Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
File: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft (raw, json)
Hash identifier: A0GlDgtBGAbUwCZDhvYxFFDckk2U20cYtHMPd46C+QI=
Subject key identifier: 2A:8E:3F:DF:55:CE:EA:F3:81:15:35:91:AE:3A:2F:8F:EA:A9:7D:78
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Certificate issuer: /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial: 019CAB343585625B936B36958F4361F7A76E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
Manifest number: 1479
Signing time: Sun 01 Mar 2026 21:00:51 +0000
Manifest this update: Sun 01 Mar 2026 21:00:51 +0000
Manifest next update: Mon 02 Mar 2026 21:00:51 +0000
Files and hashes: 1: EPMtahwabHgPl-W83_5vNZdf4gw.roa (hash: 0H56HrlbNZtyDi9oYIVx2+vNE4jYkmDivR3ycZsjoTk=)
2: R1nUUzzOw929lhAIpfJDOOJ-S-A.roa (hash: Tp1cYDsUeKBDmtrgetF5KzqUAJ8NNp9SsVUJU5MzEDg=)
3: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl (hash: E3p0i+Samfm90FBbsdHloxjsCnwvunhfFEnSWwtE/hk=)
4: les8ej1VpPxKoITRniTQx3Kf-wE.roa (hash: tEw4ct/fRvtKjfw/ec52txtnKNrt4GJfraUVLHoBE0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:35:85:62:5b:93:6b:36:95:8f:43:61:f7:a7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Validity
Not Before: Mar 1 21:00:51 2026 GMT
Not After : Mar 2 21:00:51 2026 GMT
Subject: CN=2a8e3fdf55ceeaf381153591ae3a2f8feaa97d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:d8:98:00:53:20:ca:29:49:01:30:d0:cc:
6c:5c:dc:a9:0d:c1:98:ee:ea:69:36:3d:e9:1a:3a:
9c:94:ad:9b:35:a6:e3:30:bb:30:dd:fb:24:23:e4:
5f:b8:f2:cf:09:d0:72:0f:75:d9:80:7f:6d:05:ea:
f4:1f:2a:a6:b5:13:40:7d:35:f6:7b:cf:81:9d:16:
73:87:b4:39:af:09:a5:e1:62:e2:8f:12:5d:81:8d:
09:34:34:20:55:11:d1:c6:b6:8f:96:2f:75:ad:06:
8f:9a:79:e5:9c:24:bf:c3:3b:ee:5c:dd:56:e9:f8:
ee:c2:ea:98:54:d7:a1:92:18:ec:c5:22:9b:0d:5c:
49:b5:f4:dc:47:91:af:69:b9:45:35:13:26:68:8e:
84:7f:da:80:5b:03:29:e7:60:f2:a4:93:13:af:41:
39:62:ae:a7:85:88:14:00:5a:30:f2:84:a4:0f:53:
4a:d9:0d:d8:8b:04:f2:73:27:0c:b4:47:e1:36:13:
f5:ee:47:7f:60:8d:ee:65:09:3f:ac:b3:93:b6:5a:
dc:29:7c:2f:ab:ac:6b:a1:ac:e6:c5:9a:84:a1:7c:
95:e1:02:f7:56:45:d0:8d:3a:46:d5:68:a6:5e:98:
d7:38:66:83:2a:9a:a2:c1:16:c4:f0:65:87:cf:7a:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8E:3F:DF:55:CE:EA:F3:81:15:35:91:AE:3A:2F:8F:EA:A9:7D:78
X509v3 Authority Key Identifier:
keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:25:80:ec:0a:44:04:76:80:e7:00:e3:3a:f0:a6:ff:71:24:
65:ad:33:91:0f:b0:7c:47:39:6e:32:6a:ec:90:bf:fa:b4:1f:
b0:b9:c1:ba:c9:dc:50:5b:74:53:50:06:a7:ec:c5:0c:7d:f6:
ee:f4:b2:49:69:34:37:1d:42:92:db:63:1a:72:76:1c:80:4f:
7f:1c:ce:4f:1a:ba:6d:1c:e6:da:ab:b8:50:8a:0a:09:d8:58:
9b:d0:34:ee:96:18:70:85:6e:66:7c:39:86:f4:49:05:d4:16:
a8:a8:ed:61:62:14:cc:f6:30:cd:52:21:cb:83:c5:7b:eb:68:
be:13:4b:20:bb:b8:a2:e6:e1:5b:54:eb:48:9a:c9:73:30:f3:
c2:93:70:7f:73:23:84:e5:2d:04:83:fa:aa:a8:17:4a:70:f6:
b9:f5:ea:54:21:23:fe:7e:6a:b9:cd:48:f0:ca:0a:16:30:cb:
3f:7b:30:63:2f:83:3f:3a:b0:46:94:7c:21:40:82:3a:91:c4:
2e:1c:ed:ec:f9:06:3e:3b:74:f2:18:a3:12:2a:5d:cd:b9:8f:
44:d7:2b:56:f4:78:21:89:f4:94:6b:c6:a3:73:f4:2f:ba:62:
92:04:1e:79:f1:78:ff:3b:d7:9c:9f:9c:e6:ee:10:63:6c:5f:
31:6e:a9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:10 2026 by rpki-client