Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier: BCM1mV8V+25/NBCHYHCJCfNerHgjW7q6eynrIJRvwYg=
Subject key identifier: E5:74:0E:FB:7D:9A:3F:B7:58:21:11:7B:F2:FF:CD:B5:BC:13:29:01
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 019D2997A77FD1BC774A73081ECF5F8B802C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number: 04E1
Signing time: Thu 26 Mar 2026 10:01:37 +0000
Manifest this update: Thu 26 Mar 2026 10:01:37 +0000
Manifest next update: Fri 27 Mar 2026 10:01:37 +0000
Files and hashes: 1: oMb2k7Oz9unm3siEKObsvSGOu5s.roa (hash: pGiHyUdRro6M/TUFejm603qJXDKgL9TMHqLZBCWVjz4=)
2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: 9t1avZj1A/2r0LrRnxCxM1821k0xOLIfeoXcCBQsNq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:a7:7f:d1:bc:77:4a:73:08:1e:cf:5f:8b:80:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Mar 26 10:01:37 2026 GMT
Not After : Mar 27 10:01:37 2026 GMT
Subject: CN=e5740efb7d9a3fb75821117bf2ffcdb5bc132901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:f3:14:e7:99:bd:19:ee:48:14:9d:e8:51:
35:32:d0:34:5f:c3:5d:6d:27:48:f5:dc:19:4d:c0:
d7:55:44:9d:7f:a2:8c:57:67:42:d1:94:2a:09:79:
74:45:e0:94:6f:0b:cb:90:0d:2c:74:f6:9c:13:dd:
9b:8b:72:07:26:c6:34:64:1d:6d:1b:4c:48:f7:95:
8c:53:e8:03:a3:e8:0a:8a:ad:3c:26:b2:a5:df:6e:
69:4b:a7:88:df:9c:0e:93:c5:ef:d0:9c:76:6c:3f:
f4:55:c2:9e:a4:3f:56:8d:ee:71:71:c2:e1:26:f5:
5b:0d:73:9b:92:51:75:10:07:49:70:cc:e5:72:3b:
58:26:d4:37:07:82:c1:ef:e1:e4:0f:59:4b:a7:da:
ff:ba:97:41:92:31:a8:7e:55:dd:dd:6f:a8:33:b4:
28:ce:00:d2:9d:51:1f:43:e7:fe:ab:6e:ea:af:ea:
4c:be:ac:2f:9c:8b:bb:07:11:d8:01:d2:a1:ad:2c:
86:c8:5b:a1:73:16:13:54:81:00:c4:d3:45:5e:7a:
a1:04:50:6f:12:5d:3e:67:69:e7:bd:ae:3c:5c:a1:
6c:8a:c8:04:c9:a4:9a:e8:d0:2f:eb:fe:50:8c:78:
4d:6d:14:e4:1e:b4:08:52:84:37:d1:58:b6:0f:6b:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:74:0E:FB:7D:9A:3F:B7:58:21:11:7B:F2:FF:CD:B5:BC:13:29:01
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:21:6b:90:49:b8:62:1b:29:90:72:fe:3b:fa:67:b4:4f:6f:
44:da:5f:48:da:a2:35:9b:52:0a:2b:99:85:7c:f1:21:96:82:
e9:1e:dc:fa:51:f8:16:db:1e:b1:6e:31:d9:a1:62:1f:57:9f:
e0:55:7d:43:b6:ff:7a:90:96:02:18:9a:72:03:09:72:58:1f:
20:d8:9a:f5:df:d4:d1:e3:35:87:d1:62:2a:9c:39:68:57:26:
ac:d2:40:5e:5c:db:d4:f0:65:3e:8e:e4:31:a1:f8:41:9c:a5:
4f:48:a1:a9:df:5c:ce:4a:1f:8c:6f:92:16:60:30:0f:d5:c8:
0d:1d:2d:f1:c0:eb:41:e0:dd:d3:5f:37:e1:81:7a:2a:82:60:
f1:c7:43:57:cc:7e:d0:33:2e:68:70:b2:8d:c2:8a:80:c0:8a:
f1:5a:86:f8:2a:4c:29:15:c8:fc:5d:f5:68:f5:12:46:0d:cc:
4d:5c:ad:86:e6:de:02:0f:72:cb:64:8e:c7:45:ba:79:e2:40:
61:9e:c2:50:cd:39:e5:d2:a4:f0:d0:1e:56:19:8a:0b:85:85:
78:37:13:dc:d9:ca:64:1c:58:1a:4c:5b:51:63:8b:66:6d:ac:
d2:a3:64:21:56:36:51:cf:bc:52:69:d2:89:4f:cb:5d:d6:f6:
52:ea:64:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:38:42 2026 by rpki-client