Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File: ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier: 0ABUXvxXw6BRvwjZEm5M8I4TWjRxmOYDIIa5McU+duk=
Subject key identifier: EF:16:A6:11:9A:6B:43:18:56:B9:66:96:2D:5A:5F:EF:84:22:42:0C
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 019CAC7E0ED601AC0954800E587F4F8DF3AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number: 0AE8
Signing time: Mon 02 Mar 2026 03:01:08 +0000
Manifest this update: Mon 02 Mar 2026 03:01:08 +0000
Manifest next update: Tue 03 Mar 2026 03:01:08 +0000
Files and hashes: 1: 5frQX9750HL3NN8-MyZHPLOJTsI.roa (hash: pxj83AtJMZvXD4c0K+PkZXGVzhxJMxFhP3iPQm4dFuQ=)
2: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: 6iq/dqJw4GoJW41xcT+m8UblOpqv8v1rNKV5VF7KY5g=)
3: yzlJwvPmp_FWuAYFJVX7D34LL5o.roa (hash: oyzk/Lk1+iN0NJFMafNwk7yqhxfs0bRUTnktsAxu4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:0e:d6:01:ac:09:54:80:0e:58:7f:4f:8d:f3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Mar 2 03:01:08 2026 GMT
Not After : Mar 3 03:01:08 2026 GMT
Subject: CN=ef16a6119a6b431856b966962d5a5fef8422420c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:94:28:11:be:91:66:da:3c:6b:69:fa:7f:
71:6f:2f:64:c6:8d:02:cc:ca:f8:8e:35:ad:c6:d4:
dd:6e:8e:f0:cb:a8:d6:fb:1a:c5:6f:66:28:c8:a9:
83:84:76:82:68:c7:00:5d:ca:ed:d4:bc:cf:db:37:
ea:1c:bb:78:a7:74:a3:65:6a:b7:26:52:af:b2:11:
52:f5:80:e4:c8:37:77:cb:17:14:f4:d3:2c:a9:fb:
4d:ee:0d:18:1a:fa:f2:cc:ec:3e:8b:1b:32:a5:7f:
ec:22:c5:f6:7e:b6:96:9e:76:3e:18:83:23:ed:37:
41:5b:50:85:f8:84:bb:0e:17:12:71:c9:50:7f:bf:
30:ae:3b:d8:bb:7e:d1:f6:39:e3:1a:b7:2b:48:2c:
f9:ed:72:46:9c:a2:9d:e3:76:a3:e6:e1:a1:7d:f9:
ab:70:19:7a:79:38:5f:d2:8e:38:98:bb:07:da:80:
9c:19:84:93:fc:94:87:19:af:22:02:52:bd:89:35:
0a:a2:7e:71:89:ca:b3:7f:1a:50:31:cb:21:da:0a:
71:b0:45:54:9a:36:46:e3:ca:9e:ac:81:29:3c:96:
a0:e6:24:d0:7b:16:bf:55:2e:6f:67:c0:b1:fa:f7:
b1:58:00:48:14:77:6b:5a:10:92:62:0b:76:5d:3b:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:16:A6:11:9A:6B:43:18:56:B9:66:96:2D:5A:5F:EF:84:22:42:0C
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e1:f9:5f:09:b7:1e:ef:46:ac:e2:58:cd:40:7c:fc:e2:bf:
4c:48:f0:f3:40:6d:39:95:bf:e2:20:2f:2f:73:b0:ac:e2:16:
4b:cd:c7:93:7b:57:7b:5c:c8:fa:53:59:df:a8:e8:9c:55:14:
f5:b4:c9:30:b4:e6:f2:f3:0e:25:ad:2a:cb:34:82:ed:1e:c4:
6c:7a:18:68:9d:d9:c9:0a:47:c7:50:5c:be:0d:a4:ad:fc:35:
7e:bb:a3:dc:f0:d8:c9:7d:5d:cb:7b:44:bc:d3:fd:60:cc:5f:
a4:db:28:af:8f:aa:94:38:84:19:01:b9:f6:b2:ae:a3:66:cd:
4b:62:27:d9:19:37:92:cf:21:b1:bd:38:41:1e:6f:35:10:34:
b6:03:1a:45:03:5d:e5:36:31:10:57:85:4c:2d:2f:6c:b9:35:
a1:90:b3:4d:9e:8d:d6:88:05:b0:1c:a5:a5:07:59:f9:e2:b3:
ca:d6:e5:1b:17:0b:1d:42:e9:d1:d7:f4:e4:b2:fa:f3:c2:b9:
61:d3:80:59:34:df:49:2d:07:10:31:50:42:7f:de:e7:b3:67:
84:4b:ce:30:2b:1d:29:57:b4:8b:7d:8f:3c:dc:c6:64:1e:f1:
00:1a:04:de:08:b5:62:55:0b:e5:63:96:69:dc:c8:1a:16:7f:
3f:b2:32:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:58 2026 by rpki-client