Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
File: RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json)
Hash identifier: fTun9eoYHCGJOCw6tBPE7kw7F7pidWm5SVVxQ4WjpWk=
Subject key identifier: 11:AA:4E:6C:BC:59:CE:0C:93:03:FB:EA:9C:93:2A:8D:F8:8B:19:87
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial: 019CAA58571800EFA03B4C8B285FCE17D9D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
Manifest number: 100D
Signing time: Sun 01 Mar 2026 17:00:41 +0000
Manifest this update: Sun 01 Mar 2026 17:00:41 +0000
Manifest next update: Mon 02 Mar 2026 17:00:41 +0000
Files and hashes: 1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: ++NijE4egn82YsAdFO5UZnZorYDAj67MeJAdGqzYXds=)
2: c4pt8vUVaeXjMXnofvH8CstQg9I.roa (hash: JquKoOYBsn6huX/IMn7g4cc/ok8BfYvy/bpSr/C0iVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:57:18:00:ef:a0:3b:4c:8b:28:5f:ce:17:d9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Validity
Not Before: Mar 1 17:00:41 2026 GMT
Not After : Mar 2 17:00:41 2026 GMT
Subject: CN=11aa4e6cbc59ce0c9303fbea9c932a8df88b1987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:92:89:c7:ff:3e:4f:2a:54:46:c9:01:2d:
d5:98:e1:79:fe:82:46:4e:09:17:06:92:31:e5:f5:
82:39:40:43:cd:25:78:44:66:4c:bd:27:9b:d5:57:
77:32:b9:18:1e:db:b5:13:04:e5:d8:bf:ef:1f:60:
16:f1:dd:b3:29:59:59:dd:ca:2a:b2:47:da:7c:6f:
41:c3:05:37:3f:3b:51:ef:c6:e3:0d:4d:06:93:74:
ab:e2:6c:50:2c:c0:95:0a:78:89:80:8b:cb:92:1e:
88:4e:63:ea:d3:3c:fc:59:28:1b:82:80:33:fb:ac:
23:cc:96:a2:55:e2:37:a6:2f:24:ad:91:4e:97:84:
62:09:33:35:d1:ef:6b:d4:5a:33:12:60:97:3c:2f:
aa:6e:2d:87:46:38:52:79:63:6d:61:68:76:c2:5e:
07:8e:f5:28:88:c4:48:ee:87:a0:6f:c0:e4:94:cf:
1d:03:f3:08:86:7c:5b:76:96:42:70:b9:1f:da:bc:
36:af:1d:d4:cb:28:8c:60:6f:18:80:10:68:9f:f7:
c4:ae:f5:a2:03:60:12:9b:d1:74:60:8e:ef:cf:17:
75:35:42:e5:a4:d3:1d:d6:47:99:e3:12:25:f8:b5:
de:5b:a7:14:4b:fb:1d:56:70:d2:41:e2:fa:82:16:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AA:4E:6C:BC:59:CE:0C:93:03:FB:EA:9C:93:2A:8D:F8:8B:19:87
X509v3 Authority Key Identifier:
keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:dd:ee:6b:f8:8a:51:81:e6:9a:5d:39:f5:c3:33:be:99:ae:
83:ed:34:9a:58:be:5c:28:39:fa:a4:55:31:cf:fc:c1:38:cc:
30:5e:ec:c1:cb:d8:8b:40:bc:c2:74:1a:9a:30:f5:5b:e2:9c:
52:97:a9:28:fa:13:c7:e8:98:0b:62:3f:3f:12:e6:dd:69:b6:
45:81:ba:58:ca:0b:35:a1:51:2c:1d:9b:7d:5a:da:2e:30:ca:
27:6d:bf:87:99:57:51:77:d6:0d:23:e5:ee:29:b5:45:49:61:
03:f5:31:de:39:35:cc:fb:b8:dd:43:03:90:8b:d6:54:8d:b9:
ee:3d:3f:5a:86:d7:74:7f:0f:21:00:3a:df:5b:97:dc:56:62:
67:b4:0e:ec:f8:e7:94:35:89:37:16:00:d2:4f:58:6a:b0:bb:
75:b6:d5:40:26:0e:3c:53:15:17:8d:32:76:60:6a:92:d7:59:
00:69:65:f6:16:74:bb:4f:6e:37:b6:25:41:a8:f8:d1:3d:4b:
d3:87:2c:63:d0:b0:f6:87:95:32:b8:f9:68:eb:c7:90:5d:03:
53:35:72:32:98:45:04:d9:9b:fd:e0:3d:56:67:d1:e2:f1:96:
c1:d5:81:bc:b8:53:7b:b2:c6:5b:4d:b8:f0:8f:f8:9b:5e:8b:
3d:b9:08:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWFcYAO+gO0yLKF/OF9nUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ODE0ZWE3ZTgzYjQwMTliZmQ1Nzk3ZWJhOTg5ZGEwNmRk
OTBlMzMwHhcNMjYwMzAxMTcwMDQxWhcNMjYwMzAyMTcwMDQxWjAzMTEwLwYDVQQD
EygxMWFhNGU2Y2JjNTljZTBjOTMwM2ZiZWE5YzkzMmE4ZGY4OGIxOTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4SSicf/Pk8qVEbJAS3VmOF5/oJG
TgkXBpIx5fWCOUBDzSV4RGZMvSeb1Vd3MrkYHtu1EwTl2L/vH2AW8d2zKVlZ3coq
skfafG9BwwU3PztR78bjDU0Gk3Sr4mxQLMCVCniJgIvLkh6ITmPq0zz8WSgbgoAz
+6wjzJaiVeI3pi8krZFOl4RiCTM10e9r1FozEmCXPC+qbi2HRjhSeWNtYWh2wl4H
jvUoiMRI7oegb8DklM8dA/MIhnxbdpZCcLkf2rw2rx3UyyiMYG8YgBBon/fErvWi
A2ASm9F0YI7vzxd1NULlpNMd1keZ4xIl+LXeW6cUS/sdVnDSQeL6ghYh2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGqTmy8Wc4MkwP76pyTKo34ixmHMB8GA1UdIwQY
MBaAFESBTqfoO0AZv9V5frqYnaBt2Q4zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUklGT3AtZzdRQm1fMVhsLXVwaWRvRzNaRGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYWM0NGItNTY1YS00Mjg2LWE0MGMt
ZDdlMDFhYzAyYTc1LzEvUklGT3AtZzdRQm1fMVhsLXVwaWRvRzNaRGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zYWM0NGItNTY1YS00Mjg2LWE0MGMtZDdlMDFhYzAyYTc1
LzEvUklGT3AtZzdRQm1fMVhsLXVwaWRvRzNaRGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlN3ua/iK
UYHmml059cMzvpmug+00mli+XCg5+qRVMc/8wTjMMF7swcvYi0C8wnQamjD1W+Kc
UpepKPoTx+iYC2I/PxLm3Wm2RYG6WMoLNaFRLB2bfVraLjDKJ22/h5lXUXfWDSPl
7im1RUlhA/Ux3jk1zPu43UMDkIvWVI257j0/WobXdH8PIQA631uX3FZiZ7QO7Pjn
lDWJNxYA0k9YarC7dbbVQCYOPFMVF40ydmBqktdZAGll9hZ0u09uN7YlQaj40T1L
04csY9Cw9oeVMrj5aOvHkF0DUzVyMphFBNmb/eA9VmfR4vGWwdWBvLhTe7LGW024
8I/4m16LPbkITA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:32 2026 by rpki-client