Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
File: RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json)
Hash identifier: GCjBFtuTx4BWyEsex2oqb/EpzmWV2OTHjBFCeicqPxI=
Subject key identifier: 4A:78:EC:5A:C5:D3:A7:FB:35:4A:E9:73:D9:F9:16:0B:AB:DC:5B:AB
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial: 019CAF7EBC6F23856C49044B13A0F5D86F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
Manifest number: 1758
Signing time: Mon 02 Mar 2026 17:00:44 +0000
Manifest this update: Mon 02 Mar 2026 17:00:44 +0000
Manifest next update: Tue 03 Mar 2026 17:00:44 +0000
Files and hashes: 1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: bVi4aAksmHV2dpyrlJh9e5HTjVtgwCbMLtA8AlH7HlI=)
2: TzWq1qnWBn4k19NSOwTmTuj33kc.roa (hash: Nw9JTG7M5i34iKuoPA+hKZe2GJ6kfRFbcg47nxl4mFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:bc:6f:23:85:6c:49:04:4b:13:a0:f5:d8:6f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
Validity
Not Before: Mar 2 17:00:44 2026 GMT
Not After : Mar 3 17:00:44 2026 GMT
Subject: CN=4a78ec5ac5d3a7fb354ae973d9f9160babdc5bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:f7:95:2c:67:61:5c:5b:24:7f:14:55:b3:
84:56:ee:4a:3e:30:41:52:18:0e:0b:1f:e1:e9:f6:
94:c0:d2:af:c1:53:81:c0:ad:1e:65:7f:27:02:67:
d1:64:ef:5a:d8:ff:0e:3c:bd:9f:22:a6:8d:88:c6:
87:6c:04:c6:eb:6e:10:af:ab:f0:72:fa:91:99:43:
0f:34:41:3a:44:f7:01:63:67:4d:50:24:c6:a7:ce:
e9:71:a6:97:01:d2:9e:4c:a8:d0:ff:a3:76:c6:56:
50:ca:9b:63:18:73:db:00:9f:c4:bb:b4:2e:3d:a2:
91:b4:49:6e:92:06:0b:a4:28:06:f5:8c:f6:b7:e8:
46:25:9c:b1:87:b9:e2:f0:78:42:d8:9a:76:0c:b8:
c1:e3:0b:b5:78:e9:72:ab:1e:a4:3a:30:77:ab:27:
2b:af:c3:9e:6f:c8:a2:f4:c4:57:f4:cf:2f:3a:a5:
20:f0:81:cf:80:1e:51:aa:d9:6b:54:49:5f:56:54:
4e:94:49:40:de:9d:30:3b:e2:4d:ea:4e:8c:99:73:
42:f7:54:1d:55:ae:71:95:0d:4e:16:b7:99:70:5e:
c2:fa:f5:96:90:1d:19:c2:aa:1e:85:a8:7b:2b:77:
94:3f:3c:af:d4:f8:db:c1:61:2a:d4:ee:9a:26:ab:
b8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:78:EC:5A:C5:D3:A7:FB:35:4A:E9:73:D9:F9:16:0B:AB:DC:5B:AB
X509v3 Authority Key Identifier:
keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ec:42:7e:e6:f1:75:7d:fb:ae:c0:f1:4a:5b:cd:bb:61:5a:
46:1b:78:89:b7:0e:87:d4:8d:55:61:02:3b:53:cf:e0:b8:06:
66:97:12:20:50:ad:78:49:00:27:59:7f:92:c2:6e:ce:70:89:
c0:a3:2e:6a:f2:2c:89:aa:5d:e3:e3:0f:4d:92:dc:78:86:cb:
8d:ab:89:ae:da:a2:05:96:42:d3:b2:da:03:60:0a:0e:42:f5:
43:ee:27:1b:57:78:f2:83:dc:eb:8e:f0:fe:5a:1e:22:6f:5f:
51:bd:a4:0a:90:d2:18:0c:c1:ed:67:c8:7b:9e:32:63:60:84:
ae:c2:70:b5:3d:a2:ef:2d:75:88:45:6c:1a:a5:40:ff:5d:9e:
43:f1:dc:7d:36:be:91:ef:01:64:bb:d8:91:a3:f9:70:ae:71:
7d:a0:30:33:6b:59:d5:26:c6:54:86:6c:a8:d3:27:1f:1d:2c:
3c:c8:21:57:17:ef:a0:17:aa:bb:14:51:03:9d:1d:97:ee:ab:
8e:a6:54:8c:33:91:b6:32:0c:31:89:8d:13:dc:07:aa:27:2f:
a1:c3:b9:88:7d:b8:21:b9:a4:ac:51:d3:6e:49:70:c7:29:a5:
15:47:c5:ad:f1:3f:4e:91:50:f2:93:f2:03:9f:9d:cd:6c:ea:
86:75:eb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:29 2026 by rpki-client