Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
File: RfwKpabDOR7__6g0JbI7JkxxCF8.mft (raw, json)
Hash identifier: tkGp6Tw+Mz245AE9zw/hoV4j2npcHz8OA59COxpZ/Yo=
Subject key identifier: CA:DA:C8:A6:97:3B:6B:09:C1:89:17:5C:5E:74:87:89:45:A9:D5:22
Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
Certificate issuer: /CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Certificate serial: 019CACB56E055AE408D084A209A6A5E58684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
Manifest number: 05F8
Signing time: Mon 02 Mar 2026 04:01:37 +0000
Manifest this update: Mon 02 Mar 2026 04:01:37 +0000
Manifest next update: Tue 03 Mar 2026 04:01:37 +0000
Files and hashes: 1: RfwKpabDOR7__6g0JbI7JkxxCF8.crl (hash: 1V+s41DzlpLGnyKWdhEmqXeH6eByg6z/2Zc1xn283mw=)
2: tgLyfLjlcwMzEupMfST57LV3Kh8.roa (hash: 0v0L+j/WsnBYBPti3JFWgZtxat+165mo5Q0XdxS+nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:6e:05:5a:e4:08:d0:84:a2:09:a6:a5:e5:86:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Validity
Not Before: Mar 2 04:01:37 2026 GMT
Not After : Mar 3 04:01:37 2026 GMT
Subject: CN=cadac8a6973b6b09c189175c5e74878945a9d522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:30:ed:1e:cd:ee:ed:2d:44:5f:05:ce:fa:
9d:10:7c:07:ec:9a:ba:8f:75:0c:f9:04:cd:bc:0e:
2a:54:05:0e:ff:7f:94:d2:01:8c:c6:5b:4d:5b:b9:
2c:fb:c4:65:a3:33:75:1b:f5:7a:2f:e1:21:f1:93:
23:e3:dc:ec:7b:05:32:93:a2:a2:34:3f:cf:52:d3:
46:f2:59:f4:40:10:18:1e:63:5a:0d:37:d5:0e:42:
01:fa:9a:9f:af:94:5a:26:91:3e:40:da:24:37:3a:
23:30:34:2b:57:c7:9e:9d:11:15:bc:f5:42:e0:00:
02:48:97:ba:77:a8:20:45:17:2d:8f:db:46:72:9a:
0c:f2:97:e6:80:90:00:5e:3e:7d:e1:89:a8:ba:53:
05:ae:cb:d2:50:b9:69:80:aa:ba:86:a5:4a:a2:a6:
5f:fa:99:6f:25:2e:2e:e1:6b:12:77:b1:1a:05:54:
98:db:fe:85:c3:3b:78:02:d6:9b:4e:61:ee:97:53:
ac:74:2a:67:ca:c9:b8:39:08:fd:ab:13:1a:bf:50:
84:46:22:5b:26:d0:16:9e:08:8f:13:a5:a7:d5:13:
89:0f:39:ea:86:74:ab:85:61:b9:db:4c:48:b1:38:
61:fe:46:87:89:f8:56:a2:eb:3b:d7:22:37:1c:17:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:C8:A6:97:3B:6B:09:C1:89:17:5C:5E:74:87:89:45:A9:D5:22
X509v3 Authority Key Identifier:
keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fd:d9:7c:1f:13:bc:54:3a:7d:db:41:7f:fa:e4:05:8a:34:
fc:ba:6d:c0:32:d9:be:e3:71:a3:74:d9:20:2f:05:fa:d7:b0:
63:48:9b:c8:70:6a:15:34:fd:2f:a6:6c:aa:cf:cd:d5:02:f2:
bb:67:dc:d5:8e:6e:31:34:69:72:9d:52:89:38:e4:7c:2c:9a:
2d:1f:73:2e:7b:7d:2c:23:92:e3:ef:76:8a:65:d1:fd:c2:a3:
ca:62:7f:9a:9e:61:fc:8e:c9:db:51:32:fc:7b:79:1c:31:60:
30:2b:8c:39:af:4c:86:da:9e:23:f5:29:de:2c:58:40:b4:76:
c2:08:84:4c:ea:dc:b3:ba:c0:8d:34:ba:39:3c:1b:26:1a:90:
c2:8e:b3:3b:01:0b:9d:8f:0f:d8:68:d4:71:5a:80:76:ef:aa:
38:c9:de:f9:fb:54:4b:b6:db:66:9e:7d:56:4a:c7:e2:8a:8d:
05:f8:f9:8d:1c:43:5d:36:34:b8:28:9c:71:92:33:5a:d2:02:
3a:cb:87:bf:6c:fd:b0:50:a9:3e:24:be:5d:0f:6a:3b:5b:6c:
6a:b5:03:ab:33:53:fb:e6:54:56:fb:be:ce:ff:15:89:0d:be:
41:63:07:2f:fe:7f:6f:ac:3c:b6:b6:be:75:31:b0:55:d7:ea:
9d:2e:db:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:55 2026 by rpki-client