Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: mAMoPNBv808vfrUVn/182pPYelsMe6rpRKxjQyyD7XA=
Subject key identifier: A5:68:3C:40:97:3D:A0:62:AE:E8:D9:D4:64:F0:66:A3:79:EE:D4:CF
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 019CABA24FEEF82348D91CE21FDA4167152D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 077C
Signing time: Sun 01 Mar 2026 23:01:06 +0000
Manifest this update: Sun 01 Mar 2026 23:01:06 +0000
Manifest next update: Mon 02 Mar 2026 23:01:06 +0000
Files and hashes: 1: 69yOYQhcSzVteXbmSSuXjdooyOA.roa (hash: 2ZA47QSgmHPBZuYu1sYyxVw+wEl4vjMSOZuQJyxjjcA=)
2: DaNzl7w617W61WMkK2mhl8jN5wU.roa (hash: KfPIGqY3EVhRc2Ytnf57ChmISLtMr8fTABQiZHidkaM=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: Bo+P9m7yd1/U06z7Rz5AzXM98lI/roR/EixEe3YDpuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:4f:ee:f8:23:48:d9:1c:e2:1f:da:41:67:15:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Mar 1 23:01:06 2026 GMT
Not After : Mar 2 23:01:06 2026 GMT
Subject: CN=a5683c40973da062aee8d9d464f066a379eed4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:5b:fd:eb:7d:bc:2a:42:4b:06:64:ae:89:
55:83:2e:d2:98:4e:1f:ef:36:79:81:fc:2b:53:ba:
5f:39:5e:a4:12:08:03:19:35:ec:69:32:20:f2:af:
78:e1:b3:74:73:01:30:1d:5b:d5:d5:3a:d3:c4:6b:
5b:0b:f6:35:ac:08:ff:69:56:3c:a0:20:50:21:98:
21:d7:63:be:3b:3b:19:46:d6:ba:10:e9:06:0f:c2:
db:8a:0a:a7:1a:af:46:ed:81:70:d9:60:ea:6c:dd:
d2:07:a3:d3:70:2b:33:c7:95:0b:f7:e1:ee:7a:81:
2c:33:c7:6d:f6:7b:19:d4:2c:aa:8c:9b:e5:d9:3e:
3e:47:67:d1:68:90:60:b8:d5:08:f2:b5:85:0c:be:
22:54:5c:04:1c:ee:4f:20:07:f8:40:92:2c:34:1a:
08:fd:83:77:dd:0d:11:d2:ac:4f:a6:56:dc:e9:4a:
0e:41:e3:5d:fc:ca:c5:04:92:04:ce:8d:6d:9d:14:
21:54:0b:ac:19:af:28:dc:cb:2e:b9:c5:f3:d0:de:
59:03:e9:2d:19:51:38:f4:bd:64:06:31:95:e6:9c:
d8:bc:c8:7b:d8:f8:8b:62:01:af:b8:31:74:27:58:
a3:30:b8:a8:07:eb:d7:9c:44:46:1b:85:a1:b4:d7:
d0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:68:3C:40:97:3D:A0:62:AE:E8:D9:D4:64:F0:66:A3:79:EE:D4:CF
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2e:ea:98:62:04:5e:8b:45:c5:59:49:ed:1d:5d:15:86:e9:
1e:8f:c3:dc:2a:db:13:ed:87:df:c8:db:d4:e2:54:fe:0d:6c:
60:b6:4b:ea:52:4f:ef:bc:43:8d:c3:86:96:8f:94:af:f7:88:
95:1a:ee:31:38:7b:24:35:81:88:09:b3:9a:65:98:9c:8c:7c:
6c:77:8d:69:f6:b5:f7:a9:8f:5c:c9:dd:0f:a0:5e:8d:9f:52:
db:2b:76:4a:ba:90:d0:16:2a:54:c7:6e:cd:f1:f6:47:c9:3c:
8d:4f:b7:8e:98:c4:35:bc:c3:41:ab:4b:78:68:e2:95:29:20:
1e:67:28:1a:c7:ae:59:c4:ad:b0:96:98:11:c1:e3:b8:3a:c7:
2d:6a:ac:fc:a1:1e:74:5d:1b:d5:df:c6:91:94:46:85:78:04:
dc:a2:33:48:52:80:91:99:52:2f:93:91:95:5e:c9:b2:7d:49:
02:c8:46:b8:9c:5c:ae:39:6d:b8:44:8f:6f:be:ea:1a:be:3d:
ff:bb:df:49:20:a8:ae:e2:c8:4b:47:a9:ce:a0:58:22:a4:2f:
b5:f4:30:74:05:fb:94:d2:c6:d4:aa:47:9a:ea:0b:a4:17:17:
6e:51:25:5e:4b:93:6e:c8:42:6b:9a:35:9c:ba:dc:7a:ef:f5:
7a:0c:85:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:08 2026 by rpki-client