Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File: rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier: Kk+VEA6Kdgj5jlhj3r6LQmGeNt3jOuot/rtZQ3HC4e4=
Subject key identifier: 8A:63:E7:A6:38:29:49:5C:95:15:B7:30:BD:1E:31:9F:04:1B:E2:56
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 019D29615EBD30366C9F69A04D853B6470E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:02:20 +0000
Manifest this update: Thu 26 Mar 2026 09:02:20 +0000
Manifest next update: Fri 27 Mar 2026 09:02:20 +0000
Files and hashes: 1: IgFQrerKfVP7wy44zfUDO_Ryu40.roa (hash: d+QkU0y4pn6BlJ50YCAOplUfwVp1JgVys4D+BWQE0Ss=)
2: eIsRP9-R0B5y8Q9SMASC2fuIFUo.roa (hash: Sf1KzRutRQ8Om6lChpX9qp6C7pNo5SKRUwiV8EG2Y1Y=)
3: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: 3hg/r8co7xP/S959RuZszbHRrggcYORRH6YMc5T+3D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:5e:bd:30:36:6c:9f:69:a0:4d:85:3b:64:70:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: Mar 26 09:02:20 2026 GMT
Not After : Mar 27 09:02:20 2026 GMT
Subject: CN=8a63e7a63829495c9515b730bd1e319f041be256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:90:b7:9c:f3:9a:83:05:40:dd:39:93:7f:
98:a1:28:8c:ab:04:8b:a6:48:50:50:d9:61:fe:94:
d4:d0:8d:d7:e9:25:10:19:2f:72:1f:2a:33:0b:51:
3f:2b:e0:4f:4a:0d:fa:87:ca:23:e3:62:6e:a6:0a:
01:5b:17:f8:eb:a8:72:24:cc:da:eb:8a:c0:25:52:
2c:a5:8a:90:9f:b1:56:03:88:22:74:11:cc:77:b2:
53:6c:71:e2:d4:ff:d3:20:5c:6b:e1:b9:12:42:bf:
e2:0f:3e:d6:9a:1a:eb:b5:59:94:01:17:95:49:87:
c0:ab:bd:5d:84:a1:42:6c:36:98:f6:c9:5b:8d:2e:
67:f8:b0:d9:87:4d:56:04:4e:c5:0c:59:4d:f7:32:
b7:ba:eb:73:8c:3e:ca:a4:b2:2a:22:17:cb:97:24:
7c:5e:2c:b2:8a:14:51:4c:00:31:48:2d:ee:76:42:
a1:3b:78:24:d8:c7:bb:5b:4e:96:e8:76:34:4c:6c:
be:d0:99:0d:e9:98:9f:3e:a2:eb:62:70:f0:d1:91:
30:b3:8b:69:d5:ca:c5:d2:a3:44:f1:61:88:03:ef:
85:6f:1b:4b:e2:32:a7:44:64:49:e1:dd:e4:cc:fa:
a5:b4:22:8c:07:32:d1:ca:6b:e0:2f:75:ba:45:15:
ff:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:63:E7:A6:38:29:49:5C:95:15:B7:30:BD:1E:31:9F:04:1B:E2:56
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:da:1c:6e:57:a9:70:06:8e:74:8f:39:b0:ff:00:f2:a4:7f:
02:ad:c2:be:87:5a:57:f1:a6:25:20:77:7e:88:91:b4:f4:a8:
52:0c:66:40:d1:ab:a0:4e:ce:95:17:54:e9:ea:58:ef:c7:b3:
6e:59:2b:2a:09:b5:41:5c:dc:eb:8d:b7:b0:1d:ab:a8:6c:61:
44:ff:52:c8:0b:0e:b6:b5:3a:8a:ed:6b:4c:fe:fe:79:cd:7b:
67:39:1a:d3:ed:85:c7:6f:53:19:d5:c9:9a:e7:c1:17:62:cf:
e6:71:a7:68:1f:e4:93:fe:ca:5e:d2:ae:dc:17:48:9e:49:90:
15:46:3e:18:c5:a9:a2:2d:12:5e:a1:bd:e7:ff:51:21:07:56:
1c:01:20:07:c7:cc:59:9d:3f:90:51:bb:37:be:42:bf:02:14:
56:79:f3:92:25:e5:35:e4:60:1f:67:bf:ca:92:5f:a3:54:61:
fe:06:c5:fd:89:8f:e1:eb:c8:4a:99:39:ac:fa:5e:8c:fb:bc:
5e:a3:ec:70:01:a2:a1:2d:13:fe:d9:1a:d8:fd:29:26:17:e0:
19:12:97:0e:79:ff:9b:42:51:59:a3:63:89:41:12:2a:96:75:
a1:21:35:ae:ef:e2:71:37:f1:06:53:b0:ee:ea:e9:d1:23:a4:
63:ab:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:28 2026 by rpki-client