Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
File: d53x3kOsymHuwDTOomi0ZUzBXKw.mft (raw, json)
Hash identifier: 6E+6phsT/kx3Zq7ANtWfHHpIxgckYHHw3cfJBS0Py6o=
Subject key identifier: 68:2E:98:78:13:C7:6F:F8:6D:91:4B:AD:C2:A3:7A:A3:51:9E:E5:8E
Authority key identifier: 77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
Certificate issuer: /CN=779df1de43acca61eec034cea268b4654cc15cac
Certificate serial: 019CAC46B61B05027B6B9453D1A891066670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:00:41 +0000
Manifest this update: Mon 02 Mar 2026 02:00:41 +0000
Manifest next update: Tue 03 Mar 2026 02:00:41 +0000
Files and hashes: 1: d53x3kOsymHuwDTOomi0ZUzBXKw.crl (hash: iE05O9Xw4Vx9YdK8UhxUqMb+DzRwOQKbTiQpAFm097o=)
2: qkfb5dgXrvL76Dgcof3UGGpLsV4.roa (hash: Kw++qitEj/WGMIrnlQb0PcDTMOh4VFy1to3tIAXAWJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b6:1b:05:02:7b:6b:94:53:d1:a8:91:06:66:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779df1de43acca61eec034cea268b4654cc15cac
Validity
Not Before: Mar 2 02:00:41 2026 GMT
Not After : Mar 3 02:00:41 2026 GMT
Subject: CN=682e987813c76ff86d914badc2a37aa3519ee58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2e:d0:e6:95:25:30:e7:ee:4a:89:5b:7f:02:
8d:a8:2a:05:54:e0:e7:c7:16:92:02:30:78:a0:37:
b1:88:58:4c:ca:86:a2:6b:73:1a:ad:f5:38:0f:11:
c5:bd:ed:a7:ea:1f:b7:c0:86:6e:33:89:00:14:55:
93:ac:de:f9:75:81:80:62:17:3d:4b:a1:80:7f:68:
a2:6e:f7:66:63:99:46:33:7d:0e:5a:cd:c6:b4:b0:
52:64:1e:43:d5:76:16:29:48:ea:6c:19:e6:9e:f0:
b7:84:65:61:4d:46:68:0c:47:d0:68:2c:61:38:b4:
44:db:fc:20:dc:89:4c:e7:38:07:5d:91:48:33:68:
13:56:9e:31:de:85:11:fe:13:36:66:cc:8d:82:6b:
07:df:ff:fc:7a:1e:7d:cb:7d:38:a4:80:53:04:f2:
80:ad:1f:90:b2:84:38:77:6f:c2:29:dd:98:3b:62:
27:a0:a0:32:55:71:0b:fc:31:87:89:9f:0c:de:9f:
07:60:bc:31:0f:4c:1a:34:1d:c2:f0:27:09:b0:0c:
4c:3d:ea:c8:b0:d5:1d:e6:99:ac:eb:1f:6f:35:8d:
36:51:82:cb:1d:f2:2c:6c:0e:df:54:a7:d0:19:9d:
45:a7:ae:cb:07:68:5e:76:7f:9e:b2:58:71:94:9c:
68:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2E:98:78:13:C7:6F:F8:6D:91:4B:AD:C2:A3:7A:A3:51:9E:E5:8E
X509v3 Authority Key Identifier:
keyid:77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:02:4d:53:1a:41:be:aa:d3:86:4c:fd:fa:76:a6:2b:c1:4b:
c3:e9:d4:cf:3d:52:c1:3f:a6:dc:d4:3a:28:d7:a5:91:e1:81:
ba:80:de:0c:bb:65:15:11:bd:f1:52:c4:a5:70:93:ec:04:1a:
d6:4a:3c:a1:2f:e2:db:05:e0:2b:f0:19:df:6f:4d:e1:a2:45:
e7:b7:a9:17:1e:b4:a2:04:f3:e7:ef:b0:3b:8b:1f:e8:d8:99:
13:53:63:5b:24:bc:b2:c5:83:b6:f7:aa:c0:c8:7f:c1:00:44:
9e:d2:b3:bd:70:03:3b:c3:10:b6:56:ca:c2:56:35:a4:5a:56:
ab:64:5c:5f:ff:4f:1a:bc:6a:0e:c5:fb:0a:48:66:80:f7:58:
a7:41:f3:64:ef:78:fd:3b:b1:35:a8:18:2e:bf:3e:fe:7c:a8:
d5:29:88:72:e4:f6:93:fd:63:dc:8b:f1:f0:36:c3:a8:53:14:
49:60:33:df:a9:94:06:c4:f0:bd:87:79:3f:e6:f2:e0:ec:c4:
e5:10:25:2b:85:75:78:07:c3:43:be:2a:b7:6a:d2:51:4f:c7:
70:f4:5c:1f:a7:3e:ed:fe:6b:d3:d9:ca:49:02:86:3f:4b:a4:
15:e6:b0:e6:8d:b4:3c:5d:a8:d4:9b:90:6e:1a:3b:00:ed:99:
9c:f2:a9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:15 2026 by rpki-client