Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File: 458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier: S0BxEDMbIpMI7BkRCUN43Dsbh5neRFVPioMllXnHK3s=
Subject key identifier: 46:AF:F9:D3:DE:15:C0:7B:67:A4:7C:98:7F:73:05:2C:DF:F0:AB:7D
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 019CACEBC6A6F2D53DA1B1380D1F08D362B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 05:00:58 +0000
Manifest this update: Mon 02 Mar 2026 05:00:58 +0000
Manifest next update: Tue 03 Mar 2026 05:00:58 +0000
Files and hashes: 1: 458aboTAJ378tW2UKw615FZHESk.crl (hash: QN7WK0z5LeOym4Lu/RVaPyC2NGvUyzXziwcZKbNOSRQ=)
2: oUGkPZTPkKHGPI9Jz6IXcq74MlY.roa (hash: kW23YRINjjPil+PnE7QgBUdKf6Li2ZuNouz/Gf0yezE=)
3: q5YOOrxuiSWXoPgrKO2ByRV2Pag.roa (hash: MIH8GtLHKwDBxta0prsle3vWb5PxVdZjd+6vSDHesjk=)
4: zhvANJOvIZUMm3XZ4zAx_z-cOFc.roa (hash: ra8TIJdqXnbc9kZExeXfpCuOK6FblyvfQ8K4O5SfJHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:c6:a6:f2:d5:3d:a1:b1:38:0d:1f:08:d3:62:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Mar 2 05:00:58 2026 GMT
Not After : Mar 3 05:00:58 2026 GMT
Subject: CN=46aff9d3de15c07b67a47c987f73052cdff0ab7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:80:61:55:dc:7e:84:6f:a9:ed:c5:94:24:
94:16:35:ae:6b:dc:64:30:35:77:43:bc:50:58:5e:
07:e2:0f:a8:be:a6:13:c3:3e:80:32:47:98:8e:82:
7d:90:18:77:f4:b6:11:3b:9b:57:9b:c3:c1:17:e7:
fc:bf:50:b6:a1:a9:c7:b2:09:42:d9:0c:ec:3d:c6:
fc:4f:1a:64:8f:f0:93:9e:1d:5f:46:dc:f6:9c:9b:
65:ed:86:a1:12:28:8d:26:ce:48:97:f8:22:06:a3:
07:10:60:10:47:a1:bd:72:e9:0b:61:e5:dd:5f:fd:
9e:c9:ea:08:13:8b:52:b5:7f:56:fa:20:3b:da:ab:
20:07:98:92:8e:90:a0:c5:1b:53:c6:4a:36:6c:6d:
80:c6:b4:94:e9:60:4c:15:60:89:9c:b8:51:e4:69:
da:fe:b5:f1:7d:0a:c3:8a:26:f3:da:66:6b:ef:5a:
fd:47:bf:74:6c:20:67:54:45:31:ff:80:b9:4a:61:
da:dd:01:bf:b2:47:ea:92:c0:cc:23:c2:24:22:9a:
11:1a:3a:b4:05:c3:fd:29:21:37:da:ca:74:1a:ee:
13:48:05:b8:6a:e8:73:f8:ee:ff:51:34:a4:ab:5a:
09:22:80:71:41:d4:00:77:fa:c7:f9:c6:57:80:d5:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AF:F9:D3:DE:15:C0:7B:67:A4:7C:98:7F:73:05:2C:DF:F0:AB:7D
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9f:cd:d4:b9:0a:0e:a5:a5:70:4e:3f:8a:cf:cb:c7:34:3c:
2f:21:41:8c:50:11:9e:4a:81:d0:8d:e2:e1:c8:01:36:49:94:
3a:fa:0b:4c:fb:13:ce:4a:4a:a1:65:31:20:75:7d:58:6a:c3:
e8:c5:33:e8:47:65:11:e2:b0:6a:49:c9:20:f6:38:1d:4e:50:
c7:52:3a:81:c5:09:45:f6:55:8d:bb:9b:e7:b8:17:d8:31:eb:
e1:6d:df:a1:56:0c:41:84:ca:a7:76:f2:47:98:fb:14:f0:e5:
d3:a8:2b:fd:4e:b9:69:fb:8b:be:da:78:5e:64:90:43:80:38:
79:bd:eb:b0:b0:47:20:74:75:83:f9:c4:aa:ee:f5:d0:34:d3:
d4:3c:3b:06:0d:2f:97:05:b0:7a:ae:23:e1:4a:85:a0:e4:f3:
0f:6c:6f:ab:d0:3e:55:28:ba:09:a1:c1:1c:2c:77:86:89:d9:
01:e2:09:cf:ff:e3:c7:23:ae:d3:9f:0b:e5:f6:47:8b:82:98:
85:36:cc:e6:98:7f:13:8a:bd:e9:1f:da:cd:74:be:bf:98:5d:
59:e1:90:bb:f2:d9:d3:8e:ee:1f:78:84:1e:e4:10:e1:93:4a:
12:94:57:e4:55:b4:a6:d3:e6:60:4c:d6:58:23:cc:3e:83:e5:
1d:9f:6c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:10 2026 by rpki-client