Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: l713JXOrpVytfhvd4wDYAbdIeDUrJz3NOtpMKa4H7QE=
Subject key identifier: 3B:60:FD:B6:B7:B0:47:F4:34:00:D7:9D:03:7D:BA:EC:34:1A:58:2A
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 019CACEB905E5AF3C1599F5C82D65E90AB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 1857
Signing time: Mon 02 Mar 2026 05:00:44 +0000
Manifest this update: Mon 02 Mar 2026 05:00:44 +0000
Manifest next update: Tue 03 Mar 2026 05:00:44 +0000
Files and hashes: 1: 0tjlFCD9R3QvhuaUb8R98x3yaAA.roa (hash: QW/Cv+tz1AwpdParcrVZ17Ri4asuS8geM/KpLVI71iU=)
2: RYe-A-tcBgsvnTviE-ENg27AeMY.roa (hash: BIG9Ev2/ZDOm8EsC2U3aW/Qd5R8vFaAuiSgknEWjyDA=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: cV02ADcZQdS0DYH6TwSlyLb2zdaDPyU5CPOWhH7rsqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:90:5e:5a:f3:c1:59:9f:5c:82:d6:5e:90:ab:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Mar 2 05:00:44 2026 GMT
Not After : Mar 3 05:00:44 2026 GMT
Subject: CN=3b60fdb6b7b047f43400d79d037dbaec341a582a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:65:b7:4c:5f:fa:c1:76:ed:48:2b:df:ad:
ba:95:e6:cd:e4:8c:ff:8b:07:e7:fa:db:49:59:a6:
89:12:80:c8:fb:34:ff:2b:04:d1:8f:3a:ce:bf:96:
24:85:84:4e:aa:c7:40:ae:28:e7:07:c1:09:c1:fc:
a0:d4:96:23:6c:d1:7e:84:dc:55:28:b4:20:aa:76:
ef:0a:a2:83:fe:04:bf:0b:cc:ff:6a:c6:9f:c3:e0:
4f:48:28:a4:9a:89:ab:7d:46:21:f8:da:b9:3c:31:
ed:99:da:98:c0:70:66:7d:3f:71:e2:4f:ab:ea:77:
65:e2:50:b5:d2:05:98:b6:7d:60:15:30:e6:ad:0a:
66:27:ee:74:e9:17:1b:97:0a:7c:fd:f6:f9:f2:f8:
3a:21:3f:01:c0:b1:87:4b:f5:e2:d2:70:e0:03:40:
d2:9d:d4:fd:a1:8b:5d:f8:b7:8a:f5:06:9a:44:24:
22:d3:ea:aa:5e:29:c2:63:5c:97:9f:2c:20:19:00:
31:36:e5:03:06:9d:ed:00:43:74:3e:55:93:ad:14:
93:21:46:c0:98:ee:d5:ed:39:69:8e:4e:3e:5e:3e:
55:45:32:bd:d0:cf:09:76:e4:b8:0c:de:ee:ea:e9:
91:b9:f9:b2:0d:3e:af:8d:2d:77:9d:31:73:58:4d:
ad:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:60:FD:B6:B7:B0:47:F4:34:00:D7:9D:03:7D:BA:EC:34:1A:58:2A
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:78:97:fd:95:49:5b:b5:fb:11:49:f0:d9:9e:12:f8:36:96:
d2:93:ae:7f:e8:d3:c6:d0:4c:57:c5:ff:58:c7:89:82:be:29:
6d:d7:b7:13:43:47:b6:23:a4:b5:0e:8e:87:51:54:95:53:37:
ce:47:90:d0:09:b0:75:7b:98:37:0b:97:1f:64:7b:e9:43:84:
1e:4b:5b:14:a3:7c:6b:fa:04:d0:86:b3:47:41:a5:ec:e4:37:
e4:5a:c4:22:73:fe:ef:f8:d1:f9:61:50:60:d1:29:f0:af:9b:
f8:ab:25:33:03:89:c3:29:a0:c7:04:11:49:18:6d:0e:e1:46:
f5:08:0a:d0:e4:b9:fd:0e:d3:4a:05:63:a0:a2:cd:56:f7:44:
31:a0:20:15:69:6e:ba:0c:8e:e6:1d:7f:ea:77:0b:54:e9:ad:
c7:df:78:63:7d:8d:b4:6a:b1:46:ce:dd:92:5a:7b:18:0c:ac:
63:28:d6:69:a2:98:5b:b8:1f:53:c0:d4:38:15:64:4e:09:fa:
e7:d0:80:bf:5b:0f:7e:b2:83:e6:ab:4a:dd:1e:96:13:03:db:
b3:a6:e2:ca:6f:80:ee:10:1e:d6:a6:ea:5c:ba:f8:ec:ca:c6:
e1:3c:99:a1:a2:67:23:a5:cd:e3:62:a1:77:9f:17:3f:2f:37:
a7:5d:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:21 2026 by rpki-client