Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: cLPr4rnf0g1Ywy7HMP3oX7YUu/L5S7f7P+mE9IRziPQ=
Subject key identifier: D2:FB:B8:A4:B7:40:E0:E5:B7:46:FC:59:DC:4C:20:54:44:9F:43:F7
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 019CAA5894321819CD87608AB7BD6EAD5EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:00:57 +0000
Manifest this update: Sun 01 Mar 2026 17:00:57 +0000
Manifest next update: Mon 02 Mar 2026 17:00:57 +0000
Files and hashes: 1: WBZ4Ns1KlqrebDqaMN4GOQg5rUw.roa (hash: yOstMXBtzsYtaixKzlv1YIAu5cES+ZEO3HPCVKprX3s=)
2: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: VTjhP+weVHq+FjaDEtq9uDJaNl7Z3fgkIxWckT/We2E=)
3: y_vc6s_Py2qwffoPUemYyQ3C93I.roa (hash: jTDTDDTAp7a9jlbajKDV/IreUhiB7BfxphmCimNa3V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:94:32:18:19:cd:87:60:8a:b7:bd:6e:ad:5e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Mar 1 17:00:57 2026 GMT
Not After : Mar 2 17:00:57 2026 GMT
Subject: CN=d2fbb8a4b740e0e5b746fc59dc4c2054449f43f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ce:69:26:46:aa:de:cf:2a:c9:ae:ed:ad:16:
15:a8:88:1c:dd:aa:83:69:26:6e:5d:10:fc:dc:04:
0c:e8:68:7b:ef:fd:b7:4a:2d:c7:05:2a:6c:02:7d:
ce:9c:79:1b:a4:53:ea:33:68:a5:f6:f4:31:44:53:
9b:c6:dc:a8:a6:19:1e:4f:ab:31:42:a3:ae:33:d5:
ea:3c:15:bb:7b:5d:7a:04:47:f5:59:de:9f:c9:d7:
f8:4d:20:71:14:86:29:0c:ab:51:1d:26:b2:d4:b0:
2b:db:0c:f9:36:10:07:07:9d:17:1d:e0:17:c5:b3:
b9:a3:49:3f:81:e7:a5:0b:4b:5e:b1:78:4f:fb:49:
cc:27:56:21:0b:10:f1:c3:b0:26:14:de:dd:56:d6:
f4:b6:a8:65:1f:a0:29:0d:e0:dc:46:2a:98:ed:a1:
df:eb:be:aa:d1:69:db:cd:11:eb:24:5f:dd:c7:59:
6d:fc:ec:c4:4a:9a:5a:be:08:a7:2a:22:60:2d:a5:
3d:21:48:dc:fb:2f:f8:1a:78:3d:fb:7d:44:56:93:
4c:d0:63:3b:52:6c:dd:17:8a:09:22:2d:e3:22:54:
f9:0b:20:b1:47:62:8d:18:2c:a4:f7:ba:bf:f1:a0:
62:e1:22:03:f4:5d:06:03:b2:13:45:46:7a:ed:33:
96:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FB:B8:A4:B7:40:E0:E5:B7:46:FC:59:DC:4C:20:54:44:9F:43:F7
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:15:f6:00:3f:9a:c0:2f:8f:7b:df:76:1f:6d:9d:39:b9:c1:
ac:f1:ea:b6:fb:3a:be:7c:70:7d:71:0b:92:a9:11:c7:56:29:
23:f3:2d:64:e6:02:e9:19:41:92:76:56:e6:28:9f:2c:75:dc:
58:5e:73:12:13:22:fa:ac:ae:ee:e2:0f:06:cd:5e:72:c7:82:
78:d9:52:7d:06:1a:73:4d:24:51:fd:de:70:6c:27:3b:7f:90:
a3:4d:f1:18:91:ce:cc:3d:90:b8:af:15:15:07:83:12:4f:b9:
c3:90:a1:95:2a:c4:1f:4e:5b:1c:e3:b0:48:67:a6:b5:9d:d0:
79:9c:bd:98:2f:6f:26:4f:1c:f6:71:21:d9:68:0c:45:c8:1c:
d9:21:65:23:cd:0e:fe:80:33:3a:54:6f:2d:0c:ea:14:3e:10:
c9:bd:bc:12:d3:a9:ee:8d:db:48:ae:16:52:3f:7d:50:de:8f:
d4:4e:1d:b3:3a:72:2c:b2:08:36:4c:b9:6e:4e:3f:69:c0:91:
68:42:2e:1e:67:d0:bf:01:1a:71:e9:3c:fb:60:4d:a3:35:59:
bd:cb:7f:d0:f5:74:8b:81:92:c5:88:28:c0:bf:2e:17:73:0b:
3c:ba:86:bd:d1:ce:9d:2e:62:ff:f5:83:74:32:94:72:6d:9b:
d4:18:25:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:40 2026 by rpki-client