Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier: kX7jVr3F3taPUNfnJwb6g0eHgQevXX/cXHZW4cJwD5I=
Subject key identifier: 70:1A:B4:8C:35:25:6D:88:14:B1:B0:F2:51:0D:87:EE:1E:C8:39:A2
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: 019CAE352EA702D8333D66155EED7E510DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number: 11BD
Signing time: Mon 02 Mar 2026 11:00:46 +0000
Manifest this update: Mon 02 Mar 2026 11:00:46 +0000
Manifest next update: Tue 03 Mar 2026 11:00:46 +0000
Files and hashes: 1: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: A0Zv41PCXXaWBywwu4wY0bbrVQvwTqiTf4Q4ITiDK28=)
2: xbkHK9BjxqqWppD29--gfkSmovk.roa (hash: hkkQkmlB4qFZaOaawyBYcXjPEkqDqcjHyvxZakCPMVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:2e:a7:02:d8:33:3d:66:15:5e:ed:7e:51:0d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: Mar 2 11:00:46 2026 GMT
Not After : Mar 3 11:00:46 2026 GMT
Subject: CN=701ab48c35256d8814b1b0f2510d87ee1ec839a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:b0:4c:60:d5:87:2a:19:0d:5d:2a:89:6a:
86:64:38:11:42:66:50:96:fd:b7:58:23:b5:f7:02:
70:89:21:41:40:7c:e4:c9:e7:2a:f4:f7:6d:41:8b:
03:92:54:fc:8d:bf:ad:b3:ff:f0:fd:04:d7:f3:92:
54:1a:78:f7:d1:dc:4d:eb:d4:f2:59:c5:e9:97:eb:
eb:bb:75:0f:80:dd:ef:29:37:52:89:35:be:e1:97:
0e:84:c6:03:1c:fe:70:ed:d9:7a:29:92:50:9c:e9:
a1:fe:28:fa:09:ad:ac:13:b2:63:db:f6:6f:6b:e5:
85:a4:b0:e1:b6:91:71:b6:39:ef:a3:a6:83:6e:20:
f7:0f:66:2a:6c:e1:1f:bf:f1:bf:d7:2f:8d:70:45:
f4:e3:54:6e:fc:af:40:ad:53:7b:c4:c7:83:0b:2e:
c7:9e:14:0e:bb:5a:2d:8e:07:e2:bf:c4:ba:28:a7:
53:ec:e8:5d:c5:48:da:b6:e0:b1:f1:d4:03:fc:23:
24:1f:38:c4:40:f3:81:5c:5e:96:4d:b8:a1:50:fb:
fc:37:19:09:ba:c0:cb:2b:15:75:9b:a2:62:a0:54:
c1:41:34:37:71:19:f9:fb:a0:9e:d1:87:81:83:36:
b6:59:ee:ca:b2:de:87:93:ed:06:42:fd:37:5f:a2:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1A:B4:8C:35:25:6D:88:14:B1:B0:F2:51:0D:87:EE:1E:C8:39:A2
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b8:fe:42:60:44:cf:8b:4d:d0:4b:4f:69:4d:a8:6a:9f:ed:
95:af:12:75:62:3b:e4:4b:f6:89:83:4c:a5:af:03:7f:95:d3:
6b:3c:c6:88:ff:da:60:0b:94:0b:fe:45:af:0f:a0:dc:ea:e0:
24:b5:05:03:a3:86:7d:5a:ac:80:75:c3:03:2b:aa:75:79:09:
61:75:1c:48:92:5d:dd:7c:67:90:80:96:76:a4:4f:f2:e0:98:
4a:1d:7a:bc:d5:81:5b:43:70:49:ab:e5:ee:71:a0:c1:ef:19:
b8:d1:c7:a6:45:83:8f:69:c5:3f:3c:6c:94:8d:6e:f7:56:86:
6a:4e:4d:9d:20:6f:0c:87:32:72:fe:70:5b:78:86:9e:41:06:
33:1d:f3:e1:dc:94:99:c5:6e:3a:aa:71:07:ea:91:dc:48:76:
9e:de:99:03:a4:38:c9:8d:1d:98:f2:21:ce:45:c1:d0:6c:6d:
92:a9:5d:cf:c0:e8:f6:ba:0e:ad:d1:6a:7c:89:13:4b:61:9f:
76:d3:ab:1d:29:41:43:45:d5:a7:d1:e3:a0:ff:9d:67:55:62:
bc:38:bd:da:cf:64:5a:2f:f9:37:d8:3a:d5:97:74:c4:a0:c3:
c5:c3:61:fb:85:7c:25:6b:60:f1:5d:a9:cd:89:5f:b1:a9:35:
e5:d9:45:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:22 2026 by rpki-client