Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File: MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier: Jd4kqqNNMj3WUWXuIAlOcfRgB+nHCN4i3rAH2iTUErg=
Subject key identifier: C3:16:B6:BE:C2:0F:70:58:09:3D:37:5F:AB:C6:BD:ED:56:A8:1D:FF
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer: /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial: 019CAC0FD7CFF166D4A74461DB8A04EF04CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number: 13AE
Signing time: Mon 02 Mar 2026 01:00:45 +0000
Manifest this update: Mon 02 Mar 2026 01:00:45 +0000
Manifest next update: Tue 03 Mar 2026 01:00:45 +0000
Files and hashes: 1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: kJn4JqRQ0SbHlXlhprqBrcBqwAPwprUtGhNRCHzfaxE=)
2: UO3-ECp44i-4NHov7ZcCJgmk2iw.roa (hash: pq04zRZsIbyhYdzYcYCke50JhIGeXTbV4hV+QB02Ah0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d7:cf:f1:66:d4:a7:44:61:db:8a:04:ef:04:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Validity
Not Before: Mar 2 01:00:45 2026 GMT
Not After : Mar 3 01:00:45 2026 GMT
Subject: CN=c316b6bec20f7058093d375fabc6bded56a81dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:ff:9c:50:a7:3b:f3:7f:ed:bb:0a:53:1a:
c2:92:1b:e9:2a:17:65:f9:de:a4:2f:e2:f6:f8:57:
42:be:37:9a:15:1c:31:e9:fd:2e:11:57:61:3d:bd:
08:57:32:3a:45:fc:99:ee:1b:3d:2e:ee:0b:24:9c:
0e:2e:b3:98:a8:47:df:fd:07:59:72:57:8c:1e:a3:
97:bb:77:8d:99:5c:c4:e7:16:c8:44:44:fa:18:93:
c1:e7:c6:5c:d8:c4:f2:88:d4:3e:20:03:8b:a3:a3:
85:70:8a:e7:3e:c7:8f:6e:47:12:dd:f7:90:88:b6:
4f:a5:73:bb:4e:dc:c2:21:70:4b:bd:68:a8:29:3f:
10:26:bc:39:e6:f3:ed:91:e1:e7:f2:71:98:aa:c9:
37:a8:ad:5d:64:d8:7d:8d:85:c8:5d:da:bd:e5:7b:
00:f4:d6:df:f8:87:c5:81:39:22:76:24:aa:0c:d1:
bb:57:dd:64:d0:5b:a3:6b:da:c1:65:19:a5:5e:c0:
ce:6c:fa:7b:d8:ae:da:94:f7:2a:e9:4b:8a:66:78:
0b:78:4b:b6:95:b1:b9:ae:93:d6:c4:83:cc:31:10:
b0:7c:16:4a:f0:77:23:f4:20:3e:cb:8e:e9:8c:aa:
37:8a:01:8a:0b:79:23:ac:4e:9d:5e:d5:b6:18:52:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:16:B6:BE:C2:0F:70:58:09:3D:37:5F:AB:C6:BD:ED:56:A8:1D:FF
X509v3 Authority Key Identifier:
keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e3:fa:b8:08:fc:d2:70:f1:75:d2:62:d4:20:cd:96:5f:b2:
c2:be:bf:94:a8:04:89:fd:5b:4d:ba:69:db:94:dc:d7:f4:e3:
3a:25:6d:08:6c:4b:0e:b7:d0:44:4a:d5:d8:37:5e:43:51:86:
ab:1e:72:f2:dd:12:a5:4a:2f:4f:82:bf:4f:41:03:30:da:18:
8f:9c:cd:73:ed:d6:e5:41:e4:27:1c:1e:c8:d9:08:f6:df:eb:
11:d5:39:02:7b:2f:c0:95:e5:10:bd:7a:d7:00:1b:a1:12:6b:
a3:29:bb:33:cf:c8:1b:cc:53:8b:a7:51:5c:28:55:93:91:9c:
fa:bb:1f:07:d9:8e:83:94:55:3f:09:5e:8f:8c:6d:f2:60:65:
b7:eb:f3:62:71:6e:87:69:43:a5:62:13:41:53:d5:dd:8b:1a:
95:45:57:08:cd:b6:b9:19:10:5a:15:68:3c:d4:9a:a8:48:06:
e7:a4:29:88:4b:5a:93:39:b8:72:da:41:45:fd:20:4c:32:a6:
34:00:b9:02:e2:d8:c8:4d:0a:a6:82:89:16:8b:6e:14:f9:1b:
f8:76:27:9b:54:10:d3:ae:70:d3:7b:1f:67:ff:30:f9:dd:5f:
da:f9:d5:38:79:35:b4:88:94:83:70:56:fd:cf:e1:71:60:fc:
0b:45:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:04 2026 by rpki-client