Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
File: R1Ng86GS3KodPRlNtkwCVMN0vUY.mft (raw, json)
Hash identifier: ft3qJFdsI6bYdFgGZcJyjXzATUc3y4iFdZptzxXi1+I=
Subject key identifier: D4:8E:99:D3:21:7A:C5:5F:11:4D:25:33:27:A4:8C:BB:AD:58:3A:01
Authority key identifier: 47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
Certificate issuer: /CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Certificate serial: 019D26CCCA08FC8604072BE0330D61EA5DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
Manifest number: 0257
Signing time: Wed 25 Mar 2026 21:00:48 +0000
Manifest this update: Wed 25 Mar 2026 21:00:48 +0000
Manifest next update: Thu 26 Mar 2026 21:00:48 +0000
Files and hashes: 1: R1Ng86GS3KodPRlNtkwCVMN0vUY.crl (hash: SFviVus35VAN8581BXtuK8C+zl7lmi8Bw/Rqg8DYJRY=)
2: qMO76GFUq-hY40YmP_a09TsI33Y.roa (hash: Qi8hHlIjIYV89eN37DhURxMC9pA+eWxI7cGfJgzjw+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ca:08:fc:86:04:07:2b:e0:33:0d:61:ea:5d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Validity
Not Before: Mar 25 21:00:48 2026 GMT
Not After : Mar 26 21:00:48 2026 GMT
Subject: CN=d48e99d3217ac55f114d253327a48cbbad583a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:82:fe:85:7f:ac:4b:bd:ce:f9:b7:58:49:
a7:d9:fd:1d:85:f9:7a:4e:8a:b7:9a:f3:c7:75:57:
43:5b:30:ee:1e:cb:f7:80:39:c6:33:81:79:cd:bb:
5a:49:ce:f4:7c:6d:7a:0c:28:64:cb:15:0e:c2:19:
e1:62:d4:b0:8b:0c:ca:0d:71:b7:44:b5:f2:f2:5c:
a0:9b:0a:c6:6f:39:b8:e8:fe:e1:e5:be:7c:6d:65:
ce:7a:e3:24:80:9c:d5:e4:bf:7f:d9:a7:08:6b:90:
49:5d:79:d3:ec:f8:b3:25:8d:4d:07:8d:64:b9:c4:
b1:a4:11:6d:ee:83:03:f5:d9:bc:be:cb:9a:a1:a9:
93:a1:6a:e9:d4:25:16:7e:59:5a:f0:50:c3:5e:b2:
f0:d5:de:d4:9e:76:f5:44:f0:ad:dc:22:54:44:bd:
e2:cd:63:9a:6e:88:3d:13:6e:96:fe:81:74:cc:38:
99:f8:e9:97:8d:55:fb:07:41:57:eb:f3:af:a9:52:
2f:f0:79:ca:56:0d:52:51:67:69:fa:df:7c:79:50:
b9:40:d3:f8:30:de:f5:48:e5:d3:d5:4c:b3:bf:b9:
db:7e:fb:13:5c:de:3f:34:64:17:a5:e7:e9:99:cb:
c5:8b:30:15:24:bf:76:5b:c8:ed:3f:e8:9f:22:f1:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8E:99:D3:21:7A:C5:5F:11:4D:25:33:27:A4:8C:BB:AD:58:3A:01
X509v3 Authority Key Identifier:
keyid:47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:51:2b:7a:3d:5e:fc:27:23:14:85:47:e9:1d:00:3c:43:c7:
e8:e3:15:f5:aa:d0:e8:b6:58:dd:be:ab:84:2a:d5:2b:78:79:
8b:03:f3:79:e6:2f:fb:e1:5e:1e:42:1c:88:c4:fe:71:88:14:
55:0d:da:c9:1b:67:2b:11:c9:7c:bb:c5:e6:55:a7:05:2e:53:
52:88:ca:77:31:64:ad:0a:18:17:3d:d6:94:e6:c2:51:e9:cc:
59:04:f0:90:2f:19:ba:9b:99:7b:89:78:e4:de:17:11:68:09:
ef:33:4f:02:61:6c:3f:02:2d:79:54:87:58:51:f6:be:f9:9d:
4b:b5:60:87:ce:2e:11:ac:82:fe:bd:a7:3a:18:7e:a9:b7:0a:
24:a4:94:6d:c1:06:d5:56:07:12:fc:6d:ee:03:07:c9:8d:90:
dc:34:0b:86:40:26:74:ce:36:48:2a:b3:db:11:bb:45:5b:06:
89:fd:90:37:69:96:c8:3b:4d:d6:80:9f:8d:51:a0:b3:60:51:
eb:59:1c:79:2c:33:6e:5c:94:4e:cb:ae:91:41:11:c6:b8:00:
f9:63:19:05:9e:f1:14:e3:d5:de:e7:30:25:de:15:57:ad:43:
e2:aa:29:4d:ec:57:5c:5a:68:1b:13:0d:5e:c8:51:69:93:c0:
08:66:3a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:07 2026 by rpki-client