Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
File: R1Ng86GS3KodPRlNtkwCVMN0vUY.mft (raw, json)
Hash identifier: x8Ie0kFT2MIoO8buY69PsoDmxkOZuvB9PE2SdSiodSw=
Subject key identifier: 61:40:5B:16:0F:A5:C8:8C:62:3A:AF:C7:C7:18:F0:43:CC:1B:B9:AE
Authority key identifier: 47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
Certificate issuer: /CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Certificate serial: 019D9E88C19E48341021AFD2E90A7D605DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
Manifest number: 0295
Signing time: Sat 18 Apr 2026 03:00:55 +0000
Manifest this update: Sat 18 Apr 2026 03:00:55 +0000
Manifest next update: Sun 19 Apr 2026 03:00:55 +0000
Files and hashes: 1: R1Ng86GS3KodPRlNtkwCVMN0vUY.crl (hash: rQ7C7rUH3aaMWPxLq3DETNDo/PlWEQ3fR44zrhUC/OU=)
2: qMO76GFUq-hY40YmP_a09TsI33Y.roa (hash: Qi8hHlIjIYV89eN37DhURxMC9pA+eWxI7cGfJgzjw+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:88:c1:9e:48:34:10:21:af:d2:e9:0a:7d:60:5d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Validity
Not Before: Apr 18 03:00:55 2026 GMT
Not After : Apr 19 03:00:55 2026 GMT
Subject: CN=61405b160fa5c88c623aafc7c718f043cc1bb9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0d:02:cc:3d:5b:eb:e5:6a:07:4d:87:14:df:
ff:fe:aa:a8:a9:d4:1a:73:c4:8a:fe:ef:5f:57:2b:
10:44:cf:aa:32:b0:9a:ed:4a:e2:bd:d0:60:7d:16:
e4:d2:2e:93:d8:86:05:66:5e:74:74:86:6e:37:c1:
d1:bb:7d:68:94:3a:ac:e7:01:12:a9:cf:5c:3c:17:
c4:f9:7b:13:5a:31:a7:fe:7c:1d:dd:c0:28:bf:39:
67:2f:3f:88:f1:4d:e5:85:69:d1:e3:f6:eb:76:af:
ec:e6:bf:79:ef:7c:c2:03:89:b9:4a:4d:01:79:5c:
56:13:10:a1:88:61:f2:8e:0a:12:83:07:59:a6:19:
a2:18:08:bf:0b:c0:fd:29:34:43:a6:df:ad:2b:6e:
f2:2f:37:0b:ee:75:c5:8d:cb:cb:bc:f8:96:f7:b5:
12:5d:fa:c7:98:b6:fe:f5:71:c8:4c:ae:9e:a2:70:
d5:ce:e6:e6:2a:bf:75:79:d6:d9:6c:2b:6d:5b:0b:
4b:b8:b0:77:40:4a:b6:6b:f6:da:d2:ec:9e:09:b4:
90:28:6b:7d:95:44:5b:5b:3f:80:97:66:76:96:7a:
f8:ac:01:1b:5f:40:00:ba:72:13:88:47:50:27:cf:
55:a4:4a:03:0e:7c:4c:84:63:09:63:66:cf:3c:e7:
8b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:40:5B:16:0F:A5:C8:8C:62:3A:AF:C7:C7:18:F0:43:CC:1B:B9:AE
X509v3 Authority Key Identifier:
keyid:47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:96:f4:d3:8d:92:a7:20:40:ec:b1:e9:cf:af:58:b6:a0:99:
59:23:b1:4e:4b:b8:b1:94:58:99:4c:96:9f:3a:4a:84:32:c7:
dc:33:96:57:03:9b:5d:99:43:e7:dd:75:74:80:ab:de:e6:c6:
c9:5d:87:60:fd:89:d0:5e:ed:3f:64:d4:ef:c0:40:68:84:77:
15:e5:21:d1:5f:0e:75:e0:a6:fd:ef:18:8c:81:4c:4f:17:09:
80:f2:14:d1:44:3f:ea:36:76:87:b2:86:01:5a:ad:11:49:18:
70:8b:c2:5f:ee:d9:47:68:09:b6:db:1b:63:51:56:56:50:16:
a7:7f:3b:7d:cf:66:0e:b6:f6:84:4e:d7:6c:55:0e:45:79:a5:
f2:dc:d1:a0:2c:b8:f8:b2:56:04:50:b3:cf:0b:f5:d3:ca:c9:
43:b3:91:8e:35:dd:92:b7:68:a5:f6:77:46:9e:8b:93:93:97:
3f:49:d2:ed:1f:e1:53:6b:82:38:c4:b0:dd:37:ec:33:d6:e7:
71:71:a2:8c:05:82:e0:4e:97:42:da:5f:c7:25:75:01:15:8b:
c5:21:32:32:97:10:17:81:a2:ee:05:36:3b:2e:b6:5e:34:5b:
19:13:22:13:b2:85:50:5d:d3:df:fe:74:98:f5:a6:98:15:f8:
ac:83:9a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:23:06 2026 by rpki-client