Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier: L5RZED3DJbVBuIu0lkDOAmt7sxitHfkm2sc0EDHoWaM=
Subject key identifier: FE:DE:B2:68:A4:38:CF:67:71:61:6B:22:7E:16:B1:0E:EF:13:0A:B3
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 019CADC7FF92FA68AC736805D5B48B15A4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number: 07C4
Signing time: Mon 02 Mar 2026 09:01:31 +0000
Manifest this update: Mon 02 Mar 2026 09:01:31 +0000
Manifest next update: Tue 03 Mar 2026 09:01:31 +0000
Files and hashes: 1: RYjmwwSeitE7YflGQ-BXVuEOw-Y.roa (hash: +mZHJEVEx50dKyXD00LKvcDkY+DRVgSg2B5Jqah+/wo=)
2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: yeUXtntO4STOr4IGeqm0rB/nR5uuAK2Jwnb6TTuF++A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:ff:92:fa:68:ac:73:68:05:d5:b4:8b:15:a4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Mar 2 09:01:31 2026 GMT
Not After : Mar 3 09:01:31 2026 GMT
Subject: CN=fedeb268a438cf6771616b227e16b10eef130ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:f4:4e:80:37:6e:43:3f:99:2e:55:bc:99:
fe:38:23:a7:ac:a8:bf:48:c7:f0:4b:86:2c:37:8e:
a3:3a:31:dc:39:34:6a:3a:63:b0:14:b7:e0:48:f3:
5f:f9:dc:ef:1f:6c:d9:c6:1f:e7:62:93:c7:f6:bd:
3e:b0:11:5f:47:ad:d3:6f:dc:1d:b4:78:28:77:75:
eb:f4:03:bf:49:b0:94:f8:6c:05:c1:ee:00:49:28:
26:79:df:1f:5c:62:4e:cb:4f:7a:63:54:57:1f:da:
84:ed:bc:fc:b1:84:ec:97:10:15:36:08:a4:9c:9a:
90:a4:16:52:6b:a7:3c:60:d3:b9:e2:54:d2:0c:c3:
28:a4:ca:bf:3f:24:6b:23:2f:0c:db:bf:96:f5:a5:
7f:ca:50:82:ec:85:a2:99:b2:3e:22:8f:fa:a3:0b:
4f:1e:d4:7d:59:8f:8c:83:37:3f:2a:12:1d:45:a2:
a1:1b:11:70:9b:1e:14:ef:2e:3e:e9:91:9d:6c:cd:
95:36:3c:1a:f8:9a:3b:b8:fe:2f:78:7f:61:8f:e2:
77:a9:66:aa:e2:05:10:67:10:2d:09:e7:43:7d:77:
8f:46:7c:f3:f1:c1:a7:6e:21:74:e2:76:6d:52:36:
c0:8f:ef:95:8d:05:8b:19:0a:79:82:21:96:57:74:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DE:B2:68:A4:38:CF:67:71:61:6B:22:7E:16:B1:0E:EF:13:0A:B3
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:63:d0:69:05:b1:92:c8:78:a8:94:c7:1c:77:8c:1f:43:64:
fb:8e:97:11:78:ce:89:c5:15:a1:4d:54:b9:9e:43:87:cc:26:
8d:c9:18:0d:8e:81:11:8d:8e:27:18:c3:5f:f9:f8:60:f4:3f:
53:e6:8f:78:92:91:a6:d3:9a:b7:6b:d3:08:a4:05:02:a9:05:
6a:3c:7c:31:db:e6:99:cc:67:30:f3:82:e5:4e:82:49:3b:c8:
54:cf:d3:c7:64:c9:59:c8:9f:c2:72:38:84:d5:d0:c7:f3:2a:
84:43:dd:60:a0:cc:b3:2e:c3:a4:d4:db:15:a6:b2:bb:85:65:
a6:0e:8b:c5:a8:44:ac:24:4e:8e:fc:74:1e:aa:ec:a9:a1:9b:
16:03:c4:47:32:c4:92:b8:f0:6c:76:59:01:55:a7:d4:da:f5:
28:30:5f:b9:a7:62:f2:4c:d5:5b:c6:c2:a2:d0:16:7c:ff:32:
f3:d0:e4:f7:49:24:00:d2:6a:ed:37:f8:d9:e5:d3:f9:cd:cb:
07:b5:25:ca:23:d8:f3:43:d2:d7:40:37:42:52:f0:77:68:fc:
99:b9:53:6f:4e:1c:7a:cd:e5:b2:9a:58:20:3f:0e:5c:54:4c:
80:06:e0:b9:0a:ac:f4:64:7d:38:97:4d:9f:fb:8a:0a:bf:d6:
99:83:02:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx/+S+misc2gF1bSLFaTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDg1MmFmNWE4ZTQzNmIyZDRkYTcyZTkyYjY0MTE0ZTFm
NGQxNWYwHhcNMjYwMzAyMDkwMTMxWhcNMjYwMzAzMDkwMTMxWjAzMTEwLwYDVQQD
EyhmZWRlYjI2OGE0MzhjZjY3NzE2MTZiMjI3ZTE2YjEwZWVmMTMwYWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2830ToA3bkM/mS5VvJn+OCOnrKi/
SMfwS4YsN46jOjHcOTRqOmOwFLfgSPNf+dzvH2zZxh/nYpPH9r0+sBFfR63Tb9wd
tHgod3Xr9AO/SbCU+GwFwe4ASSgmed8fXGJOy096Y1RXH9qE7bz8sYTslxAVNgik
nJqQpBZSa6c8YNO54lTSDMMopMq/PyRrIy8M27+W9aV/ylCC7IWimbI+Io/6owtP
HtR9WY+Mgzc/KhIdRaKhGxFwmx4U7y4+6ZGdbM2VNjwa+Jo7uP4veH9hj+J3qWaq
4gUQZxAtCedDfXePRnzz8cGnbiF04nZtUjbAj++VjQWLGQp5giGWV3TsJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7esmikOM9ncWFrIn4WsQ7vEwqzMB8GA1UdIwQY
MBaAFKwIUq9ajkNrLU2nLpK2QRTh9NFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZGJjYjItM2E5Ni00ODE3LTk5NzEt
NTAwN2RkZTM1MDQ1LzEvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80ZGJjYjItM2E5Ni00ODE3LTk5NzEtNTAwN2RkZTM1MDQ1
LzEvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWPQaQWx
ksh4qJTHHHeMH0Nk+46XEXjOicUVoU1UuZ5Dh8wmjckYDY6BEY2OJxjDX/n4YPQ/
U+aPeJKRptOat2vTCKQFAqkFajx8MdvmmcxnMPOC5U6CSTvIVM/Tx2TJWcifwnI4
hNXQx/MqhEPdYKDMsy7DpNTbFaayu4Vlpg6LxahErCROjvx0HqrsqaGbFgPERzLE
krjwbHZZAVWn1Nr1KDBfuadi8kzVW8bCotAWfP8y89Dk90kkANJq7Tf42eXT+c3L
B7UlyiPY80PS10A3QlLwd2j8mblTb04ces3lsppYID8OXFRMgAbguQqs9GR9OJdN
n/uKCr/WmYMCew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:53 2026 by rpki-client