Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier: jGPn0bYdKcNpY/53Zskr9HimlLWK4TfdBipKGg9uXzE=
Subject key identifier: BC:EA:B9:FE:94:11:B8:5B:44:EA:B7:7D:B0:F5:C1:72:22:C2:33:FA
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 019CAAC607AD09EA487ACEF5A249EBC0E698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:30 +0000
Manifest this update: Sun 01 Mar 2026 19:00:30 +0000
Manifest next update: Mon 02 Mar 2026 19:00:30 +0000
Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: 2BNDKUQbwAEbJ9jQSIbJWjIwJCAyug4gmuY3CrHmT4Y=)
2: LNdrd32mL4o15Pj5JcWmBKR2Q2I.roa (hash: hLgQdqBGoRGoVp14crN6xd2B0BaQtU78dsrL7Dz6tOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:07:ad:09:ea:48:7a:ce:f5:a2:49:eb:c0:e6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Mar 1 19:00:30 2026 GMT
Not After : Mar 2 19:00:30 2026 GMT
Subject: CN=bceab9fe9411b85b44eab77db0f5c17222c233fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:4a:55:32:e7:f6:fd:74:9d:35:ca:01:fd:
c5:ce:84:25:fe:c4:40:00:30:76:b8:52:b6:3d:a2:
a0:3e:88:40:53:09:ae:79:7f:7d:f8:07:8a:cb:fa:
a2:e6:f4:a7:dd:de:eb:d8:dd:93:25:1a:c2:1c:57:
17:0d:21:fb:78:41:74:e9:7c:04:43:f5:a4:78:40:
e3:4c:53:ef:12:3c:64:c7:ad:a5:7f:43:82:33:f1:
78:12:c3:2f:07:e5:17:7c:7b:1f:c7:45:94:c5:84:
30:47:cf:fd:22:c4:cd:a7:c7:06:36:d0:85:71:8c:
32:3a:fe:76:0f:e7:4d:3b:03:87:1f:1f:70:cd:40:
74:e4:45:67:8c:ca:64:48:57:76:87:17:70:23:d4:
5c:09:55:88:e6:d5:44:7a:a8:36:9f:7b:b3:58:dd:
22:3a:1a:1d:3b:e9:d3:d1:51:b1:39:31:85:01:be:
00:0c:20:98:39:25:7c:04:04:53:f1:1d:38:b7:b7:
01:bf:73:d8:4a:dc:88:91:02:77:54:b9:51:b1:26:
e0:64:02:09:77:c9:2b:91:06:57:66:bb:3d:e6:df:
5f:aa:2f:6a:7a:7a:8c:f5:71:2a:a5:6c:1c:c1:e2:
e4:a1:00:78:aa:08:31:6f:97:c3:c6:48:16:dd:36:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EA:B9:FE:94:11:B8:5B:44:EA:B7:7D:B0:F5:C1:72:22:C2:33:FA
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:44:78:82:e9:80:db:f5:f0:b6:18:93:4e:56:b2:d9:e7:f3:
0b:fc:af:ee:2e:30:df:52:3d:41:01:1e:7f:67:f6:12:b7:95:
f7:48:73:da:a3:3f:47:d0:05:9f:4d:59:35:4b:b4:70:72:fd:
4c:5d:a7:10:20:49:7d:f4:a0:e8:d0:04:dc:3e:44:db:90:76:
d5:8c:38:07:d7:b2:4c:5c:ba:f7:f0:be:19:9e:47:11:87:92:
90:22:7e:2e:d1:6e:f8:8d:9d:db:90:be:78:40:40:6e:a1:16:
b9:7b:32:3c:f3:58:d1:15:c8:2a:3e:81:65:80:87:af:42:19:
e7:73:2b:fc:fc:99:38:dc:11:b7:ed:42:c8:a5:6d:7b:92:ed:
a2:2c:f7:a4:58:21:76:76:61:57:d6:26:3c:9b:52:9f:91:86:
fa:59:0e:93:0c:88:79:75:60:db:06:ff:cf:4e:83:30:50:b7:
88:f5:08:38:0c:95:f9:af:c2:f2:e4:e8:2c:45:56:ee:3f:4c:
33:35:79:ef:22:7b:cb:c0:24:97:a0:4e:f0:a5:c8:d8:e5:b6:
db:11:06:49:0f:72:49:6a:1a:01:5f:6b:fa:8b:d2:11:aa:c5:
38:1e:e2:1f:00:20:e2:ff:2b:c6:1e:06:6d:fe:e7:cf:bd:64:
64:7c:41:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:55 2026 by rpki-client