Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: CFqVxB6X2qAtAKfNZ81UwOtx5LWOvPgUZGm6n9mgN9M=
Subject key identifier: 86:0D:1A:CE:48:44:5A:15:BF:D9:50:60:98:63:02:48:41:97:94:B2
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 019CA97CDCAF8702DAB5D41A29FE57962331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 13:00:58 +0000
Manifest this update: Sun 01 Mar 2026 13:00:58 +0000
Manifest next update: Mon 02 Mar 2026 13:00:58 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: hnmuiUMM7WGn73iWAbSAM1VPyQ85XtMtKH0UbDCKX8Y=)
2: iyOoKbcuiPTHCLxMCiy7DxXr5rk.roa (hash: PXqcza2cwz/3mR448+fTEDzYFSGuytoJUnD8yJR22Mo=)
3: rjqoaksN8bIK2O4SRzuLcMffaQQ.roa (hash: YtctfngTDGfahIUPg5R6y0N3cZYKDE1Tr+6r4LZlIhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:dc:af:87:02:da:b5:d4:1a:29:fe:57:96:23:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Mar 1 13:00:58 2026 GMT
Not After : Mar 2 13:00:58 2026 GMT
Subject: CN=860d1ace48445a15bfd9506098630248419794b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:8a:f3:d1:35:4d:d3:bc:bd:4e:50:da:c7:
1f:7d:72:7d:8f:39:36:10:27:f9:ca:fd:68:6d:75:
6b:6d:f9:df:76:0f:6c:fd:3c:a0:c0:14:85:26:ce:
23:c4:aa:f2:8d:c1:c3:71:28:47:ab:d9:82:10:de:
c5:be:0b:76:72:7a:f8:81:8f:83:ef:c9:12:40:b1:
f2:dc:0b:90:1a:5a:6f:8f:6c:9d:80:40:09:74:4d:
c7:71:76:8d:c1:b7:cd:f3:40:97:9d:90:1d:e4:90:
2f:29:35:74:1e:f9:3b:0b:5f:26:be:99:f2:ae:0c:
d3:12:4e:bf:3b:2d:0b:70:9f:14:54:69:71:5d:08:
b5:83:99:5a:78:ac:54:d9:5c:b1:25:86:f5:82:c4:
ab:6f:f8:f0:84:e8:94:59:4c:37:b8:fb:10:8a:15:
2e:e0:4c:c8:0d:8a:c3:99:13:0e:31:56:fc:fe:e5:
4a:9b:f8:28:9e:a8:81:59:1a:6f:19:06:37:66:48:
ef:62:33:3d:94:72:2c:b9:3c:00:2e:b3:c5:b2:df:
d4:6a:9c:e7:64:90:f7:26:37:9a:b9:63:80:54:a7:
fa:56:fd:cc:24:c3:7c:90:19:1d:6d:4f:b1:84:d6:
d0:f8:3b:9d:79:c3:25:0b:b3:40:74:cd:77:d7:cb:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0D:1A:CE:48:44:5A:15:BF:D9:50:60:98:63:02:48:41:97:94:B2
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:07:f5:b8:d3:60:d1:a8:8f:5a:00:b3:bc:b9:26:f1:55:45:
64:19:61:99:34:a5:5a:9d:ce:50:7c:09:e5:de:bb:7c:03:ae:
c2:45:d7:06:21:f3:fb:1a:70:69:f0:63:15:94:f1:be:8f:01:
6d:c8:d9:f7:bf:ef:e2:7a:78:7b:3c:c7:97:b3:dc:da:8b:0e:
ef:4d:b8:b3:0e:62:96:97:06:b4:41:70:ad:fd:c9:ed:61:3d:
3f:c4:e4:c0:1c:7f:ac:0b:5c:96:99:2c:c8:6c:5e:ac:3e:52:
e3:68:6e:92:28:cc:86:61:ac:1b:a9:11:1e:bb:04:cd:2a:28:
dc:49:b6:1f:e9:19:c7:c4:83:18:1c:27:52:52:4e:99:15:09:
d9:fa:bc:de:4f:1b:d3:ce:ed:35:9c:4f:bf:e5:b5:d7:12:98:
a0:3c:eb:ba:0b:41:1e:51:8f:a6:bb:84:26:1b:f8:a5:4d:af:
90:de:25:a9:22:d3:3c:e7:30:96:32:7c:3c:a6:56:e6:be:6e:
65:80:f4:7f:26:cc:3d:f1:f4:cd:44:e8:65:b6:c1:c9:6b:72:
35:36:d7:38:bd:64:11:c9:f0:9a:b5:a5:fd:65:97:e7:a0:be:
ba:6b:07:fe:66:24:ae:31:2f:a8:b0:72:67:d7:d9:8c:87:c1:
1d:f7:07:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:03 2026 by rpki-client