Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
File: IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json)
Hash identifier: NPMFvBjgIAVHe9bRkZT5hrs6adRwA0rK21K9UKM/qrI=
Subject key identifier: 84:07:87:74:4E:20:17:AC:CB:E3:8B:FC:7A:B6:EF:26:92:FD:B9:03
Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
Certificate issuer: /CN=2031ebba943fad1c5487540e0105e19c232cf79c
Certificate serial: 019CACB49664AFB91DB18E998BE52DFE8231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
Manifest number: 0A05
Signing time: Mon 02 Mar 2026 04:00:41 +0000
Manifest this update: Mon 02 Mar 2026 04:00:41 +0000
Manifest next update: Tue 03 Mar 2026 04:00:41 +0000
Files and hashes: 1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: OSpHcnuE0ihOAdDbctLxtgEKWsjZVW0k63lnP/mEWww=)
2: _ve7f_eKRxTXvAdLhrojJgOcPWA.roa (hash: CPmTvOiaDxy3JYxjp63taRHI0Y6d1z0nn8MiWd6BcsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:96:64:af:b9:1d:b1:8e:99:8b:e5:2d:fe:82:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c
Validity
Not Before: Mar 2 04:00:41 2026 GMT
Not After : Mar 3 04:00:41 2026 GMT
Subject: CN=840787744e2017accbe38bfc7ab6ef2692fdb903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:a6:31:7f:a0:f7:48:22:2b:86:1b:46:d1:
9d:0f:83:00:e1:75:6e:31:e4:1b:4a:ce:1e:86:b2:
22:69:2d:9b:a8:29:ab:5d:72:c8:b2:45:53:9c:8b:
e4:c8:2c:7b:6e:46:7c:66:cd:88:16:26:89:fc:f2:
9f:db:83:75:5b:f5:7a:1f:33:42:95:d4:07:c7:07:
b2:58:f6:2c:15:c2:dd:e6:1b:6f:29:3f:d5:1e:98:
d2:93:32:73:85:8e:fc:35:83:0d:aa:51:71:50:61:
30:a8:38:8d:d6:d2:66:f5:e6:69:5c:43:84:02:51:
83:4a:0c:73:ab:0c:2b:f0:9b:c6:1a:58:3d:47:ab:
af:6f:53:26:11:c7:25:fb:47:a1:cc:62:74:ef:f3:
6b:ec:0d:38:c1:20:88:87:89:4c:82:fe:d9:a2:45:
10:66:72:a5:0f:d1:21:95:79:8e:ce:e7:90:e4:ec:
a1:93:d5:bb:a0:2c:f1:2a:2e:e7:9e:88:59:37:15:
e8:33:6b:11:c7:01:d9:8c:cc:4a:d1:53:19:75:4a:
7b:9c:83:9b:3e:00:8f:d6:81:09:c4:3d:fe:3b:9d:
41:8b:84:56:cf:38:a5:83:e9:91:fa:65:48:50:9e:
65:7b:7b:eb:2a:25:0b:d9:d6:65:57:f6:02:cb:e6:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:07:87:74:4E:20:17:AC:CB:E3:8B:FC:7A:B6:EF:26:92:FD:B9:03
X509v3 Authority Key Identifier:
keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5a:bf:26:37:eb:20:3c:40:82:50:03:b6:bd:aa:a1:50:be:
b5:5b:5f:8c:c0:28:c8:50:87:a3:85:ce:89:20:5f:24:6d:9b:
71:0b:ee:8f:5e:53:fa:f5:12:81:ce:15:d6:5c:5f:7d:0f:88:
25:6d:f1:00:25:13:5a:52:f0:ff:da:3a:12:a6:86:93:c2:cd:
63:33:3e:d4:7a:45:cc:63:f4:12:84:77:eb:b4:47:96:38:df:
14:2f:21:fc:17:e7:02:9a:b2:d2:9d:3c:cb:1a:76:95:4d:a6:
4c:07:03:ba:54:88:8a:c0:31:9b:a6:fc:da:e2:76:12:43:19:
20:40:ea:73:d9:6a:b6:b9:0b:be:e6:19:99:e3:3d:30:a4:3e:
04:14:fe:7f:65:8f:ef:c8:0d:8a:44:01:08:d9:83:56:44:03:
c3:ad:2e:4a:71:f2:0a:7f:af:f4:27:f8:7a:fb:67:36:c4:9e:
5e:73:69:90:2f:9a:ae:30:dc:f0:8a:f5:97:30:2a:d3:da:90:
6b:ef:15:5b:46:53:95:3b:66:b6:1c:b3:f6:58:25:ab:dd:74:
9c:22:a2:7a:fc:33:68:7b:71:50:3f:07:e4:90:2c:7a:73:29:
4e:55:bb:d4:7b:03:8a:dc:60:7f:4b:89:cf:7e:a7:ae:ec:dd:
d1:6b:16:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:38 2026 by rpki-client