Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier: d/s1eGXkQY8Ma11xPIAjdNVtmkqtFjp3PL3VgU8hBPE=
Subject key identifier: D4:BE:55:7A:E4:CC:BA:CB:4B:E3:81:C6:42:A0:EE:16:1B:34:D3:75
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 019CAA21F7A906F62BBAD4A7A0E6CD9C7A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 16:01:18 +0000
Manifest this update: Sun 01 Mar 2026 16:01:18 +0000
Manifest next update: Mon 02 Mar 2026 16:01:18 +0000
Files and hashes: 1: 1qB4lHdQE3G5BgpU7cFdF6FWfBk.roa (hash: Xb0xuBfRe7FwO8H+eAMIQNLLlYRIEueyRhLbYCR1L9E=)
2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: U7Ky8Y6XVKIolf6iUKYZ3V3nozoA1jComYF0AQxkJFk=)
3: WthtcWvJR0bnXyUYIIyDtU_Ijpw.roa (hash: W4V4VKeFsQZDXA2GLDkXPjJ+JE3asR1EB7QgnFmVGmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:f7:a9:06:f6:2b:ba:d4:a7:a0:e6:cd:9c:7a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Mar 1 16:01:18 2026 GMT
Not After : Mar 2 16:01:18 2026 GMT
Subject: CN=d4be557ae4ccbacb4be381c642a0ee161b34d375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7f:c5:53:2b:57:f9:2c:76:04:7a:87:70:60:
46:d8:ed:84:c6:b7:dd:2f:2f:19:5c:95:39:f7:e2:
e7:5e:43:f1:28:ff:57:6a:d4:3b:7e:96:d1:11:53:
61:f6:6f:d6:68:f0:11:17:65:84:85:fa:c5:91:8b:
b3:c8:8a:8f:11:f0:e3:7b:91:3b:13:44:30:e2:59:
d9:5b:d4:35:a4:40:af:1c:04:eb:45:5a:9d:d0:9a:
90:28:87:33:7f:48:16:99:d1:ca:38:57:ba:39:e3:
99:3b:df:6a:60:85:db:92:7e:d5:4b:f9:09:9c:8a:
20:01:5a:76:f8:8d:b7:82:8f:47:3b:ed:5e:b5:03:
8b:f6:57:25:e3:75:67:84:a5:1b:8d:13:b1:5a:70:
d8:3f:45:be:ac:d6:23:97:7d:d1:3d:65:ee:44:64:
cd:87:66:ad:3d:ca:e6:b6:6c:2d:dc:be:9e:0a:d8:
d6:65:f9:3a:7c:41:b9:23:b9:e5:e6:62:ff:be:39:
8e:e6:f7:7d:56:5d:9b:5a:34:43:62:44:91:9c:cd:
15:59:ad:2c:9c:c3:30:c1:f3:18:bc:1e:ec:74:a0:
4a:b7:d8:cd:0b:8a:1a:06:34:3e:61:14:38:bb:69:
76:70:56:e1:c8:ae:fb:f5:d8:7b:f1:fc:83:b8:34:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BE:55:7A:E4:CC:BA:CB:4B:E3:81:C6:42:A0:EE:16:1B:34:D3:75
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d3:49:43:e6:28:12:1e:6f:1f:ee:a2:d6:21:8f:b8:10:25:
4c:eb:fd:e4:5d:ba:30:24:dc:fe:9f:e1:dc:e7:ba:93:6e:89:
76:73:d5:af:fe:7d:1f:07:7b:2a:5c:5d:d8:ab:dc:4d:b2:7f:
6a:73:c9:66:09:24:7b:be:ae:b2:be:af:54:55:d8:73:63:b8:
eb:02:02:f6:20:5b:2a:4c:21:98:15:c3:13:74:f9:c7:cd:79:
c0:4b:cc:0b:b4:2f:dc:0b:e9:ef:f9:c2:ca:bd:0a:0a:fe:31:
79:8e:8d:cc:c3:68:11:75:09:d4:1d:0f:cd:72:91:9a:49:3a:
0b:b6:f9:72:90:7c:7f:0a:35:9f:47:c3:a8:c5:c0:a5:83:97:
66:41:a1:32:1e:33:1f:8c:d6:ec:59:1e:32:01:31:1e:1d:d6:
3b:14:42:89:f3:cf:fb:a6:34:90:09:7a:86:b2:6e:e2:68:95:
78:9f:40:cc:94:2a:ef:a0:1c:69:00:e4:52:f8:e6:35:e0:c4:
b9:54:cc:26:51:12:7a:75:db:57:13:17:93:0b:16:29:98:b1:
a9:af:80:d0:6b:a3:b5:8a:04:ee:3b:dc:7e:55:d3:bb:f9:2c:
94:b3:f0:9d:b9:33:e2:ee:8a:22:71:a3:07:d5:96:d6:99:01:
99:c1:60:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:03 2026 by rpki-client