Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: U2FifeJhccojO9ChMJwDE1d2zFtWQlVZBGTXLUv6m5U=
Subject key identifier: F4:30:2B:06:B8:37:7B:B2:77:42:6F:64:FF:17:43:44:7B:15:34:F9
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 019CAC0FFAA4A657BABEBFE0CFEAA7809CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 154D
Signing time: Mon 02 Mar 2026 01:00:54 +0000
Manifest this update: Mon 02 Mar 2026 01:00:54 +0000
Manifest next update: Tue 03 Mar 2026 01:00:54 +0000
Files and hashes: 1: 6C3RxLRpZvjkhDqeNyvhxuNtNTA.roa (hash: kl9YGSouHVzVMvRPPAag8+zWXrah44Y/BhsIajbDopE=)
2: 7mW4wOHRW1H71d-sSOc_lK75qpg.roa (hash: 2C20Y1HJD9NUUe3oyFVws916YL4BTi4Ci2cXXpoCfNg=)
3: 8ubn5uk-Nn0Dg6ou9x8bCYPQbqc.roa (hash: 0WUQ+r+hiGXINe9SN2Kz/K2ffPmAOMbSUmJhrABwNlo=)
4: UvogVQiFlOzL1lQpufyLEmyZKjQ.roa (hash: cIiYR4bOC43Bt+bdDmmyoUYytMbqFO52hP62NEaq3as=)
5: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: o0HtwkPySwHWU6R6+5NmScNaZmXtI7/QqkTJ2jgKVh0=)
6: dop4_-0zlvctrufVT5v0wxv-AEk.roa (hash: dtFhCs02IJalxP2PiP4DNh5wKXd+5+aq9kRU5RiYqkg=)
7: m45yjB9heCQgWbdWEVZCVnmp6X4.roa (hash: tpHOEqU2bYIH0qEm+Dci7EwfRuPoT7dkTl0e7TMKNVk=)
8: qi3SqAR4IIR7pmGIGinOQFwfq00.roa (hash: 7JqUABvsjicn+d6phPLtYhYvVDr7+WhkTEpAXtYm16M=)
9: x4wXEKXMOxtK_lFwko7eiWoBBHU.roa (hash: aj4RuLLfbpjb0EvT7ddowihSUQXljP0or+HYSFta5Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:fa:a4:a6:57:ba:be:bf:e0:cf:ea:a7:80:9c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Mar 2 01:00:54 2026 GMT
Not After : Mar 3 01:00:54 2026 GMT
Subject: CN=f4302b06b8377bb277426f64ff1743447b1534f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:6f:68:16:9c:5b:98:58:69:05:63:a2:b8:
3f:35:29:32:cd:c9:ff:83:db:6d:98:fe:b2:a0:71:
71:ee:a4:65:49:20:17:68:ee:34:a7:ba:4c:05:dc:
64:1c:3b:c3:05:7a:9c:31:5d:64:a4:ec:4d:75:91:
d1:63:59:8e:a9:80:ca:4b:a9:df:3d:e2:62:60:cf:
3a:53:11:3b:b7:4f:f6:bd:03:bb:26:3e:51:15:de:
a4:c2:e9:a6:70:c6:43:27:0f:78:5c:f6:a5:b4:d4:
48:5e:2d:9b:eb:0c:21:79:32:b7:f6:ab:c0:37:d2:
54:cc:c4:7b:69:d3:d4:ee:18:de:74:e8:0b:8d:1d:
88:59:af:a4:17:b9:8c:cf:35:35:0d:94:aa:26:27:
1c:54:dc:61:f3:bf:70:fb:0a:6d:c2:53:7a:4f:0e:
8c:f8:8d:57:5f:c6:2c:96:52:c1:ad:24:29:89:0b:
a4:55:12:41:c9:85:91:fe:f5:50:5e:51:a3:1d:8d:
9e:1a:d0:d7:1b:7e:89:3a:5f:a3:5d:4c:f2:b3:d1:
56:82:0d:59:cb:62:5d:2f:cd:1f:db:8e:48:7e:98:
ff:93:c1:72:b3:aa:cf:9e:cf:0e:9b:ef:21:fb:da:
da:2d:9a:a0:60:de:70:c4:dc:7e:28:3a:a8:67:67:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:30:2B:06:B8:37:7B:B2:77:42:6F:64:FF:17:43:44:7B:15:34:F9
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:83:35:fd:2f:33:99:11:42:9a:24:cf:21:8f:8a:50:ee:bb:
60:94:03:3f:e4:fd:84:32:5e:8d:ce:2e:2f:58:78:43:c6:00:
92:2f:6d:25:e7:f6:38:38:ec:92:9b:62:76:75:0a:75:fc:63:
28:4f:55:e9:cc:fb:85:a6:aa:70:58:a2:6c:73:cc:33:48:65:
56:60:55:1d:7e:35:b7:73:f2:84:b9:f8:ea:11:77:5b:c8:e4:
f5:05:84:43:f1:2e:f4:1e:96:50:db:1d:55:c9:73:b3:c9:13:
3e:29:2b:4a:47:df:ce:2e:34:a7:62:55:5a:50:19:af:ed:3f:
1a:bf:1d:f4:2f:12:40:f7:ee:7d:7b:9f:7f:65:cf:8d:36:d1:
f2:46:4c:d9:31:b9:aa:4d:75:c4:7d:dd:35:87:b5:f8:3a:62:
a4:b1:55:f3:33:3e:00:95:4e:1d:49:cc:50:24:7d:ee:77:6b:
06:7d:2c:6f:35:cd:8e:b1:ef:1d:34:ae:e1:5a:71:db:e5:c7:
6f:c7:d6:05:1c:13:ff:77:ea:90:52:76:44:0e:be:9b:6c:3b:
50:8a:82:f8:b7:61:74:a0:b2:b4:d9:b3:fd:fd:b8:db:98:65:
30:10:99:be:58:84:07:bd:22:54:be:6d:ad:da:dc:2e:b8:59:
a3:d4:58:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:16 2026 by rpki-client