Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
File: RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft (raw, json)
Hash identifier: 4pdAfG/bVqfcG4iyYL333WXYmtglC0dzDSdYu+851vg=
Subject key identifier: BC:5B:80:BE:13:29:49:D5:21:DA:9B:27:09:52:3D:B7:CB:E6:C4:41
Authority key identifier: 46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
Certificate issuer: /CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Certificate serial: 019CAB6B6E9D0B35E78D116D57D75A6946BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 22:01:10 +0000
Manifest this update: Sun 01 Mar 2026 22:01:10 +0000
Manifest next update: Mon 02 Mar 2026 22:01:10 +0000
Files and hashes: 1: 4LkdmcjKUPYnNsC8p4HbsE6JtNw.roa (hash: jmfhhWKdSP4GG97BLqMH7I/oq4F3yyozqjmgiw+P0ts=)
2: RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl (hash: b4EbzTtocuqyAaKW4bA61zfiia5ME3JTK/k8K7WKtCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:6e:9d:0b:35:e7:8d:11:6d:57:d7:5a:69:46:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Validity
Not Before: Mar 1 22:01:10 2026 GMT
Not After : Mar 2 22:01:10 2026 GMT
Subject: CN=bc5b80be132949d521da9b2709523db7cbe6c441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:55:8b:7b:d5:ba:8e:23:eb:a7:14:5e:bd:88:
23:d4:dd:d3:06:10:7b:00:f7:0c:d6:98:79:79:41:
9c:42:f2:b1:79:1d:dd:dd:a5:de:f9:55:9d:27:ea:
1b:43:bb:88:96:1e:66:2b:57:2b:7d:4b:34:9e:d5:
72:86:ae:c7:4a:7a:60:92:38:28:e5:f0:eb:6d:d0:
6d:3c:83:2e:fc:4a:70:7f:d8:00:8e:3c:78:13:77:
ba:3c:4b:ec:44:54:81:a9:f1:74:60:44:10:65:93:
7b:a9:0d:a0:e5:82:9c:55:7c:fd:70:e3:76:4a:50:
2a:01:61:5b:0f:08:dc:02:b6:31:8e:13:1d:d9:93:
da:7c:82:30:c2:d1:ad:23:67:0f:f9:02:0e:47:8d:
4f:00:38:18:3f:5e:14:14:2e:0e:e7:ad:44:16:f5:
38:19:84:f7:b5:b0:99:26:81:5a:01:ea:ab:81:9f:
59:b1:fa:b0:ad:ab:54:0a:f7:be:43:a9:44:e2:25:
74:fe:0e:54:57:16:4a:39:f9:1d:55:70:b0:04:05:
3c:d4:6d:01:b5:1e:47:89:42:c7:5f:13:d5:11:1a:
46:9f:1d:9a:c2:eb:6c:93:ea:80:c2:ff:ff:9a:f9:
ce:dd:28:08:db:3c:54:6d:80:86:20:fe:20:24:e4:
d4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5B:80:BE:13:29:49:D5:21:DA:9B:27:09:52:3D:B7:CB:E6:C4:41
X509v3 Authority Key Identifier:
keyid:46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:09:19:e3:a0:77:08:50:51:96:d3:07:f0:89:2d:40:33:78:
ae:05:16:54:08:e8:f7:ec:5c:6e:f8:19:94:fd:94:79:9f:d2:
38:03:fc:6f:a1:10:25:25:bb:f4:4f:2e:a7:eb:75:2f:40:cb:
f2:2d:67:a4:8e:a7:08:4b:51:48:93:e8:11:af:1f:da:12:5d:
58:f5:f2:cd:97:ab:ee:00:64:7a:f7:33:2b:5d:50:1c:d5:09:
07:ba:09:36:20:31:8f:c4:83:7c:da:64:9c:4d:fb:fb:0a:db:
06:64:99:f4:1c:a7:4e:25:f4:4e:3c:ee:57:ec:a6:2e:38:d6:
df:a0:81:64:53:90:ce:f4:1c:ca:60:08:20:9b:e3:50:bd:78:
1c:71:8a:a4:48:8c:c7:88:ba:18:5a:a6:c4:e0:fc:5d:be:22:
5c:a8:07:57:fa:a4:5f:d4:2d:8b:b7:e6:25:d3:41:3c:32:e5:
7c:4c:ab:80:32:aa:52:30:34:90:02:06:a0:ce:0d:bb:ee:6d:
d1:67:04:b9:14:ce:bd:da:4a:e5:89:16:23:77:67:3c:45:ec:
00:20:92:39:b0:f8:0f:09:a0:ca:85:3b:57:53:be:75:41:ee:
dc:4e:73:2b:2a:1c:51:96:b7:4b:2e:33:51:43:20:f2:ee:62:
79:d5:d6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:56 2026 by rpki-client