Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: UmT2QyAE15L8AVQOVE9AU15uG/80/dqQyNp7JoR+G6g=
Subject key identifier: 22:55:19:AC:5B:1E:DF:CC:A7:78:90:75:63:74:55:4E:3B:4A:9A:60
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 019CAC4756EA1065092EFEEF7650DD548FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:01:22 +0000
Manifest this update: Mon 02 Mar 2026 02:01:22 +0000
Manifest next update: Tue 03 Mar 2026 02:01:22 +0000
Files and hashes: 1: Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa (hash: QbDgZoN3ZU6/bS/m4FLoXm7lSijDZPcbyRN3YX/mppU=)
2: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: etOHI5OaxKNNGB23XWilDcTBjf5Yhgbs3Y88ZX+ul+A=)
3: hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa (hash: ZhalI/LOgKiAuv67zXxSUEKRpEQkU7//oKdzXd9ydyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:56:ea:10:65:09:2e:fe:ef:76:50:dd:54:8f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Mar 2 02:01:22 2026 GMT
Not After : Mar 3 02:01:22 2026 GMT
Subject: CN=225519ac5b1edfcca77890756374554e3b4a9a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:67:13:71:ce:56:65:be:8d:71:2c:01:a0:85:
72:b9:8a:94:78:d6:a2:14:23:59:8e:7e:7d:70:e9:
dd:aa:66:09:d5:e6:86:3e:3b:e7:ed:f5:8e:8e:02:
12:a7:89:8e:9a:36:53:d9:4d:22:3a:42:e7:d0:66:
38:c6:88:dc:78:81:4f:3c:d9:bf:51:81:6d:43:c6:
86:9c:c5:ad:bf:43:31:ef:19:de:e3:e1:fa:96:df:
c9:46:bb:7c:bd:11:68:68:2f:70:97:51:3b:eb:57:
42:c5:85:78:be:ce:ff:de:5e:49:95:48:43:43:b9:
f8:e2:95:e6:e4:fb:6b:d7:43:7b:9e:d3:36:40:d5:
f6:2c:7a:b5:9e:08:07:48:2f:64:e9:fa:d8:cf:4e:
fb:60:69:b2:c2:a7:2b:49:e4:53:65:64:35:10:26:
16:f2:37:89:63:24:46:a8:d8:e6:bf:7a:95:60:76:
59:cb:c9:b5:c0:e5:c3:2d:37:c8:be:e4:fa:b9:f6:
fe:b4:9d:ed:bf:1f:8f:f6:c0:4c:f2:10:33:74:9a:
fa:be:f4:69:c0:cf:10:cd:74:66:5a:82:f5:ad:8f:
f2:c6:8d:20:35:ff:3e:20:08:b6:a5:55:94:6a:59:
af:4d:4d:59:2c:83:d4:9c:01:08:13:cd:7a:1c:07:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:55:19:AC:5B:1E:DF:CC:A7:78:90:75:63:74:55:4E:3B:4A:9A:60
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6d:f2:32:6c:d8:c3:cd:8a:50:45:49:a5:b5:f0:a7:b1:ce:
59:f1:12:2c:ae:fa:2e:90:d0:7d:3f:2f:de:7b:04:24:d1:0b:
90:45:93:10:d8:3b:7d:de:da:37:5f:d0:70:05:28:ab:e0:9e:
c8:de:90:c9:85:e8:7f:cc:71:4e:13:91:5e:46:72:95:91:50:
df:dc:80:28:6a:0b:19:5c:f3:df:8c:63:de:31:d2:8c:ea:7f:
ea:5e:b7:0d:21:ee:de:9f:ca:e3:2c:f4:0d:08:16:81:03:7e:
58:96:45:2c:1e:8b:d2:7c:ae:90:14:64:af:3f:aa:00:a7:c9:
6e:0b:e7:6b:71:6e:d7:b2:f7:9a:40:cc:14:73:4f:82:f1:ac:
ff:67:72:b8:18:b1:2e:df:a2:9f:e6:ad:b2:0c:33:9e:82:a3:
7d:a2:ce:4c:5e:84:4f:1a:c8:9d:c9:64:1f:d7:44:74:e9:71:
bb:fb:17:10:35:42:3f:4e:49:e6:2e:06:c9:c5:84:d1:3d:74:
8c:70:fa:05:75:4f:dc:5d:26:f9:47:bb:78:08:f3:09:d2:68:
54:59:98:cc:e5:f5:dd:a2:39:63:7c:c6:0a:8a:1f:59:71:92:
37:96:b3:6b:7f:06:d8:d4:21:94:f9:7a:cd:cd:7d:1f:ec:ee:
57:e0:9e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:40 2026 by rpki-client