Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
File: riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json)
Hash identifier: UD+kW6M/IO6Hbdz2x9fmMgqZlxIw6BzkIt5hoJhgRe8=
Subject key identifier: AC:7E:30:27:B9:E7:04:C6:F8:7B:84:22:58:04:19:8D:47:0B:1F:73
Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Certificate serial: 019CABD935F803AFEB4A2084B8CCC761F12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
Manifest number: 104A
Signing time: Mon 02 Mar 2026 00:01:04 +0000
Manifest this update: Mon 02 Mar 2026 00:01:04 +0000
Manifest next update: Tue 03 Mar 2026 00:01:04 +0000
Files and hashes: 1: M58qgi6VUeCk-By8lfph0n_DDmE.roa (hash: EY44xP7Z9BkJPTOaksViRj5GMqLeOgcwu8qx3t9cuLg=)
2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: LlzAWkIVGTfdz8UDp1FoCTsZF7gYnhpQP84rV8fX09c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:35:f8:03:af:eb:4a:20:84:b8:cc:c7:61:f1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Validity
Not Before: Mar 2 00:01:04 2026 GMT
Not After : Mar 3 00:01:04 2026 GMT
Subject: CN=ac7e3027b9e704c6f87b84225804198d470b1f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:4b:fd:b9:ad:89:2e:e9:25:fe:fc:0e:53:
62:30:d1:c0:64:d5:50:e4:8e:ea:9e:bd:ad:ef:05:
01:3e:dd:48:ab:05:cc:2e:0c:b1:af:2a:8f:ca:84:
1d:05:70:22:0e:bc:40:32:0b:79:3d:17:09:ea:27:
28:6d:75:af:ed:34:bd:cd:37:2a:a8:a8:80:4b:c0:
94:e8:e5:1f:e3:8f:a2:5b:c2:04:fd:8a:26:44:90:
4a:b6:57:56:aa:4d:36:b7:bc:e3:ab:3e:be:75:ad:
0b:65:60:97:0b:4f:bb:72:75:6a:e0:1f:2f:8e:0b:
9e:c8:54:40:c0:57:eb:25:0f:07:eb:10:ed:aa:84:
b6:4e:5a:0f:8a:70:94:58:a5:8b:be:86:c2:ec:e9:
f8:ea:85:e2:05:c6:d1:18:9c:40:70:c6:3d:75:5a:
d3:9c:f8:6e:8f:25:19:e3:71:9f:9e:4e:3f:58:a0:
de:4d:64:46:b9:12:ba:84:7e:83:13:df:db:c3:40:
e5:b6:9a:33:c5:58:88:a9:a0:1f:c7:04:2c:88:48:
9c:aa:40:06:98:96:1a:39:ed:ff:db:f6:e2:5d:9b:
11:41:6c:05:56:8e:54:77:c7:da:e9:42:b0:83:55:
29:c7:99:cf:e4:83:5b:b8:51:d6:20:23:cf:36:6b:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7E:30:27:B9:E7:04:C6:F8:7B:84:22:58:04:19:8D:47:0B:1F:73
X509v3 Authority Key Identifier:
keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c2:57:3a:8b:d4:de:6f:89:2b:8b:2b:f7:86:a6:a9:96:44:
be:15:d5:68:24:06:ad:90:39:31:b4:41:db:ec:59:ab:11:7c:
2a:25:48:83:29:c1:73:ab:66:58:31:a4:10:cb:75:0a:f4:9c:
10:86:8b:84:aa:ba:d8:d7:c2:93:a8:2d:b7:90:0e:c2:f1:3e:
fc:40:18:60:4d:23:8d:f4:a0:5b:46:10:9b:49:e8:64:9e:79:
5a:d7:b1:0a:56:ca:5d:c1:a2:cd:51:9e:71:75:b1:a6:36:3b:
cf:49:1c:06:98:00:48:dc:12:e3:ce:3e:eb:11:21:8b:41:27:
b4:a7:9a:b3:d6:a2:65:51:00:16:c6:79:83:8d:08:11:fc:55:
41:77:c6:26:b9:7b:84:c8:b6:52:88:1a:c5:f8:b8:05:ae:ec:
8e:27:ce:02:b0:f4:63:95:ea:d9:03:90:28:8a:21:fa:d7:47:
03:1b:4a:99:99:32:f3:02:d3:54:f1:b4:c7:ad:14:02:0f:42:
ac:5f:f5:f0:cd:ec:2f:d3:b2:90:3e:af:f6:0f:48:04:1c:ba:
6e:fe:6c:c9:31:14:9d:4d:e8:3c:cc:48:6a:3b:3f:7e:df:29:
d2:57:01:45:e4:02:bf:d7:98:fd:49:e1:25:9d:0c:92:b5:d5:
39:35:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:57 2026 by rpki-client