Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File: 46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier: wGUwcau3d3aSH+NA7p2VXWybPAY5ACHspko0a+1lI+0=
Subject key identifier: 7D:0D:31:6A:80:C9:17:7A:45:B2:CF:B8:8A:8B:BE:4E:63:BB:2F:74
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer: /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial: 019D265F9116A2E416B4770C47130E7C2A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 19:01:30 +0000
Manifest this update: Wed 25 Mar 2026 19:01:30 +0000
Manifest next update: Thu 26 Mar 2026 19:01:30 +0000
Files and hashes: 1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: z25JrPVmFyYItd9qdlODJCYKosQf/m2ZWu4Id6fQvMg=)
2: _X4eAftjp_R6giU6rV2GZ0FQz9k.roa (hash: VsMljmTZjJFOFhFmrTsEwtE5iJWXUJLVzyxqYH1Mkto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:91:16:a2:e4:16:b4:77:0c:47:13:0e:7c:2a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Validity
Not Before: Mar 25 19:01:30 2026 GMT
Not After : Mar 26 19:01:30 2026 GMT
Subject: CN=7d0d316a80c9177a45b2cfb88a8bbe4e63bb2f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:6f:69:7e:f2:b8:f7:d2:02:9b:54:10:50:
a9:f3:d0:a0:70:4e:b3:52:c5:36:d3:5c:ae:46:96:
0e:c5:b1:86:87:4c:f2:4b:62:4d:9d:84:71:87:49:
9a:b3:9e:e7:65:f9:6f:ab:27:a0:c5:b4:67:f4:83:
5b:1f:e8:58:fc:bb:ef:0e:22:01:8c:3a:b3:ad:5c:
a1:9c:bd:80:5d:57:71:11:30:a4:94:10:2e:9b:9c:
d6:7e:a3:2b:12:41:69:44:90:9c:bb:59:fd:a2:da:
82:c8:f7:74:21:01:9e:3c:e0:9e:1f:35:24:9e:09:
0e:81:27:62:5c:7c:e6:09:b4:2e:49:2f:03:d3:2e:
0f:10:fb:30:5d:9a:b9:7b:34:ab:65:54:14:2d:a7:
e3:3d:87:5d:26:cf:af:8a:0d:01:29:c0:e0:30:78:
d0:fb:2d:c0:94:62:1e:e9:11:96:22:30:3e:02:e3:
17:26:9e:2b:0b:09:14:bf:8a:1f:e1:e7:06:65:e7:
2e:2b:0c:f8:93:c6:bf:91:0e:0b:0f:61:7b:60:3b:
2a:1d:73:8d:29:89:00:d3:0d:1e:30:52:72:3b:56:
63:fc:3d:ef:76:25:ae:77:be:2c:4a:d6:9b:0e:c8:
49:16:af:15:1a:86:94:bf:da:1a:d2:92:02:0e:b9:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0D:31:6A:80:C9:17:7A:45:B2:CF:B8:8A:8B:BE:4E:63:BB:2F:74
X509v3 Authority Key Identifier:
keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:76:a8:ab:95:b3:3f:23:75:de:18:a0:14:05:a9:d2:18:6e:
f6:33:58:aa:ad:95:0d:61:3e:e8:71:14:a7:06:0f:b1:c9:02:
22:f8:1d:35:28:b1:a1:00:37:fc:a4:a2:2b:34:b0:95:00:f1:
de:b0:b6:10:31:10:b0:84:3e:90:6f:4b:e1:f1:8d:45:a3:c7:
74:5e:f6:b5:c0:2b:73:1e:1d:1d:46:6d:8e:4a:4b:ee:d7:bf:
5a:48:78:9c:7a:17:7d:b3:dc:b4:31:79:5f:bf:d9:1b:73:38:
41:b7:18:09:f2:f9:99:bc:18:7f:0b:d0:2e:6e:07:16:2d:cc:
df:17:94:e3:94:ab:4b:0a:1f:a7:b8:be:d2:d4:10:94:e3:cb:
19:c2:a3:0b:c9:32:eb:e5:10:19:07:99:78:de:20:2f:05:d2:
0e:b1:55:61:e2:9c:89:09:33:45:42:ef:01:b8:de:12:38:67:
bb:48:2b:7a:02:89:9e:6f:50:44:ab:11:f4:27:23:9a:04:e1:
78:b8:e9:49:67:67:39:b0:9e:2c:32:a5:6b:c5:b3:51:49:16:
b6:75:5f:75:5b:e0:3e:fb:73:6d:d6:01:f5:8e:ee:42:86:4e:
45:06:5c:58:24:d2:10:b2:e6:43:cb:f3:8f:a3:86:7d:34:f9:
17:21:87:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:31 2026 by rpki-client