Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
File: 0RIqXLBkP3NsfseWGAmiWThmjw4.mft (raw, json)
Hash identifier: Q81WQI4x6z4+yvwMLWL/1kTV2fXgWTEY8eYN2Bvougo=
Subject key identifier: D5:23:80:B4:E0:40:84:2A:1F:2F:09:40:8A:D4:0F:B9:B6:54:22:05
Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Certificate serial: 019CADC816869FDBA803EEC71E1A341014BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 09:01:37 +0000
Manifest this update: Mon 02 Mar 2026 09:01:37 +0000
Manifest next update: Tue 03 Mar 2026 09:01:37 +0000
Files and hashes: 1: 0RIqXLBkP3NsfseWGAmiWThmjw4.crl (hash: nlHl9nKBISWHHs/oQ93agOknl+iZJCS5vMAOPZXPtHs=)
2: Cz_pHgSAu84mYJ1UOavZvAVqVaU.roa (hash: Le84N35sses2WGhREKV142k0zhIQgC1orFXS7KYtRUI=)
3: fSmn7fdIQV-BhV-TX9ikmCr8pz0.roa (hash: aPwivrJczNCFzMJcf0LFQLamq3ppdLsG7e6V+tPBFE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:16:86:9f:db:a8:03:ee:c7:1e:1a:34:10:14:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Validity
Not Before: Mar 2 09:01:37 2026 GMT
Not After : Mar 3 09:01:37 2026 GMT
Subject: CN=d52380b4e040842a1f2f09408ad40fb9b6542205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:55:a8:e7:30:7a:9e:2d:67:2e:b7:18:75:
59:27:62:7c:8d:29:9f:a1:ec:21:c7:6c:3d:38:9b:
13:49:9e:bc:46:af:8b:23:b8:2f:05:86:d9:80:21:
b8:cf:e9:11:43:97:61:71:7f:98:50:15:14:ff:06:
e8:58:37:f6:f4:f4:eb:10:50:6b:bd:93:a8:43:98:
c5:40:b7:28:fd:a6:91:2a:29:f1:26:18:60:43:fc:
19:6d:90:18:97:e6:8a:d9:78:35:17:6b:2b:d5:88:
21:74:93:e4:60:55:eb:da:e9:17:3a:9d:dc:90:81:
85:89:4a:3b:ee:db:d3:0c:34:10:fd:7a:cd:38:59:
5f:b8:ad:0b:2f:6e:28:fe:77:fc:3c:c7:55:f1:43:
cc:5a:a6:c7:a6:83:7c:76:57:c1:e4:a1:82:4c:c9:
ea:4d:67:ce:09:42:49:b3:f7:46:4f:58:53:df:49:
e3:18:1c:c5:ce:47:5f:97:71:e1:ec:94:2e:1a:a8:
22:77:3b:99:a7:0c:6c:59:da:09:45:46:93:e6:ee:
e2:18:40:fe:a5:e1:2e:86:a1:ba:3a:35:8e:97:e9:
ad:97:b3:52:ad:30:83:97:55:07:d9:f3:92:0a:1e:
43:4f:8a:1c:7e:99:50:20:78:f9:67:e6:59:34:cf:
71:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:23:80:B4:E0:40:84:2A:1F:2F:09:40:8A:D4:0F:B9:B6:54:22:05
X509v3 Authority Key Identifier:
keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:85:ed:df:fa:bf:c3:35:63:95:f3:c6:cb:65:5a:96:52:ce:
06:ef:7f:7d:a0:c5:14:c2:cc:54:8b:e1:bf:f5:5d:72:ae:e6:
96:c7:8f:a5:91:20:1e:56:ff:67:ee:13:96:5f:76:5b:2b:58:
bf:49:97:a7:a8:64:76:64:8c:d7:a8:aa:f4:61:01:a5:b0:11:
73:30:f3:0e:f0:f6:96:18:bc:69:ff:fa:f1:ea:c0:38:88:bd:
56:99:cd:84:95:d1:22:7f:2c:8c:cc:e9:ab:09:d8:2e:0f:fe:
7f:04:07:18:20:84:97:5a:9c:c8:87:a4:24:08:47:91:2f:1a:
18:c9:a6:30:b2:b9:83:05:b4:b6:34:e0:5a:6d:17:8b:68:c7:
fd:ae:35:79:72:7d:54:8e:f3:4f:5f:ed:1f:25:21:d3:b8:d5:
39:2d:09:59:4f:18:50:cc:bc:d8:39:8f:82:3e:b0:e8:79:56:
a4:71:34:21:56:12:7f:47:81:ce:e8:df:9a:39:4f:b2:4a:c6:
17:db:d3:df:ee:3a:a0:62:46:c3:55:3c:59:f9:72:44:f7:5a:
e1:ac:85:72:0b:3b:09:a5:e4:1f:34:a8:82:87:be:75:a9:1b:
a7:8f:c2:80:a7:f6:06:04:60:68:71:41:76:08:99:74:de:6b:
55:fd:96:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:25:46 2026 by rpki-client