
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
File: rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json)
Hash identifier: X3O/9xE7gqdUqevg/PtVxQykxeTrK9035GocE6JjEJ8=
Subject key identifier: 38:D1:53:63:2C:2F:87:13:CE:8B:12:FE:FF:17:15:CC:F6:DB:2B:23
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 019CAC7DBACDCD335ACDC4B05E807511DBE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
Manifest number: 0C08
Signing time: Mon 02 Mar 2026 03:00:46 +0000
Manifest this update: Mon 02 Mar 2026 03:00:46 +0000
Manifest next update: Tue 03 Mar 2026 03:00:46 +0000
Files and hashes: 1: CXD8wfMhKiKiO997lKcwfqvgnd4.roa (hash: GXzecNWlAWU/oBfDZ4cMgGfToo/UFOLMCS/xikLLiZA=)
2: Nj5WcVxMsB8s2IvjCOfX6OYyL9c.roa (hash: rf5S758DEbKW96IfUMXXqn9C0gkyLzbP4cr3lVYPPio=)
3: p5jfW6ha4amA42QcQVPgAaZ9Pmw.roa (hash: hdqNSuQrQNGkaTv7LpPhrSIwMr6CxzgGsrUQLxZoMvg=)
4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: 4ZuSAF7sAHMTVzZQ5lK0xzH2O0parB+EnhK0MGd6jGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:ba:cd:cd:33:5a:cd:c4:b0:5e:80:75:11:db:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Mar 2 03:00:46 2026 GMT
Not After : Mar 3 03:00:46 2026 GMT
Subject: CN=38d153632c2f8713ce8b12feff1715ccf6db2b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:15:f5:a5:ae:ba:26:61:b0:d6:ee:68:d8:
17:ae:59:a1:87:9e:09:1b:a9:b9:98:64:65:8a:2f:
78:ba:99:86:aa:45:9e:cd:24:a8:6f:6d:90:55:1a:
d2:5a:97:53:a5:9c:a7:62:ea:10:65:cc:c1:7c:56:
bf:63:2e:83:11:c5:e1:03:44:98:96:84:32:44:5b:
f9:79:b5:12:ef:eb:1f:5c:88:36:97:dd:d1:b5:00:
93:f8:4c:2a:2c:ec:08:da:09:1a:75:e7:30:ae:1f:
df:89:78:06:bc:95:41:d6:35:17:24:12:9e:0d:1a:
28:c9:09:6b:74:08:22:45:32:85:39:8e:67:cc:7c:
c2:05:f8:7a:db:d0:fc:5a:70:05:bc:68:1c:c2:ca:
11:57:53:93:58:f9:c9:dc:ee:f7:58:41:30:d9:02:
46:79:72:eb:89:4c:d3:00:b3:1a:f7:83:49:ce:c2:
42:8e:7e:50:a6:3c:bf:4d:15:b8:27:ba:1a:bd:d2:
cd:61:88:57:f8:45:66:19:17:ba:d1:65:27:4a:e5:
60:ee:f1:51:15:e2:2f:dd:0c:9e:ae:cf:68:0c:e8:
ba:e7:d3:9f:66:ee:a9:f5:5d:30:fe:37:a5:ac:00:
39:a2:08:b9:03:3f:59:bb:a5:30:2d:7c:74:30:91:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D1:53:63:2C:2F:87:13:CE:8B:12:FE:FF:17:15:CC:F6:DB:2B:23
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c8:ff:d7:c3:81:00:8a:b1:89:1e:b6:09:48:7f:c2:d8:9c:
a2:72:1d:16:db:ec:7d:4b:b6:ac:09:1f:e2:7e:90:0b:6a:c0:
08:35:cc:ec:bf:26:4d:04:73:c1:85:e9:8b:7f:ef:6c:c3:35:
6d:01:16:3d:3d:a1:b0:01:53:2f:19:21:44:4a:8b:5b:32:76:
68:4a:94:44:43:e5:66:7c:65:04:18:8d:78:9a:69:a8:dc:97:
e2:af:0e:25:e7:a9:c6:e8:c8:04:dd:fb:10:22:b9:ed:e9:09:
b1:1e:16:56:17:77:3f:07:ae:75:80:a4:09:ad:d3:9d:e4:0d:
7e:43:03:d7:70:36:42:43:26:0d:ce:d1:4e:49:a6:21:6a:ba:
31:61:e6:f2:38:7a:74:7b:98:37:27:fe:49:f0:40:0c:5e:3f:
ab:6b:da:df:c5:3d:62:97:5f:ea:df:55:0b:9f:1b:eb:19:42:
fa:77:a1:13:2d:56:b1:8c:7a:8c:4e:67:4b:2c:11:da:c8:fc:
41:72:f7:d9:75:89:bd:51:c1:87:0e:16:f8:93:4e:3e:4e:06:
0a:0a:9a:c1:ac:e0:d7:c8:d4:d3:84:86:ff:a9:1c:92:7e:21:
c1:7d:e7:04:b8:5b:9d:9c:38:02:f7:1d:b1:1d:7b:5f:56:55:
9f:22:ae:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:44 2026 by rpki-client