Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: ikyv6m3ePCtd3gPmygxvEi5u0Fao02afrtpY3HjcLDM=
Subject key identifier: BB:70:E3:11:C8:61:C6:66:E3:4D:11:86:B8:D0:3B:4A:53:B8:76:34
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 019D26CCC42F1643E28297311D5F9A2C5115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 10EE
Signing time: Wed 25 Mar 2026 21:00:46 +0000
Manifest this update: Wed 25 Mar 2026 21:00:46 +0000
Manifest next update: Thu 26 Mar 2026 21:00:46 +0000
Files and hashes: 1: 0NQU1ASarAJo1UIvicGr69EoQz8.roa (hash: WdkEuOIrig9vUDyn2CAOyE+4Fo/rEVr4Pv+Aia51hm8=)
2: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: Z+nZOfmIOoPXOvEZNNt+Vo0u77krA8AwzDEf7EWvZ7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c4:2f:16:43:e2:82:97:31:1d:5f:9a:2c:51:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Mar 25 21:00:46 2026 GMT
Not After : Mar 26 21:00:46 2026 GMT
Subject: CN=bb70e311c861c666e34d1186b8d03b4a53b87634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:b1:97:0e:f3:14:0e:99:98:1a:f3:19:56:
e8:b2:ee:ab:86:de:cf:f2:d4:12:d8:ec:0c:88:ab:
a5:a5:5a:e3:58:b0:23:aa:ff:3d:dd:b5:3c:fc:70:
75:e7:67:03:10:0e:34:a2:06:af:93:35:5b:eb:68:
15:9d:3e:a1:44:d4:71:6a:27:a9:d7:83:d8:2b:21:
de:a0:69:c3:b3:c0:11:dc:05:16:9b:49:4d:0e:6e:
12:12:04:5e:b9:5d:dc:4c:5b:5a:a5:53:b1:c0:d3:
d9:f2:78:9e:2d:f4:6d:9e:46:5d:18:dd:95:7a:c8:
93:74:dd:04:6c:00:0b:6b:41:2b:ed:df:51:df:6c:
34:aa:ed:b0:17:c9:d0:f5:c0:09:e6:d3:f9:4d:1c:
a9:98:73:a5:cd:09:64:23:12:9d:c1:9b:e9:dc:6c:
f9:c7:c2:b4:d7:c7:51:ad:75:ca:77:47:92:4f:2d:
65:bd:8b:44:a2:de:06:2a:3f:65:b1:dd:d1:b7:bf:
65:32:f0:10:e7:6f:ff:6d:85:1d:04:b4:8b:48:01:
2e:04:2c:1e:19:7f:d6:a1:72:cd:42:38:72:84:c4:
71:ef:f0:d9:9d:36:8b:12:67:73:10:12:75:ea:c4:
7b:ca:dd:5c:bc:7a:6d:60:97:28:9d:8b:33:ed:93:
5d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:70:E3:11:C8:61:C6:66:E3:4D:11:86:B8:D0:3B:4A:53:B8:76:34
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fb:f7:5d:7f:1c:2d:1e:9d:95:71:ca:d8:b6:ba:38:92:26:
42:80:e4:c4:fa:60:d5:5c:2b:48:8f:77:f3:23:2f:24:43:72:
14:a4:e0:5b:55:f1:3f:cf:62:f4:b7:35:9f:4a:77:c1:98:7c:
bb:55:80:40:cc:d7:be:a7:5b:e3:02:e9:5c:58:f1:f6:74:45:
81:5f:71:6d:d5:21:b2:91:ae:42:08:3d:41:e1:6c:39:2f:18:
8b:30:e0:b5:42:aa:db:d7:10:b4:d5:8d:11:8f:63:67:d6:f1:
4b:57:32:68:91:18:43:a1:d5:49:d1:96:2b:3b:22:61:83:46:
12:b1:bc:5c:ab:1c:42:a0:19:1a:a8:04:80:eb:e8:23:bd:a7:
1e:97:5b:28:27:fc:f5:d9:cd:ec:73:7d:0a:d2:49:87:fe:78:
78:0b:ad:e4:c7:e0:37:c6:c0:5f:a9:f8:c1:f6:8c:e0:00:fe:
37:43:07:01:94:96:6b:0f:10:72:e0:c2:5a:e6:81:a1:78:41:
d4:6d:6b:06:2e:46:b3:cc:7e:69:a2:da:07:34:f7:5b:fa:c7:
1f:4e:8f:8d:72:08:d9:15:e1:3e:52:e3:4d:6b:34:26:ab:c4:
8f:d1:b0:49:cb:d8:af:91:f4:0e:24:60:e6:e7:d6:02:1e:29:
6b:3b:71:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:11 2026 by rpki-client