Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
File: sRI3DKJgErTR0BVM73IwvYmluV0.mft (raw, json)
Hash identifier: a2KVgxoayT5n9ZrA1U/7NsQLHafjqojQYIKok/opKXk=
Subject key identifier: EA:00:E5:5E:DD:DF:C5:DA:36:6E:71:CC:F6:D7:59:B8:FE:BA:BB:24
Authority key identifier: B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
Certificate issuer: /CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Certificate serial: 019CAF47A4CAE8E7312EA07FBAC33EC1FCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
Manifest number: 06
Signing time: Mon 02 Mar 2026 16:00:33 +0000
Manifest this update: Mon 02 Mar 2026 16:00:33 +0000
Manifest next update: Tue 03 Mar 2026 16:00:33 +0000
Files and hashes: 1: JQHbkZiCoz_ArYL3K_jRaitcYso.roa (hash: LSS9szWjmAex/d/OuZRvWyhXy/Z+aR2BRiVKGpC62GY=)
2: sRI3DKJgErTR0BVM73IwvYmluV0.crl (hash: 3+q9dQqvmu20gXXOQFYV6jruOgqaxRxdGn66n+/jWIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:47:a4:ca:e8:e7:31:2e:a0:7f:ba:c3:3e:c1:fc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Validity
Not Before: Mar 2 16:00:33 2026 GMT
Not After : Mar 3 16:00:33 2026 GMT
Subject: CN=ea00e55edddfc5da366e71ccf6d759b8febabb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:9c:28:8f:f2:db:13:26:22:7c:f4:7a:d2:
aa:be:64:f5:53:9a:04:57:3e:69:58:24:e4:51:2d:
8e:6c:91:a2:38:04:50:54:27:ed:36:7e:de:5a:e6:
9a:fd:f9:b5:e8:33:5c:64:1a:9d:c7:ad:b3:fd:f6:
ef:4d:7c:1c:db:3d:b4:1f:63:64:44:6d:b3:d7:af:
f5:d5:27:cc:26:11:99:1f:39:ad:54:c0:4e:f3:d1:
f6:d6:55:02:3c:8e:52:3a:f3:6e:25:b2:0c:a2:08:
cc:37:61:ea:c4:50:61:cf:28:4a:6e:1f:4a:c4:71:
6c:bc:86:0a:dc:59:d7:d1:1d:53:a9:c6:52:38:48:
21:89:fd:c8:85:56:0b:4a:af:86:63:89:96:c1:4c:
c1:cd:97:98:18:74:3d:08:30:4e:80:bf:00:47:9c:
6f:76:4b:a9:04:96:4d:55:c4:ee:29:b2:a3:1b:73:
98:7f:73:ec:45:0f:8d:8f:61:bd:f7:83:00:cc:b8:
18:cf:7a:e0:26:eb:3a:ef:98:fa:90:4b:18:66:22:
cd:9e:f0:5b:d7:ee:8c:b4:f5:fa:54:f8:92:44:b2:
91:00:c5:d9:c1:b3:c5:41:d9:a1:16:f6:d4:26:c9:
84:ca:84:fa:79:c6:48:5d:4c:fa:fd:ad:fc:30:da:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:00:E5:5E:DD:DF:C5:DA:36:6E:71:CC:F6:D7:59:B8:FE:BA:BB:24
X509v3 Authority Key Identifier:
keyid:B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ff:dc:d7:e9:0d:5d:ac:ab:d3:43:c8:c8:3d:b7:10:80:71:
2b:ba:24:7b:1f:11:17:d2:84:48:54:82:dc:08:ab:03:96:7d:
b4:e4:fd:5e:4f:ab:3c:64:05:b1:8d:a4:e5:a9:f5:95:73:ce:
59:7c:34:80:5a:ed:58:a5:c5:8e:38:13:27:00:c9:3d:0b:3f:
98:3a:34:b1:db:9b:cd:cc:d6:80:fa:dd:74:c4:4a:51:d3:63:
69:fe:ef:6d:76:a8:f4:18:a4:7d:19:9e:97:7e:47:70:54:52:
91:b9:6e:53:73:59:d4:0a:77:a9:ec:af:ba:9a:59:03:ed:07:
6c:47:2b:d8:cf:82:9e:dd:36:a1:21:55:c1:aa:6d:92:50:3d:
bc:a6:4c:cc:3e:31:90:d1:6a:ba:08:84:dd:b9:b4:0b:85:10:
5a:cc:33:21:0b:de:d4:b0:c9:2e:da:b7:5f:43:08:7e:b8:d3:
14:a5:0a:59:87:1c:ad:1d:15:d5:ad:c7:c9:6f:ee:6a:7c:20:
32:07:8d:d0:1d:aa:71:0c:d3:cc:2c:dc:2b:10:1c:ae:bc:c0:
65:97:4a:98:0d:2a:d5:d5:64:4d:af:3a:e4:91:8c:54:10:02:
09:8e:23:cf:21:c1:81:c5:ea:0f:ed:16:16:6c:b2:67:11:ad:
56:62:7f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:31:26 2026 by rpki-client