Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
File: SO3JpU4ccjtWqu330BVAxbNr2rY.mft (raw, json)
Hash identifier: VLrUkjH/4GQ+7M3u6zJCS1LtSy0Ir+9d85QYKu3csJo=
Subject key identifier: 32:1D:AA:24:BA:4F:10:5F:8A:C2:2A:0B:78:C3:1B:71:47:12:4B:4B
Authority key identifier: 48:ED:C9:A5:4E:1C:72:3B:56:AA:ED:F7:D0:15:40:C5:B3:6B:DA:B6
Certificate issuer: /CN=48edc9a54e1c723b56aaedf7d01540c5b36bdab6
Certificate serial: 019D25BA6E998DDDDBD1A4753F395DBFD909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SO3JpU4ccjtWqu330BVAxbNr2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
Manifest number: 0279
Signing time: Wed 25 Mar 2026 16:01:08 +0000
Manifest this update: Wed 25 Mar 2026 16:01:08 +0000
Manifest next update: Thu 26 Mar 2026 16:01:08 +0000
Files and hashes: 1: SO3JpU4ccjtWqu330BVAxbNr2rY.crl (hash: WsihOvHCaJhU/kxT2yRGr2MDM6cL7Wg2o4WYCyR7SAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SO3JpU4ccjtWqu330BVAxbNr2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:6e:99:8d:dd:db:d1:a4:75:3f:39:5d:bf:d9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48edc9a54e1c723b56aaedf7d01540c5b36bdab6
Validity
Not Before: Mar 25 16:01:08 2026 GMT
Not After : Mar 26 16:01:08 2026 GMT
Subject: CN=321daa24ba4f105f8ac22a0b78c31b7147124b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:17:85:f5:2a:54:17:59:a5:d5:3a:c4:a5:
27:3f:53:e6:1e:a9:9d:12:42:50:08:3a:f1:58:66:
46:de:90:21:3c:e1:bc:f4:4b:95:be:71:a3:70:51:
2d:6d:3e:62:b3:0e:e5:59:d5:b6:ac:da:bb:6d:d3:
18:46:7b:4f:87:58:d1:27:f5:fa:75:de:d0:2f:1d:
22:16:e8:06:4a:9d:1d:92:12:f2:6d:ff:49:87:7a:
44:97:a9:d9:5a:03:90:36:79:74:53:59:be:c9:60:
ba:d7:ae:d1:c0:05:3b:9b:c8:3e:46:73:61:38:03:
7d:27:a5:c4:b2:89:97:56:b5:a9:6f:54:41:95:0d:
77:b6:eb:e1:d6:e9:1b:66:35:25:30:31:d8:0c:95:
1d:59:f6:75:1c:96:c2:40:72:18:77:a3:fa:69:75:
59:05:c1:99:04:e2:6d:af:32:f9:cc:4e:5c:23:06:
dd:86:85:3a:d7:47:6e:ad:91:5c:69:1d:10:ff:3a:
d1:07:ff:50:89:26:c8:ca:09:ba:2a:e7:03:b7:e5:
64:0a:2a:46:c3:f4:a6:fa:07:17:c1:28:00:f2:c4:
fb:af:a2:e1:0b:fc:eb:45:4b:c0:86:18:2c:7e:61:
45:f7:eb:05:71:98:0b:dc:95:13:5b:48:06:bb:97:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1D:AA:24:BA:4F:10:5F:8A:C2:2A:0B:78:C3:1B:71:47:12:4B:4B
X509v3 Authority Key Identifier:
keyid:48:ED:C9:A5:4E:1C:72:3B:56:AA:ED:F7:D0:15:40:C5:B3:6B:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SO3JpU4ccjtWqu330BVAxbNr2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:15:f3:cb:c5:b6:ca:d0:e9:67:c4:bd:43:50:0d:fa:51:38:
7d:fa:e7:6d:cc:a5:98:3e:a3:40:4e:ed:10:6f:0d:0a:23:b5:
c0:a2:0e:1a:d2:88:4f:c9:09:b9:ba:d1:4f:d4:c9:8f:2e:b6:
3e:d4:73:06:6e:79:20:8a:a8:58:c8:cf:64:2a:c3:04:6b:75:
b5:b1:f5:78:d7:75:b9:79:b7:53:c7:d4:d6:3e:bb:41:73:72:
7b:10:ee:ab:69:6b:7d:d7:c8:83:37:ed:f5:2a:29:a0:56:27:
c2:ea:e6:98:90:23:36:a4:a5:ae:d9:82:e2:58:41:28:7e:79:
82:6d:28:a1:22:96:38:ce:cb:d4:42:18:69:77:24:f7:80:8c:
0c:c6:7a:de:7a:f1:a0:f7:f8:f0:36:4e:cd:96:e5:7d:d3:24:
34:7e:d8:80:ce:35:e3:44:ee:a3:b3:ec:11:c7:f4:cd:f5:a0:
7b:f6:3a:66:b3:94:f2:0f:64:91:b1:5c:de:8f:d4:64:5c:1b:
bf:60:18:da:a1:80:48:fc:00:2b:a6:a5:92:55:2f:1e:e7:f4:
41:e1:74:b9:75:84:4c:cf:27:b2:96:99:b6:a3:ae:be:5b:b1:
e0:bd:99:19:e1:b5:91:0c:4f:31:e8:5f:68:65:29:cc:6e:e4:
5e:73:9b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:31 2026 by rpki-client