
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: HW3ncV2/ADghbnhgFpMtgILVTIEF3zqnuPJjcjw1vOU=
Subject key identifier: EB:DF:44:15:2F:3D:A7:B5:61:5E:7C:40:32:D0:7F:70:08:A0:B5:8C
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 019CAA900B7B687B57937220792223BF361E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:01:32 +0000
Manifest this update: Sun 01 Mar 2026 18:01:32 +0000
Manifest next update: Mon 02 Mar 2026 18:01:32 +0000
Files and hashes: 1: 440C9nJzfAwzFQHbbTSsKGKGkig.roa (hash: 9GaUDae42NdjzGOSW1+fUpuBNX675/CDIy2pT/BeZSI=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: CsdsosBmtOLT46uEGE5zQfz5EPGNre1urAr0k+2riG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:0b:7b:68:7b:57:93:72:20:79:22:23:bf:36:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: Mar 1 18:01:32 2026 GMT
Not After : Mar 2 18:01:32 2026 GMT
Subject: CN=ebdf44152f3da7b5615e7c4032d07f7008a0b58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e4:9e:5a:a1:e9:98:42:ed:7e:6f:79:92:df:
8b:7e:f6:e8:86:a6:55:54:0c:df:db:b6:f0:e5:9c:
11:86:95:e8:97:9f:5b:15:29:b8:01:6a:c5:b0:df:
82:1a:93:b3:70:bc:d1:63:0e:8b:5a:cd:ba:af:fd:
9d:18:75:b5:4a:46:32:12:dd:7f:ec:a7:52:60:67:
81:42:29:1b:6e:c7:41:9a:f2:f5:8e:c7:5d:e6:b3:
a6:1d:2a:d2:7f:16:f2:6e:a2:db:91:0f:9d:22:0a:
45:57:70:95:66:88:a3:72:e8:92:da:3b:3a:ae:b9:
2c:e6:ea:bd:34:74:48:75:b6:f0:f3:89:3c:a3:20:
d3:83:87:00:5a:ae:e3:bd:55:dc:36:fa:f4:98:94:
ab:43:4c:08:81:82:fd:6c:e3:3a:8e:ae:e9:73:9f:
91:49:9f:16:2b:2d:f7:6e:00:52:bf:8f:4e:76:cf:
43:6f:b3:cd:7d:76:0a:45:0a:68:5c:e9:e3:f9:03:
8a:89:98:6f:e7:e6:27:7c:3a:97:f1:4a:90:b8:27:
89:f5:71:65:74:09:ab:e8:cb:b1:6f:56:cd:5b:2d:
69:d2:97:5d:4e:8e:19:c7:7f:d1:01:4c:b7:22:e4:
5c:9a:b9:58:f1:22:68:55:8b:ff:76:30:b4:e9:d2:
ed:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DF:44:15:2F:3D:A7:B5:61:5E:7C:40:32:D0:7F:70:08:A0:B5:8C
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:41:01:43:4e:6e:ad:95:f7:59:14:7b:1e:c1:22:bd:6a:d0:
26:75:39:d6:e5:0d:22:de:2f:e3:b5:b4:17:05:51:ad:2a:ea:
ad:5f:c8:71:3e:c7:0a:f4:ff:79:b4:59:00:9c:2a:4b:6c:aa:
b0:3c:d2:cd:ed:fa:70:20:b0:09:0c:1d:01:3d:62:38:73:5f:
d7:54:d6:b5:15:24:72:36:81:2a:e4:9d:1d:d8:e7:8e:69:62:
08:34:d6:09:55:d1:37:70:fe:52:84:6f:ed:11:2d:31:81:c7:
2d:bc:3a:25:e8:a0:20:a0:0b:73:1c:e7:7e:99:34:4a:c1:63:
ee:6f:84:28:60:56:1c:10:96:fa:06:37:0a:b8:7b:66:5c:af:
d5:84:c3:fc:fd:cf:c5:bf:0c:88:3a:2d:df:c0:8e:65:3a:00:
65:02:08:28:2c:ce:df:d0:d9:e6:d0:de:cb:43:23:f1:2b:c1:
d5:97:f1:1b:e7:bf:87:74:c5:13:c8:28:ac:fa:c2:2e:0a:eb:
23:c3:0d:1e:65:d1:59:05:bd:0f:56:fa:82:49:bc:b3:43:dc:
43:cc:81:03:61:74:36:7a:0a:19:57:dc:a9:18:cf:3d:bf:4f:
eb:37:88:33:91:15:b8:5d:c4:c4:b3:3b:63:84:b6:60:e7:cd:
42:99:5d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:22 2026 by rpki-client