Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
File: rm8YQW19RwqgStALyldoPHidhU0.mft (raw, json)
Hash identifier: PbJo85kEG+uGRN64rO2cFRjP80Qtj4EjlzrTol5WtII=
Subject key identifier: EB:7E:EB:EA:8D:A1:CD:11:C3:DC:42:1F:55:F3:F1:32:67:34:56:37
Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Certificate issuer: /CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Certificate serial: 019CAAC704C557184D13CF11777E05C9AE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
Manifest number: 0F2C
Signing time: Sun 01 Mar 2026 19:01:35 +0000
Manifest this update: Sun 01 Mar 2026 19:01:35 +0000
Manifest next update: Mon 02 Mar 2026 19:01:35 +0000
Files and hashes: 1: 4FbUQPbInKsJV6tUxAOCJ09zMtA.roa (hash: XDmbXmDYXHXEEVlnrPjHgOg48u89KTGeW87AL4CNgDM=)
2: rm8YQW19RwqgStALyldoPHidhU0.crl (hash: os2cGL++iXAYTWAtsu/QfdDk4HJ2QvSsuRkTFnVZ1kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:04:c5:57:18:4d:13:cf:11:77:7e:05:c9:ae:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Validity
Not Before: Mar 1 19:01:35 2026 GMT
Not After : Mar 2 19:01:35 2026 GMT
Subject: CN=eb7eebea8da1cd11c3dc421f55f3f13267345637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:1b:c9:ab:e4:c0:46:2f:4b:7c:de:79:42:
a9:10:c1:cb:c0:31:ae:e7:c3:80:ab:e6:15:3f:1e:
8a:f1:3f:cf:f6:76:4b:dc:3b:71:35:97:96:bb:30:
68:2d:79:35:86:cb:31:13:1c:11:14:f5:3b:92:2a:
16:be:48:2d:33:4a:77:44:6b:0f:ab:73:2c:b3:73:
20:85:be:e5:2d:8e:97:61:f8:0f:f1:e4:51:59:5d:
55:be:9c:c4:59:38:0b:ea:11:72:45:d6:19:0b:cb:
84:8f:30:ad:53:c8:0e:81:41:0a:06:33:29:a0:2c:
b4:ff:5c:ec:59:4d:52:dd:7e:21:e4:c2:aa:70:14:
74:3b:8c:a6:64:f1:32:5f:5a:c9:b8:36:06:54:0b:
ee:04:47:bc:89:fd:af:c6:a4:a4:95:4a:16:ff:73:
4f:8c:2e:ca:71:92:b3:af:ea:6d:f9:b1:d0:b7:c2:
3b:b9:86:04:8e:6e:e2:f9:bb:84:07:bd:04:64:72:
40:bb:83:9f:70:7f:d8:91:a5:8d:59:c8:af:22:41:
1f:ee:14:e0:8f:7a:77:74:81:2a:af:d7:21:fc:b9:
09:05:fb:a0:cb:f5:5e:be:fc:40:e4:8f:7b:9d:7c:
3c:67:74:8a:60:92:c2:1d:5f:5a:ed:cf:40:1a:64:
e8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7E:EB:EA:8D:A1:CD:11:C3:DC:42:1F:55:F3:F1:32:67:34:56:37
X509v3 Authority Key Identifier:
keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b3:44:ee:62:8c:d6:38:da:ef:cb:94:6c:5d:66:8c:e6:4f:
f4:5f:f7:07:c1:e3:e5:02:41:95:b4:a9:6b:dc:38:77:e0:0a:
1b:2a:04:e8:03:fe:12:db:48:ab:3d:83:ce:fc:dd:4c:1b:ca:
6a:c2:8f:e5:72:db:93:6c:b3:45:9d:bf:33:8b:8f:27:44:9d:
ba:a6:fa:86:5b:77:0e:60:d3:77:fe:ed:aa:92:35:d7:db:7b:
3d:13:4d:04:48:ea:d9:12:b6:ae:bd:00:97:87:10:28:28:0a:
18:25:1d:26:8b:80:c6:44:1a:18:b2:23:8a:82:ac:cc:02:79:
61:2b:02:4e:23:a2:09:f9:57:c2:91:70:9e:28:83:c3:58:fc:
38:30:57:ac:12:9f:9b:34:03:7e:f7:4a:c9:27:21:ff:08:1c:
72:c4:57:e9:ee:8b:a3:51:7b:49:cf:f6:88:5e:7e:85:74:1e:
4d:bc:a0:3c:56:59:56:9e:12:1e:73:66:a8:f5:23:97:94:77:
90:0a:21:c4:77:e5:fb:24:5f:2f:30:fa:06:0f:89:c8:a3:e5:
87:88:2c:04:e5:04:55:aa:4a:a8:ad:77:57:63:9c:37:b8:3c:
b1:b2:03:f2:a0:b2:65:eb:04:cc:57:7b:1a:cd:4d:5c:90:cd:
1b:fa:ec:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:53 2026 by rpki-client