Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier: 68nfcasQNoRfwOhqjH3L/fh8CqyT6SjzmzCe/ZwWCW8=
Subject key identifier: B0:D5:82:05:10:5A:55:A8:5D:D8:87:66:46:19:FF:EE:F2:D7:3D:4C
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 019CAD90C4C076622326D74E54F49C36EA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number: 0B15
Signing time: Mon 02 Mar 2026 08:01:11 +0000
Manifest this update: Mon 02 Mar 2026 08:01:11 +0000
Manifest next update: Tue 03 Mar 2026 08:01:11 +0000
Files and hashes: 1: 9tGzK-FCrgGlyf8btSGObHH6Jkw.roa (hash: NlammvVp7/v8P1KUtxpc69bkMW7FgZFFOJxxoLecI3k=)
2: NJAtBEz3Ixv_CCYeRvRJJECYvnk.roa (hash: 8VY+OH2qENoVZQA8QBMe/XGjN1hAsUDKuWI2emaWxMU=)
3: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: asbScKon+qdU3VaVBdvrFqTchzT1ZIkdW+o2MRQ3B9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:c4:c0:76:62:23:26:d7:4e:54:f4:9c:36:ea:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: Mar 2 08:01:11 2026 GMT
Not After : Mar 3 08:01:11 2026 GMT
Subject: CN=b0d58205105a55a85dd887664619ffeef2d73d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:d0:2c:f3:5b:a8:4a:a3:80:d3:5b:a5:59:
a5:77:a7:55:13:f9:48:f4:fd:f5:a9:f8:61:15:38:
88:ef:2a:57:ea:72:3f:90:e5:dd:7f:7e:d9:53:50:
25:f8:34:6e:00:3f:45:32:94:90:7e:ef:bc:9b:19:
14:95:9e:80:c6:ba:f9:98:06:ef:d6:0a:06:c5:43:
e7:d1:50:01:39:39:ff:9a:12:1a:86:f2:1c:df:00:
2f:54:e0:d9:27:2f:9a:bc:42:1d:40:89:11:a9:44:
8f:31:c4:6e:06:d0:4d:9f:7b:45:8f:96:34:0f:28:
ab:1c:7d:1a:8c:49:15:c3:e8:ae:f4:1b:45:ee:1b:
4c:4b:02:d4:40:5e:05:49:21:3e:68:e6:d9:bb:03:
68:d0:91:18:8f:cf:97:5c:ef:cc:03:69:65:b2:61:
62:46:f8:e0:e8:c1:d0:f8:b9:6d:91:6d:db:83:de:
c4:11:e7:01:09:97:42:60:5f:87:d9:31:4b:8c:07:
40:d5:a1:a0:2f:51:35:56:9c:84:3b:ba:56:5c:16:
4f:4d:37:5a:55:14:a8:7e:81:64:39:de:a9:4a:e9:
68:32:b8:d9:2f:36:d9:fa:0e:ec:19:15:00:6d:70:
74:e4:c3:07:64:35:7f:7a:f1:e2:c2:19:1b:bf:c3:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D5:82:05:10:5A:55:A8:5D:D8:87:66:46:19:FF:EE:F2:D7:3D:4C
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4c:3e:d9:4b:b1:ed:58:06:1a:57:9b:cc:a4:3d:84:24:bb:
44:66:05:f3:0f:78:a7:af:c9:b3:b7:df:9d:22:da:b6:44:26:
75:27:01:a5:8f:76:91:b6:a2:ec:1d:9f:62:ce:b9:8e:42:5e:
30:b0:5e:d0:f1:16:ea:f6:63:fd:1d:93:18:fc:d4:c5:c3:03:
3c:d5:e8:98:05:5e:27:42:01:01:e4:34:a6:e6:96:f1:b6:ed:
6a:5a:01:4f:9e:4a:b4:92:e4:db:cf:34:4a:be:e1:08:c7:66:
13:68:60:20:4b:2e:fc:26:7c:06:ba:ce:9f:7b:2e:da:a3:d8:
b3:e0:9b:ff:c6:21:69:a1:c1:43:a0:5f:98:44:c7:f0:c3:e6:
a9:74:e8:c6:bb:1a:b0:e5:2b:22:2a:f8:59:f9:f5:c2:74:e9:
a7:4a:48:17:e6:9f:11:c9:e0:83:34:a9:e7:ec:34:e3:0c:c5:
ca:d0:81:2e:69:94:db:2d:fb:30:5d:23:64:9c:0d:31:ac:10:
01:bd:1a:d0:a4:91:a5:40:e6:d3:83:8d:43:a7:8b:ff:90:d4:
c1:6f:83:93:5d:35:31:37:2d:9b:0e:9f:d0:b4:c2:3b:2d:e9:
2f:d5:b1:51:9d:e3:e3:dd:d8:70:75:08:2d:44:42:2c:ce:49:
75:1d:ab:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:14 2026 by rpki-client