e5:3a:fb:7c:88:bb:e8:19:
12:b2:9a:fa:63:6e:dc:8d:93:f2:ab:cd:e4:c1:e0:
9a:41:30:2f:5d:ee:53:20:5f:77:fd:c3:4b:f4:e2:
43:6c:d6:9e:14:e1:11:30:7d:e9:eb:34:af:2e:0c:
50:8d:2e:fb:ef:ec:2a:a1:81:6e:5d:e3:18:6c:c2:
75:91:84:4d:02:a5:ef:3e:03:12:5f:05:5d:37:20:
a4:05:5b:9a:d2:f6:08:d2:a9:47:a0:99:41:be:5f:
30:a9:d2:23:bd:ae:32:e5:b4:c5:c8:67:dd:ed:e4:
f3:df:6e:2a:26:33:7e:ac:e8:dc:40:b6:76:6a:ea:
5f:cf:34:6f:6e:51:62:95:1c:b1:bc:57:aa:9c:c1:
7f:42:99:20:6b:3d:c0:7b:1a:99:08:ad:e5:43:35:
b5:e8:65:29:d0:66:9c:6c:3a:be:1b:fe:52:68:34:
30:90:ec:ad:e7:27:07:8a:34:e4:6f:59:de:ef:aa:
ae:79:32:0b:72:2a:15:fa:5e:f4:f3:84:74:18:4d:
cf:d5:76:7c:bb:77:42:23:00:f0:01:bb:e6:37:09:
6e:f1:53:81:7c:0c:07:43:d0:6d:c0:e4:7b:84:28:
b4:f8:60:1d:63:e7:b9:45:12:f9:17:bb:81:c9:dd:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F0:44:2F:D6:EF:BA:21:74:AD:07:3C:EA:F8:62:40:F6:45:AB:BB
X509v3 Authority Key Identifier:
keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:1d:1c:10:34:2f:6e:09:4a:39:03:b6:15:75:30:bb:54:f4:
b3:93:a2:9e:8f:49:62:ce:ac:db:f4:3a:2d:c5:2f:f7:3b:0f:
d7:53:84:5f:b7:14:32:44:f2:97:f8:72:c5:c9:3c:65:eb:21:
38:62:3d:43:2e:6c:31:78:58:bf:6a:50:2c:75:7f:d8:f4:d8:
0a:e6:be:3c:c3:97:57:e6:bd:ae:0c:58:26:5c:ca:ae:b0:cf:
47:89:55:b6:86:97:55:90:39:03:c0:54:22:01:f6:58:42:01:
3c:2a:e2:8c:36:63:c6:21:25:64:f1:da:37:cf:ee:20:c8:68:
7f:3d:21:53:ca:48:2a:4a:ed:26:47:b2:ab:b1:91:54:ff:71:
83:25:36:b3:bd:b1:54:0c:b9:11:aa:48:41:a1:97:cd:2a:4f:
4b:65:73:ae:7f:5f:16:7f:d4:da:3f:a7:b2:8b:27:11:f6:90:
14:50:86:f5:ab:44:c1:b6:bc:4e:ac:16:99:96:a4:9b:fd:bc:
dc:6e:47:f7:de:5b:b0:2b:bc:77:38:e3:16:ad:5e:ed:0e:d6:
df:bf:37:8f:ca:9a:2e:da:28:62:40:f2:60:6f:02:a6:8a:5b:
60:fc:d2:d4:0c:52:39:88:1c:b3:56:07:10:46:cb:93:69:d9:
29:cc:49:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR4aqGUrxNSV31+TXhdaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NWRmMTNkMjBmM2I1NzFhNGJhNjEwYjgxZTYzMDNkYjZk
MDk5YzAwHhcNMjYwMzAyMDIwMTM0WhcNMjYwMzAzMDIwMTM0WjAzMTEwLwYDVQQD
EyhhZmYwNDQyZmQ2ZWZiYTIxNzRhZDA3M2NlYWY4NjI0MGY2NDVhYmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbptmux85Tr7fIi76BkSspr6Y27c
jZPyq83kweCaQTAvXe5TIF93/cNL9OJDbNaeFOERMH3p6zSvLgxQjS777+wqoYFu
XeMYbMJ1kYRNAqXvPgMSXwVdNyCkBVua0vYI0qlHoJlBvl8wqdIjva4y5bTFyGfd
7eTz324qJjN+rOjcQLZ2aupfzzRvblFilRyxvFeqnMF/Qpkgaz3AexqZCK3lQzW1
6GUp0GacbDq+G/5SaDQwkOyt5ycHijTkb1ne76queTILcioV+l7084R0GE3P1XZ8
u3dCIwDwAbvmNwlu8VOBfAwHQ9BtwOR7hCi0+GAdY+e5RRL5F7uByd3yOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/wRC/W77ohdK0HPOr4YkD2Rau7MB8GA1UdIwQY
MBaAFERd8T0g87VxpLphC4HmMD220JnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTkt
NGY1NGFkNzU1YjIwLzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTktNGY1NGFkNzU1YjIw
LzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2h0cEDQv
bglKOQO2FXUwu1T0s5Oino9JYs6s2/Q6LcUv9zsP11OEX7cUMkTyl/hyxck8Zesh
OGI9Qy5sMXhYv2pQLHV/2PTYCua+PMOXV+a9rgxYJlzKrrDPR4lVtoaXVZA5A8BU
IgH2WEIBPCrijDZjxiElZPHaN8/uIMhofz0hU8pIKkrtJkeyq7GRVP9xgyU2s72x
VAy5EapIQaGXzSpPS2Vzrn9fFn/U2j+nsosnEfaQFFCG9atEwba8TqwWmZakm/28
3G5H995bsCu8dzjjFq1e7Q7W3783j8qaLtooYkDyYG8CpopbYPzS1AxSOYgcs1YH
EEbLk2nZKcxJoA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:09 2026 by rpki-client