Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier: g/eSuHT2oDZFYx7zUyr/VeDRxTFI9A6U1hvGcsPIQ7c=
Subject key identifier: 0A:87:2E:05:B5:33:0B:D5:63:B4:CB:2A:E7:4E:53:D0:FA:1B:C9:B2
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 019D2816DE3C690AFA173F45923735F57BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 03:01:20 +0000
Manifest this update: Thu 26 Mar 2026 03:01:20 +0000
Manifest next update: Fri 27 Mar 2026 03:01:20 +0000
Files and hashes: 1: 6fN9h0BE8aQ9CkNz0FDDwJzJ1WI.roa (hash: lchc3zsBE0dtE9KZlnVKCzZkcOJOv0TaeNSl6grWrKg=)
2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: TyUuv3wS5VNQYsvbEsw8XTk8hPWAUYpSN7QpSULUmWs=)
3: DvkdV1ExA2552HGIzRMhCZK-OFE.roa (hash: qyrvDF/4Y9K7iv9NFa3njXZ6qQZMH2yHwSx8qwfZey8=)
4: I3QKFov--NDtK49UPqV2RMA_ZSs.roa (hash: 5bH+Qg+gTHLwp5S4Kx2BVafx6XVTZnjE39jOohvcHdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:de:3c:69:0a:fa:17:3f:45:92:37:35:f5:7b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Mar 26 03:01:20 2026 GMT
Not After : Mar 27 03:01:20 2026 GMT
Subject: CN=0a872e05b5330bd563b4cb2ae74e53d0fa1bc9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:60:9c:81:a0:66:49:e0:b4:79:d7:1e:b3:33:
56:be:d1:8c:61:ab:e4:30:47:db:cd:f2:75:ab:23:
4f:4c:10:47:1d:0b:29:ae:8c:b5:e6:c2:4c:f2:78:
b0:9e:35:8a:83:0a:64:81:dd:2a:2d:24:63:3f:69:
59:ec:27:74:51:53:01:ea:f2:ca:84:21:e0:7f:01:
e7:0c:fb:25:53:f3:f0:ae:ea:a8:a0:c2:e1:e2:c2:
77:42:3b:13:2a:3b:30:d8:bd:be:92:ff:18:c8:44:
10:ed:d1:37:b4:92:0e:23:d3:d1:14:9e:72:36:c4:
07:53:05:59:39:ac:a3:17:3d:6d:5b:59:8d:6f:a9:
73:59:04:81:4a:56:f5:8e:48:06:c3:47:55:81:e8:
f6:eb:42:a8:8d:a2:01:8e:92:ae:bb:f4:5f:34:f5:
29:c1:8e:47:18:a8:64:82:eb:d8:7d:ea:0e:f5:5b:
87:b7:02:9e:e3:d5:08:de:08:68:6e:de:13:55:aa:
eb:38:32:fc:c3:28:7b:a4:71:e2:f5:27:06:32:9f:
ef:a1:a4:7a:d8:ec:f4:40:9b:94:fb:92:e5:70:5d:
98:f6:20:88:81:1d:4f:e6:7f:25:e2:86:13:14:4a:
ae:d1:bc:8e:cd:9e:f8:8b:bc:3e:8b:1d:24:8e:24:
df:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:87:2E:05:B5:33:0B:D5:63:B4:CB:2A:E7:4E:53:D0:FA:1B:C9:B2
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2b:a9:db:d0:98:61:61:e9:10:1d:ed:e8:40:44:fb:af:e1:
a8:50:f5:37:1d:a9:f1:ec:a7:9b:6d:05:45:a2:5f:74:11:31:
a1:b4:d4:99:58:9c:7f:5c:e5:b2:4d:54:39:63:20:35:a2:db:
67:77:d1:8f:cc:92:80:a8:79:69:6c:12:70:87:ac:8e:f2:f4:
95:e2:ea:26:d6:0d:dc:cf:74:04:0d:73:13:2f:85:66:33:40:
ea:87:b1:93:12:24:84:65:d6:ef:80:ea:9e:46:23:06:bc:55:
91:fa:bc:74:28:71:49:d4:e6:1f:87:1e:2e:81:05:0a:5e:7b:
0c:38:c4:7c:bd:7d:fd:d5:dd:2d:f7:b0:d9:e8:38:3d:e3:f4:
d7:b9:42:d3:a6:1d:3a:47:34:d9:15:4b:79:a2:d7:f5:b6:9d:
72:39:74:5b:2d:c4:0e:b7:9f:ab:9d:3d:70:d1:c2:35:44:6a:
a1:2b:ab:d0:34:d5:2f:37:94:b8:82:ed:88:06:21:16:fe:b0:
c9:ad:5b:aa:aa:80:be:be:13:4c:74:d9:b9:aa:bb:99:9b:e9:
d4:45:ab:c6:49:b7:98:c0:88:4e:07:55:1e:59:49:c8:d8:d6:
7e:ed:8b:cc:f3:73:b5:8d:80:8c:7e:03:11:d9:0f:d8:49:cf:
1f:eb:e2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:56:10 2026 by rpki-client