Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
File: RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json)
Hash identifier: TboFQP6QjSQDumy2Ztvr4msES19ZQdkvr+WLemLNRy0=
Subject key identifier: 94:04:E4:80:E8:A8:6E:A5:7B:56:61:C6:29:DD:DC:84:03:EC:AE:2E
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial: 019CAD904A6DB1E7234063507EB1EEA20032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
Manifest number: 1757
Signing time: Mon 02 Mar 2026 08:00:40 +0000
Manifest this update: Mon 02 Mar 2026 08:00:40 +0000
Manifest next update: Tue 03 Mar 2026 08:00:40 +0000
Files and hashes: 1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: IxO5wxc50oHvckToKyJ4qFxtOrOMWHlP9codLIZpIdw=)
2: TzWq1qnWBn4k19NSOwTmTuj33kc.roa (hash: Nw9JTG7M5i34iKuoPA+hKZe2GJ6kfRFbcg47nxl4mFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:4a:6d:b1:e7:23:40:63:50:7e:b1:ee:a2:00:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
Validity
Not Before: Mar 2 08:00:40 2026 GMT
Not After : Mar 3 08:00:40 2026 GMT
Subject: CN=9404e480e8a86ea57b5661c629dddc8403ecae2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:47:ef:90:2a:a6:85:cb:61:04:6e:cf:0c:
f7:e4:e9:2a:e0:3d:8a:37:00:8c:6c:be:ee:ee:45:
6c:c1:47:4e:f3:3f:e2:a3:62:c4:81:3d:cd:5d:78:
46:db:c3:6b:a9:b9:8d:19:86:87:44:1c:8c:c1:14:
2d:d6:af:4f:92:ef:e4:0f:12:1a:3a:14:83:9c:81:
7e:78:4d:45:b5:b9:4c:d6:fc:ad:5d:f5:88:6e:5a:
40:7c:8b:0b:2e:5b:62:c8:5d:d6:1e:34:96:f8:57:
f2:27:80:dc:52:fe:a6:a7:75:2b:3d:1d:d5:b0:83:
32:c9:90:c4:b0:3a:8c:2a:32:44:92:4d:8b:53:57:
75:33:90:f9:a7:e5:f9:80:a6:63:09:04:4f:c4:4e:
ca:83:32:76:f2:5b:ac:70:20:4f:e0:17:09:d2:a0:
7c:cb:f4:8e:9d:73:f7:38:ef:42:0c:e0:08:6f:ea:
9c:f7:38:16:99:6d:b6:e8:4c:c1:2b:b0:2d:30:58:
df:d0:ec:ab:df:01:67:1f:47:c6:b7:04:a2:20:ba:
8c:7b:99:d6:5c:4f:33:5b:e3:80:cb:a1:a6:94:f6:
9b:4d:32:f4:43:43:94:98:b3:fc:90:de:50:d8:87:
59:86:cb:87:14:8b:14:73:59:07:35:aa:cd:bb:dd:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:04:E4:80:E8:A8:6E:A5:7B:56:61:C6:29:DD:DC:84:03:EC:AE:2E
X509v3 Authority Key Identifier:
keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f7:86:b2:b8:45:1f:8a:7a:03:d5:40:6e:5d:d9:77:82:c9:
af:6a:97:e8:fc:f5:67:72:7e:40:84:d5:6f:ac:d6:5c:f3:80:
26:ca:ba:bf:2f:e3:fc:dc:dd:0c:d6:a0:30:41:ab:29:b8:05:
dd:ec:10:41:56:94:20:8a:cf:9f:38:05:41:ea:a5:c3:61:3d:
d2:cb:ec:10:39:33:8a:21:a9:ee:2f:14:2c:f2:7f:f4:e0:47:
95:c9:2c:27:37:9c:20:4b:8e:fa:11:a6:90:bc:38:0f:e4:cb:
d6:09:11:9b:d5:9e:c7:5b:46:4e:fb:6c:e3:b4:ef:98:eb:56:
c7:0f:b0:7d:d3:31:95:8a:5c:77:6e:0e:7a:0f:a9:23:58:e2:
9e:e5:79:17:b1:e7:87:42:d8:65:fd:d6:14:06:e9:3c:4a:cd:
58:fe:f4:7d:96:13:61:7e:52:d7:90:4b:93:6d:3a:08:04:01:
f4:48:70:65:12:ff:0a:6a:01:9a:29:47:0c:38:76:0e:bb:22:
9c:06:5c:ba:77:9d:b6:d7:82:86:77:67:f0:25:f5:94:9a:c0:
24:51:a9:9b:26:a4:cd:ef:19:6a:de:79:5c:16:f7:25:94:78:
38:1e:5a:6a:fd:f7:4a:e7:35:91:be:c0:40:a1:7c:d9:35:f5:
c0:a5:68:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:50 2026 by rpki-client