Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
File: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft (raw, json)
Hash identifier: h/76DYH5b/QeBHDtLyZI+FyKmHlt687PcBMNnkjohew=
Subject key identifier: 3C:8D:2C:E4:E9:60:34:5C:D8:DE:5F:2A:1A:9C:E4:18:86:11:AA:3F
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Certificate issuer: /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial: 019D26CD3EDB0294D7D628B181AD564CA045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
Manifest number: 14B9
Signing time: Wed 25 Mar 2026 21:01:18 +0000
Manifest this update: Wed 25 Mar 2026 21:01:18 +0000
Manifest next update: Thu 26 Mar 2026 21:01:18 +0000
Files and hashes: 1: EPMtahwabHgPl-W83_5vNZdf4gw.roa (hash: 0H56HrlbNZtyDi9oYIVx2+vNE4jYkmDivR3ycZsjoTk=)
2: R1nUUzzOw929lhAIpfJDOOJ-S-A.roa (hash: Tp1cYDsUeKBDmtrgetF5KzqUAJ8NNp9SsVUJU5MzEDg=)
3: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl (hash: dwLhPq6YfcqlShBegLenzkyO0gvdMFgtjpCB52U7qOA=)
4: les8ej1VpPxKoITRniTQx3Kf-wE.roa (hash: tEw4ct/fRvtKjfw/ec52txtnKNrt4GJfraUVLHoBE0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:3e:db:02:94:d7:d6:28:b1:81:ad:56:4c:a0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Validity
Not Before: Mar 25 21:01:18 2026 GMT
Not After : Mar 26 21:01:18 2026 GMT
Subject: CN=3c8d2ce4e960345cd8de5f2a1a9ce4188611aa3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:a0:2d:0f:88:5e:24:a7:d1:0d:b8:ca:44:
ed:4a:91:5b:69:b4:ce:2e:49:f6:a4:33:85:15:99:
71:c3:fb:13:f6:6f:17:ac:3d:6e:f9:34:93:c8:4e:
95:6c:ac:90:43:9a:6e:70:2d:35:5b:35:97:2f:2d:
93:a3:6a:e9:3a:2b:b3:b9:f9:65:1e:fb:61:b9:aa:
d7:ea:10:10:65:54:d9:28:17:f6:b6:95:63:33:de:
32:49:16:29:55:8f:23:18:a6:c8:1c:d6:59:d6:90:
c7:8f:b3:ef:b4:a2:3f:de:f6:4e:9e:ae:a0:d0:85:
35:b2:ab:94:d7:49:1d:17:32:53:d1:72:f2:37:09:
df:a7:5e:43:70:d7:99:cb:09:52:99:4c:3d:84:5b:
e4:12:58:ca:81:16:e4:74:cd:7c:76:28:4e:d8:26:
b8:cc:92:6c:b2:40:cc:b2:6e:81:61:08:cf:4d:9a:
40:d8:a8:50:35:dd:c0:c7:05:c1:a3:80:9b:a4:76:
2c:43:df:6a:af:23:28:e8:38:ca:44:4e:7a:8c:ce:
4b:a1:6d:c1:8e:20:17:69:25:8c:e3:18:f5:03:91:
26:87:de:91:33:7b:b1:99:cd:f6:ba:04:9e:78:7f:
4d:2e:6d:3b:82:8c:81:47:ca:6f:6b:7c:12:f5:be:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8D:2C:E4:E9:60:34:5C:D8:DE:5F:2A:1A:9C:E4:18:86:11:AA:3F
X509v3 Authority Key Identifier:
keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:71:6f:a9:9f:1b:a7:14:9f:60:fd:9d:b8:8a:10:22:99:11:
6b:72:eb:ad:3e:f3:42:bd:ca:2f:cc:19:52:d7:96:ee:ff:e8:
a2:55:6f:f0:4c:ec:df:48:db:c2:c0:bf:f6:4d:7d:a2:64:19:
14:fb:96:aa:da:a4:b6:fc:52:4a:62:f6:03:a7:19:3f:2d:c3:
ea:d4:44:72:1e:28:84:6b:7b:f1:9a:a7:0f:8b:0f:be:63:85:
da:30:d8:02:be:30:10:e8:82:a4:17:e4:13:26:51:d0:d4:86:
96:46:e7:94:9a:b7:67:60:4a:85:f4:52:91:ee:af:85:81:01:
f1:a0:97:d9:ce:3c:e7:a2:b4:7a:74:87:f5:40:77:b4:b2:c1:
3f:ff:b3:97:31:fc:c8:11:47:81:90:1d:ab:d2:d8:84:af:ae:
4e:2d:91:8c:29:a4:e0:13:75:b3:23:68:67:36:4a:6a:f5:e0:
6c:d8:2e:7d:26:3e:7c:3b:1c:93:37:5f:75:9d:3a:5d:a7:2b:
b7:8f:fe:ee:a2:c2:89:a5:07:57:5a:ac:8b:ca:b1:b3:42:6a:
14:2f:bc:f7:97:f9:89:0e:ce:86:3c:32:86:2f:2b:39:4a:74:
c7:79:65:da:6a:52:18:2e:d2:80:76:d9:80:3f:0e:67:6f:58:
57:53:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:43 2026 by rpki-client