Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
File: d411kki9lFxs44QujWQtzScxM00.mft (raw, json)
Hash identifier: 31rpMjCVGXcxrMaDG7xtcVzFS0fIFmu2trr6Ny788DM=
Subject key identifier: 95:CD:AB:9D:A7:EB:0D:56:A5:41:59:4F:AD:8C:6D:24:83:DA:D9:15
Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
Certificate issuer: /CN=778d759248bd945c6ce3842e8d642dcd2731334d
Certificate serial: 019CAB33E8760E6B4935BC65F94A16DC31A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 21:00:31 +0000
Manifest this update: Sun 01 Mar 2026 21:00:31 +0000
Manifest next update: Mon 02 Mar 2026 21:00:31 +0000
Files and hashes: 1: GXSdlb0pDGF2EMIzDHAuIESnvAg.roa (hash: 7pDXY4rFOt7+nFMHto42qoEt09ttor/c72tHXsLA3yo=)
2: d411kki9lFxs44QujWQtzScxM00.crl (hash: z2vxoaqD86avVWDmwfPrJvOrNLIl9AgJRv7RDz8VAlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:e8:76:0e:6b:49:35:bc:65:f9:4a:16:dc:31:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d
Validity
Not Before: Mar 1 21:00:31 2026 GMT
Not After : Mar 2 21:00:31 2026 GMT
Subject: CN=95cdab9da7eb0d56a541594fad8c6d2483dad915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:67:92:3a:83:cd:97:22:46:cf:03:15:ac:
2e:7a:26:32:18:17:98:cd:c1:77:44:91:3b:ae:8e:
a3:8c:0c:bf:1b:f4:28:84:ed:81:f0:49:63:19:43:
e0:33:44:f0:64:38:a4:f8:8f:56:5e:29:06:bb:67:
e7:ef:2a:46:de:95:89:e3:bb:34:c1:12:2c:66:88:
ae:7c:9a:06:5c:59:87:f3:cd:6b:3c:1e:68:56:28:
35:54:ce:97:17:cd:3a:45:4d:84:a6:57:88:61:4a:
8c:41:cd:27:66:fe:4a:a4:1a:bd:b6:67:09:b7:bc:
d1:08:06:76:85:be:58:6f:14:67:70:f7:50:a5:83:
de:37:c1:c3:8a:d8:58:a1:5d:bc:c5:81:7a:ed:a6:
63:5f:20:53:33:5d:fd:b0:bf:47:50:66:61:34:31:
e5:14:1f:fe:81:06:a4:0b:eb:55:2a:40:0f:ca:4a:
56:4f:29:94:d0:af:ec:80:a4:e5:77:d6:9c:1c:62:
0b:e8:13:cb:42:4f:d0:2c:0a:92:f1:2b:12:83:80:
b2:5e:fc:a3:32:1c:ad:16:e3:7e:51:46:97:ec:ab:
a8:65:62:ce:6e:34:21:62:88:02:98:80:6d:73:0b:
45:82:d7:9f:20:5c:a7:ed:16:2d:fb:fb:c1:52:17:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CD:AB:9D:A7:EB:0D:56:A5:41:59:4F:AD:8C:6D:24:83:DA:D9:15
X509v3 Authority Key Identifier:
keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:97:79:bd:1f:6b:48:e2:48:8c:09:a4:cf:3e:c5:9f:64:60:
a4:f1:44:e4:87:9d:29:92:98:13:89:e5:43:51:36:c0:24:b0:
e4:7b:b4:b0:1c:fe:82:4e:e6:7b:53:d7:14:55:a5:61:63:c6:
2b:c5:fc:ab:32:74:96:e7:73:1f:23:3f:f4:68:76:b9:3a:7a:
03:6d:a4:c0:6b:5e:c3:84:94:80:1c:40:70:1f:b7:a2:2a:3c:
26:2d:76:19:a0:fb:49:be:26:d9:0c:89:8a:2d:ac:b3:93:88:
8a:b8:a9:ad:80:56:a1:08:d9:be:35:95:92:dc:8c:56:1f:97:
83:30:6d:39:c1:80:c2:c9:24:4a:e7:d2:81:9f:1a:74:de:b6:
d8:3d:49:9a:d7:72:19:e2:36:6e:13:02:37:95:5e:63:51:86:
53:47:4c:ec:07:d5:5d:fe:2f:10:14:80:3a:6d:02:16:4b:83:
ba:4a:88:50:6c:51:2e:f2:e2:9c:a0:c3:49:66:4c:77:2e:77:
bd:ac:1c:53:b7:62:a3:1a:ef:63:32:cb:45:6f:76:3f:b9:8b:
89:c9:b2:d0:29:8e:1f:2c:f0:0e:86:89:10:85:8c:2c:9c:9d:
f5:ca:d6:1e:1f:37:21:88:c5:de:03:1e:e6:a0:df:56:8a:37:
47:9d:9e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:14 2026 by rpki-client