Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: 178yAft+8MGC2rKFaGMB+dHVQ2PWezmEenYO6A2YBHY=
Subject key identifier: 3C:08:9A:EB:56:36:BB:4A:13:09:85:8A:F2:15:DA:8E:CD:61:7D:1A
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 019CAB348A2A5877E79CA6BE109B7AAEEA9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 10AE
Signing time: Sun 01 Mar 2026 21:01:13 +0000
Manifest this update: Sun 01 Mar 2026 21:01:13 +0000
Manifest next update: Mon 02 Mar 2026 21:01:13 +0000
Files and hashes: 1: 0NQU1ASarAJo1UIvicGr69EoQz8.roa (hash: WdkEuOIrig9vUDyn2CAOyE+4Fo/rEVr4Pv+Aia51hm8=)
2: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: 2l+3vVL1Jjyifk1BlYFuY/A4Iv8cP/Rjvj2ZotRLz+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:8a:2a:58:77:e7:9c:a6:be:10:9b:7a:ae:ea:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Mar 1 21:01:13 2026 GMT
Not After : Mar 2 21:01:13 2026 GMT
Subject: CN=3c089aeb5636bb4a1309858af215da8ecd617d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:6f:fe:d7:34:2a:7f:1a:72:9f:c6:dc:2b:
fe:a6:92:de:44:98:e7:eb:ef:18:d2:7e:d8:e6:03:
83:60:97:58:01:11:8a:89:68:0f:93:56:50:5a:96:
df:cf:b5:3a:15:d8:f3:1b:a5:a1:b8:9d:ff:9d:59:
bb:a7:e1:fa:3f:d7:7a:37:85:60:64:eb:f2:40:0f:
ee:ff:ad:c0:fa:9e:75:b0:5e:f5:ab:e0:08:b3:e9:
f9:ae:ab:dc:4d:55:db:07:90:bb:ee:63:e6:44:68:
cf:5d:e7:01:f8:d3:8b:64:12:f7:a2:2a:47:88:69:
4b:80:f2:83:74:ad:9f:76:31:25:a1:ac:5f:28:55:
f1:1e:f5:9b:9f:81:6f:c7:4d:1f:81:2f:21:cf:0b:
13:63:da:ca:04:05:e9:d1:aa:e0:2f:26:02:7a:7c:
9c:9a:eb:d7:71:95:7e:97:e0:f5:9f:88:5b:e3:d5:
53:62:26:f8:44:02:5a:30:10:cd:6f:62:82:ac:fb:
28:ae:e6:03:13:90:db:47:41:7e:33:7c:0e:e7:0f:
d9:7e:74:3c:e5:12:11:d3:73:55:a1:a4:c3:8b:ad:
88:d7:24:96:e9:58:00:02:10:c4:6f:ab:ba:97:ed:
ba:67:03:9b:36:51:9a:39:41:38:65:2d:27:b2:27:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:08:9A:EB:56:36:BB:4A:13:09:85:8A:F2:15:DA:8E:CD:61:7D:1A
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7a:ed:07:8c:49:03:5f:9b:80:38:0a:c8:01:c8:cc:7c:f7:
ba:47:44:84:ef:15:3c:82:bb:2d:be:9b:15:12:f2:2d:80:e8:
11:d8:ef:e4:02:b8:70:6d:77:bc:c3:73:58:a2:9e:6e:78:46:
c0:f3:9b:82:6b:76:ad:5c:7c:6a:c0:f5:51:82:e7:83:eb:f3:
36:c1:68:ef:82:64:b9:55:50:44:b1:f5:63:66:bc:e8:ed:7a:
2e:2b:03:b9:46:79:91:ba:1f:7e:f1:79:57:20:fe:ac:d5:f3:
e4:54:4c:e8:88:9e:86:00:b9:ce:4c:9d:c0:52:12:f6:92:f5:
74:89:c8:f9:da:d4:8b:25:63:1c:7c:bf:b6:81:27:17:2f:70:
bb:bf:ae:08:a2:ca:67:94:1f:83:e1:54:50:90:59:57:71:41:
91:b1:f3:9d:e6:1d:bc:ab:25:ce:d3:df:b3:2d:27:80:20:44:
c3:ea:d8:34:16:5b:7e:3e:00:a2:da:98:c6:db:bd:e5:10:00:
21:32:af:dc:a6:54:48:4e:a2:a0:3e:bc:0d:35:84:64:11:6f:
4e:03:3c:0c:d2:b4:7c:3f:c6:12:51:9b:b8:e9:88:be:ec:66:
db:62:4f:4b:a6:71:76:b1:fc:5b:3f:02:99:9c:08:ef:33:f5:
78:21:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:27 2026 by rpki-client