Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: RJZ1wXxOQxutQyL6WsRELqiS3bfyfkPs3W2128rjBIg=
Subject key identifier: E7:DA:FC:C6:DA:AA:C5:69:2B:70:02:A4:43:96:13:5D:B6:1F:21:2C
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 019CAC7E11A842FFAA15BC8059F83A819F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 054E
Signing time: Mon 02 Mar 2026 03:01:09 +0000
Manifest this update: Mon 02 Mar 2026 03:01:09 +0000
Manifest next update: Tue 03 Mar 2026 03:01:09 +0000
Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=)
2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: E4dNy0ITyY9sowBPaRpp1XwO6p022KZqS8Kch8rTLYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:11:a8:42:ff:aa:15:bc:80:59:f8:3a:81:9f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Mar 2 03:01:09 2026 GMT
Not After : Mar 3 03:01:09 2026 GMT
Subject: CN=e7dafcc6daaac5692b7002a44396135db61f212c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:27:0c:6b:4a:1a:82:53:60:9e:52:67:dc:8d:
10:ea:11:64:cc:bf:9e:ae:45:49:4f:b3:31:a7:c8:
6b:d4:a4:5e:98:e0:98:e7:aa:43:bc:f4:8b:4a:a5:
0a:a9:13:13:5f:02:89:5b:da:bd:e2:be:1c:c1:79:
8e:cf:2a:40:06:72:39:32:97:7f:30:2d:6c:3d:e8:
15:5b:a1:41:6c:e6:74:a7:fb:ec:dc:4c:57:66:4c:
c6:db:8f:a1:e3:e7:21:ef:0e:f1:06:75:56:47:bd:
d8:b6:90:eb:8a:f7:b7:f1:fa:4b:ee:38:cc:dd:ea:
7f:a6:27:08:5f:da:8d:ec:2d:31:20:31:b0:29:5c:
f1:58:fc:e8:8a:4e:f4:c2:9c:0b:e4:52:77:82:b7:
03:08:b8:d6:b6:7c:9b:7f:1d:93:00:67:f9:b9:fa:
93:e9:27:df:24:b8:71:7b:30:94:1a:86:63:c8:9e:
a4:31:ba:61:8a:8b:c8:d7:58:06:69:cb:d1:6e:09:
a5:0b:65:b8:38:80:1c:d3:1f:d4:2a:f6:e5:02:6b:
86:67:f1:be:fd:ec:78:5d:55:08:e5:15:3c:1e:e8:
50:88:9e:b6:8b:6f:42:cc:19:0d:06:08:92:83:03:
35:60:5f:96:eb:95:d3:d5:65:b1:bc:1b:c0:30:b1:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DA:FC:C6:DA:AA:C5:69:2B:70:02:A4:43:96:13:5D:B6:1F:21:2C
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:48:d2:e5:07:10:23:c7:12:2f:a9:c8:2f:37:a4:55:88:7c:
81:c6:a0:b1:d4:9d:cf:30:4e:85:be:5f:fb:14:b0:0a:ca:1a:
01:50:93:98:cf:b2:e7:39:7a:1f:5e:92:90:16:f4:77:d8:ad:
70:55:b2:23:3d:2b:3c:9f:25:a4:15:1a:b2:fd:74:bd:03:68:
2f:07:7f:c2:a9:50:0d:d7:f1:ff:ee:62:8d:0f:fb:90:23:69:
e2:73:7a:0f:0e:b3:a7:d7:38:71:61:fb:9a:75:25:e3:d9:d3:
ee:80:83:cd:0c:38:75:88:1c:26:c0:91:2c:6d:41:eb:b6:21:
09:08:71:6a:fe:ed:9f:e9:cd:9f:91:dc:ff:77:d9:d7:75:88:
34:4f:85:04:02:b8:2a:1b:cb:7a:5e:ef:a1:22:22:15:a6:f5:
62:89:01:c9:96:98:6f:5c:86:c7:ea:6f:22:2e:05:44:70:15:
9e:9b:89:39:de:6c:de:a9:45:9c:20:15:19:9e:b1:46:1f:04:
37:9c:2e:dd:4c:86:ff:e0:36:50:ea:8a:46:84:3b:09:2e:3c:
32:77:e3:ab:17:4e:92:eb:f9:94:f6:ce:05:03:67:2c:eb:0a:
7f:63:eb:78:b9:ab:2b:b2:7f:9e:80:16:09:88:bf:08:f4:a7:
11:11:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:57:20 2026 by rpki-client