Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier: mjjCy/pkRtlusHgjk+oJ+7iM5+sAg4Ydi/THahtbqlE=
Subject key identifier: 55:E0:7E:1F:AF:EB:AA:7E:66:EF:44:02:12:33:DE:76:C7:5B:65:4E
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 019CABD9B21442C6CB13D62947061EA73D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:36 +0000
Manifest this update: Mon 02 Mar 2026 00:01:36 +0000
Manifest next update: Tue 03 Mar 2026 00:01:36 +0000
Files and hashes: 1: PtYo6MwEWy1vpndhzACUN02erEo.roa (hash: 3/Pp/u1BR3pOxJGz3l7tc76JM7PepsEG/RPZ3ABSNvU=)
2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: 1EsOCxe349CFhVdSpp0batgRrS+qN+5Fbu5HBv7dtF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b2:14:42:c6:cb:13:d6:29:47:06:1e:a7:3d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: Mar 2 00:01:36 2026 GMT
Not After : Mar 3 00:01:36 2026 GMT
Subject: CN=55e07e1fafebaa7e66ef44021233de76c75b654e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:13:4a:e3:3e:68:d1:e9:4b:37:a3:61:a1:
fb:61:c0:b2:af:f1:cb:99:eb:a2:40:a3:3b:82:e7:
49:e9:06:ea:b1:3b:53:55:ad:4d:f5:7f:5f:59:78:
25:d4:f1:8a:55:67:16:c5:b1:94:29:36:a6:45:4b:
ee:68:25:8b:af:16:1c:fa:0c:55:76:f7:61:12:18:
f0:dd:3d:31:de:c3:ef:3e:e0:16:2a:f1:02:77:16:
74:5d:b5:bb:27:e8:2a:7a:76:02:9d:35:0b:3a:9c:
30:d3:f7:52:2c:24:db:ff:f5:88:30:26:c0:53:58:
77:d5:75:9c:af:1d:5f:58:60:98:3d:fe:37:69:6a:
48:a0:5b:00:3a:a3:7d:2d:c0:4e:c9:6c:f3:3e:50:
37:30:33:09:b6:68:ec:85:54:12:72:be:de:7b:b5:
6a:47:94:4a:f9:56:fe:89:03:b3:0c:8f:11:e3:7f:
98:4c:76:19:f3:dd:43:3d:72:e4:4e:41:f8:24:64:
65:f6:c6:4a:a4:fe:f0:d3:93:11:56:7e:26:f9:f5:
dc:d3:d4:5b:c1:90:0b:42:c1:ce:13:52:60:c8:9f:
39:13:75:a1:b0:a3:07:28:97:81:fd:65:9f:53:d1:
9b:53:09:29:9d:17:01:a3:f1:f9:72:62:57:f1:56:
f9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E0:7E:1F:AF:EB:AA:7E:66:EF:44:02:12:33:DE:76:C7:5B:65:4E
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c2:3a:7c:90:eb:e6:91:23:32:8e:83:d4:f1:b2:5a:71:6e:
e6:3d:01:e9:46:6f:62:c7:fc:68:52:53:24:f3:81:64:6e:7d:
a1:a1:a0:55:5e:f0:21:a0:c3:41:07:e6:8d:97:8a:0f:90:34:
c4:29:ee:e7:c3:95:9e:d9:ae:1e:5a:4a:23:a4:b4:d2:ed:29:
c4:f7:85:a6:84:98:25:df:6a:ff:9f:7a:81:f7:b7:4a:53:0f:
64:07:c1:d4:f7:df:a0:41:bb:30:3a:0e:1b:2c:b3:1a:ab:d7:
e3:74:c3:66:af:0c:8d:97:fb:d7:0b:a8:2f:83:37:ac:f5:b1:
32:ca:89:aa:85:a8:b0:6f:3b:49:ca:5f:e3:ab:9c:e8:a4:a0:
06:50:ee:50:6a:ad:3e:cf:8c:be:87:2a:a9:d2:9f:68:c6:14:
08:63:77:a3:b3:df:20:e2:5c:a6:e8:3d:ec:88:01:b2:28:1c:
88:19:c6:cc:c2:cd:d3:c7:87:ca:23:03:0f:ff:3e:cc:fc:1b:
4d:8f:6d:07:f7:d6:50:ab:76:0b:cc:cc:06:89:43:b3:28:10:
bc:73:c2:11:e1:26:b3:12:55:66:dc:da:4e:2b:63:a1:a7:34:
5f:9f:6f:e4:f9:2e:f3:32:ea:d9:62:0e:af:13:59:a2:d4:46:
c9:f9:51:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:02 2026 by rpki-client