Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier: grhKoxPaZRig/in435YbYeRmjf/4t5EFPkvMK/Dly7Q=
Subject key identifier: BA:07:87:0D:9C:4B:14:0C:4C:78:8B:CD:D3:D6:DB:82:AC:4E:E1:43
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer: /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial: 019CAB348CF3F7E3435233A311B84C214E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number: 0351
Signing time: Sun 01 Mar 2026 21:01:13 +0000
Manifest this update: Sun 01 Mar 2026 21:01:13 +0000
Manifest next update: Mon 02 Mar 2026 21:01:13 +0000
Files and hashes: 1: BWVL9f-KpOOHJHITcd_zmQga4BM.roa (hash: 16slF0zkT/3GuOWybhDOTweAZ519QDUn0ORtD9/qMi4=)
2: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: RBE63OEkRstK0VwS0mUpsRZa95wKk1RcHdYF7+2bN+Y=)
3: wFIGK-hJfwnzYHOy-0zpMlYIwX8.roa (hash: ijX/47c/1yaEzAjtMYS0nchNRSTG2HHJG2gdZxBcrMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:8c:f3:f7:e3:43:52:33:a3:11:b8:4c:21:4e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Validity
Not Before: Mar 1 21:01:13 2026 GMT
Not After : Mar 2 21:01:13 2026 GMT
Subject: CN=ba07870d9c4b140c4c788bcdd3d6db82ac4ee143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:6f:77:30:18:91:f0:76:4e:7e:82:f2:d6:
05:e8:5e:b6:a5:87:0a:f4:b4:80:54:65:9f:39:91:
81:43:3b:20:fb:13:0b:68:b7:30:13:34:ea:a2:52:
57:3b:32:b4:21:4d:14:83:b6:3e:54:2c:b8:c6:83:
05:13:2a:31:a1:f6:9c:42:37:c4:d6:2a:1d:14:a1:
44:49:fa:63:f9:e4:38:64:48:ca:4e:f6:a8:17:2c:
e4:1c:15:64:90:9e:32:e0:9f:4b:3a:9b:23:d2:35:
1d:46:db:05:a4:31:a8:14:1a:4d:04:50:0d:49:f1:
98:ad:e8:2a:6f:5f:c5:cf:dd:5e:11:82:6f:b4:1b:
41:9f:ef:30:c5:31:2d:df:7b:4b:7d:ac:aa:c5:eb:
4a:ac:20:2c:f2:b9:47:7d:3c:12:a8:3e:10:f4:67:
56:e9:21:66:86:34:15:43:51:38:61:a7:02:4e:6e:
bb:49:5b:d3:c4:da:50:ca:99:52:47:fa:c3:de:fc:
b4:36:a8:cb:47:71:14:07:80:53:7e:a8:62:38:33:
f9:d5:84:1e:6e:4e:0f:f4:c9:01:7e:8a:7b:d2:05:
16:93:e8:6c:39:aa:ed:1a:a7:13:3a:86:1a:8a:54:
6e:5f:5c:1d:af:1b:9b:8a:42:29:24:61:74:59:f8:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:07:87:0D:9C:4B:14:0C:4C:78:8B:CD:D3:D6:DB:82:AC:4E:E1:43
X509v3 Authority Key Identifier:
keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1e:36:db:63:de:ad:5a:07:b4:32:8f:cd:20:74:56:3d:5f:
8b:84:13:ab:b5:b1:09:6e:fa:72:fc:99:9f:68:e5:13:4f:01:
7d:65:46:65:09:72:05:36:6d:25:ee:a5:ac:0d:4a:67:94:18:
a0:7b:44:e0:1c:e0:5b:13:9b:90:09:03:8e:d2:c7:be:d0:5a:
1b:5d:90:1d:71:d7:fe:66:81:3f:f5:dc:bd:4d:46:8c:d9:ff:
af:5c:ca:6c:5c:d1:1b:1b:ea:e3:f3:c2:91:ef:5d:43:3b:0d:
f6:0e:28:8b:82:29:14:e2:b5:5d:9e:36:0f:cd:5d:aa:92:8e:
32:c7:78:9f:47:71:f7:37:7c:7e:8d:52:21:11:1d:cd:78:dd:
bc:62:1c:e0:d0:17:90:c9:b8:ba:ae:e6:2d:93:a2:b8:09:e6:
99:f7:6f:d7:4c:39:6b:70:75:75:d0:d6:fd:98:38:f1:05:26:
ac:ed:67:9d:ec:02:9b:43:88:2e:54:2f:83:7c:34:95:fe:69:
28:70:8c:f6:23:30:3b:34:26:3b:ff:cf:e0:8e:b8:05:4d:be:
56:09:82:db:81:ee:82:2e:89:60:e6:3f:98:23:29:17:69:3e:
c6:21:ea:ed:de:7d:94:9f:36:d1:97:fb:05:26:10:63:18:ce:
63:d5:2a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:45 2026 by rpki-client