Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: a4H7eY+Bw70QZY7Y1bAqipewF/XyawCKGrhk33geSP0=
Subject key identifier: 90:9C:DB:08:29:1E:6D:CD:62:6E:0C:C6:69:0C:02:D0:41:A6:C6:75
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 019CAA590DCA4F9BFB6DE6CFDD72DFBE7FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:28 +0000
Manifest this update: Sun 01 Mar 2026 17:01:28 +0000
Manifest next update: Mon 02 Mar 2026 17:01:28 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: 8Iv5eClUQqUy8SKsbJ4M9JaPqJcg0bNOgXhPUNYV2H8=)
2: sGfgaW1LiewBhrOBJvsdriioaTU.roa (hash: op9iNN949E3VNzRYyQTY+5GgLdt3CTSRD0WZrCE+fbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:0d:ca:4f:9b:fb:6d:e6:cf:dd:72:df:be:7f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Mar 1 17:01:28 2026 GMT
Not After : Mar 2 17:01:28 2026 GMT
Subject: CN=909cdb08291e6dcd626e0cc6690c02d041a6c675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ef:01:f5:16:cd:a3:64:9b:0f:5f:68:ed:b2:
3a:d4:a0:db:9b:4c:43:b2:64:97:42:08:08:73:9d:
7d:1c:d5:4c:73:f4:1a:bf:c0:3d:15:3f:5f:17:c4:
82:7f:38:11:b4:13:3c:5e:9c:02:49:4c:48:80:59:
a1:2f:27:5e:91:6f:8e:9a:48:c7:be:4e:66:1d:52:
71:fc:06:7b:e4:ae:ed:e1:45:b9:2a:55:21:ac:14:
4d:2d:3a:d4:87:65:fe:e4:30:42:c9:a8:5e:94:2e:
91:2e:73:86:c5:dc:bc:98:fb:2a:f5:c0:11:18:d8:
b8:56:83:d9:80:3b:aa:b6:25:7a:d7:04:ee:94:07:
7d:1a:f0:b1:02:c8:59:bd:a4:0a:35:10:47:b8:96:
29:21:2d:cd:d8:42:2b:a4:fd:42:12:52:b2:32:43:
2b:bf:ab:2e:18:ff:3c:93:cf:e6:24:85:d0:92:93:
97:07:93:85:7c:61:49:0d:51:31:69:d1:aa:91:0d:
bc:ca:0c:af:de:18:74:17:d3:6a:bd:9c:e4:77:3a:
86:86:3b:3e:62:5c:1c:75:f0:87:16:1e:4f:28:88:
58:da:2b:ce:9a:dc:7f:3f:c3:3a:fc:a1:43:01:90:
a2:67:df:11:ec:d8:30:09:46:1e:64:24:9e:2c:77:
3f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9C:DB:08:29:1E:6D:CD:62:6E:0C:C6:69:0C:02:D0:41:A6:C6:75
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:53:60:78:8f:74:ea:cd:82:20:a0:e0:ff:4d:48:6b:4a:b7:
01:69:af:5a:b2:92:72:67:76:3e:d3:2a:33:6a:e4:7d:fc:da:
24:b9:f6:9c:08:de:ce:c6:14:20:e8:dd:1a:ff:4f:dd:c5:45:
61:07:83:f9:7b:12:9c:bb:ed:26:09:9f:0e:e0:5c:c8:74:9b:
ec:aa:84:00:aa:c5:ee:c5:0d:e8:d5:03:1b:e8:e4:c9:8d:eb:
ca:0a:29:46:94:20:ac:40:fa:a9:52:73:eb:e4:d9:80:af:28:
f9:84:31:9c:4c:0d:8f:9f:63:24:a2:40:91:80:2d:dd:9b:a3:
2e:79:54:3b:03:3f:df:38:9f:97:2e:c3:d9:fa:4c:ac:fd:1a:
03:34:03:d6:e2:30:c3:e7:d2:b8:ac:ff:f8:b3:0b:c3:8a:e4:
76:46:63:6d:fe:b5:d3:30:15:77:3e:d2:dc:d7:1c:b8:f5:7a:
22:ee:9f:68:f1:4b:3a:80:9d:b6:b9:b5:89:d2:cf:a2:d6:6f:
87:f3:f5:d4:2b:1a:5e:23:be:67:3a:df:6a:81:a1:ea:05:9b:
91:16:aa:e3:7d:36:cb:2d:9a:84:07:f9:c5:4f:7a:0e:d8:06:
27:e5:0e:7d:c7:d7:8a:ae:e6:ce:8d:8e:53:83:9d:56:35:d6:
d8:c3:d2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:06 2026 by rpki-client