Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
File: sRI3DKJgErTR0BVM73IwvYmluV0.mft (raw, json)
Hash identifier: o8sKF4ClCn6POujftGGwKnbgFF0WLkSSG5eSxlo9SE0=
Subject key identifier: DF:F3:1B:B2:BA:EF:FC:0E:32:75:2E:4C:96:38:14:DE:C0:9D:02:2A
Authority key identifier: B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
Certificate issuer: /CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Certificate serial: 019D28F307BB0C63890A886B4304DF629C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
Manifest number: 45
Signing time: Thu 26 Mar 2026 07:01:48 +0000
Manifest this update: Thu 26 Mar 2026 07:01:48 +0000
Manifest next update: Fri 27 Mar 2026 07:01:48 +0000
Files and hashes: 1: JQHbkZiCoz_ArYL3K_jRaitcYso.roa (hash: LSS9szWjmAex/d/OuZRvWyhXy/Z+aR2BRiVKGpC62GY=)
2: sRI3DKJgErTR0BVM73IwvYmluV0.crl (hash: 3u+J5NZ/MnCbrMGgsqmtQ3tusVrjMA1C7vWyCaHG7CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:07:bb:0c:63:89:0a:88:6b:43:04:df:62:9c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Validity
Not Before: Mar 26 07:01:48 2026 GMT
Not After : Mar 27 07:01:48 2026 GMT
Subject: CN=dff31bb2baeffc0e32752e4c963814dec09d022a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:80:af:87:8a:f6:b9:d6:85:0e:27:a8:f9:
3d:3e:8e:ca:a2:51:85:3e:64:02:e0:00:a9:6f:8b:
d8:29:af:59:29:e2:ee:3f:fe:d9:44:d0:77:b8:2e:
dd:aa:20:fd:45:7b:e6:41:84:85:7e:6f:7d:e0:77:
0b:c9:f2:a7:ec:83:3e:b7:cb:ce:b9:0f:19:88:67:
ee:41:b0:47:d2:4d:41:5f:d2:c8:cb:03:01:ae:59:
e9:3f:d1:47:b6:f0:fb:96:0a:e9:fc:55:55:0f:e2:
51:74:18:4c:c2:58:9b:5a:3d:aa:3e:6b:f0:a7:42:
13:48:78:db:a5:c3:80:23:40:1b:f7:8c:68:f8:97:
f1:a4:fd:35:40:23:b0:35:97:8e:9b:07:d5:44:5f:
73:06:9e:9d:7b:b7:85:b9:c9:13:04:3f:3c:ff:31:
fd:5c:0a:33:ee:1d:0b:33:2f:ff:3a:98:33:84:2e:
79:7e:c0:6f:cc:af:bd:3a:d4:a9:60:c0:ac:38:b6:
58:73:99:44:9f:03:0d:60:c6:8e:42:db:72:03:4b:
1d:6e:bd:84:c9:0c:4c:4e:a3:30:3a:45:fd:1e:60:
fc:41:27:18:ff:82:10:f6:79:03:b6:ac:08:8f:4a:
1a:91:a8:39:29:78:77:c9:9d:a8:c3:68:31:58:a3:
2a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F3:1B:B2:BA:EF:FC:0E:32:75:2E:4C:96:38:14:DE:C0:9D:02:2A
X509v3 Authority Key Identifier:
keyid:B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:04:0e:f7:dd:a1:0d:d8:a7:f3:97:d1:04:44:bd:a9:62:10:
85:85:e8:ed:ab:9f:38:e6:29:5b:1f:29:3c:44:30:32:aa:ff:
d5:ab:1a:ae:7d:10:e3:52:41:c1:e7:14:42:7f:e5:57:c7:ff:
5a:9f:4e:4f:83:4a:df:e5:4d:c3:58:3f:ae:4d:a0:c3:20:18:
41:b5:12:a4:f8:5d:11:27:84:e3:f0:43:e2:6e:a8:1f:9c:b1:
8a:d9:23:be:25:39:91:8f:ef:1a:82:1f:1c:59:ec:fb:43:49:
e8:37:ec:ab:b1:ca:f7:71:8c:d2:2c:56:a7:6c:cd:67:63:25:
91:5f:5d:5b:b7:63:86:c1:5a:1a:38:b7:0c:c4:fb:8f:e8:bf:
65:9a:20:67:70:a1:88:0c:94:8a:a5:ef:9d:1e:f8:9f:7c:5a:
97:a3:9b:f1:66:0a:37:4b:7a:e0:82:2c:5e:03:21:06:84:65:
c5:a1:12:52:06:d4:2a:5a:ef:50:65:11:68:91:ae:6b:3b:53:
5b:4e:fa:a5:08:65:60:61:23:93:c8:b2:43:24:31:5a:9f:70:
6e:10:5e:30:10:02:b3:1f:e3:e5:7e:ba:86:fc:3c:38:55:ce:
d1:3f:de:71:f5:e8:7d:af:a3:70:e3:8e:38:28:80:30:fe:93:
ea:84:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:18:52 2026 by rpki-client