Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier: CV5RzyX1RutDqL6aEFMqoLb330zxb4mqAOI1gM5UZr4=
Subject key identifier: E3:D1:EA:D1:CD:EC:E4:0E:99:7D:08:A5:B3:9C:F4:E0:94:9E:78:27
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 019D29616398E770450300075BBD113A7A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number: 0804
Signing time: Thu 26 Mar 2026 09:02:21 +0000
Manifest this update: Thu 26 Mar 2026 09:02:21 +0000
Manifest next update: Fri 27 Mar 2026 09:02:21 +0000
Files and hashes: 1: RYjmwwSeitE7YflGQ-BXVuEOw-Y.roa (hash: +mZHJEVEx50dKyXD00LKvcDkY+DRVgSg2B5Jqah+/wo=)
2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: /73+RoHnC8gWtXEiyd8G+bXZ9+jzqK+QQ+2Xs8qvULE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:63:98:e7:70:45:03:00:07:5b:bd:11:3a:7a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Mar 26 09:02:21 2026 GMT
Not After : Mar 27 09:02:21 2026 GMT
Subject: CN=e3d1ead1cdece40e997d08a5b39cf4e0949e7827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:24:10:5a:1e:13:13:d3:24:51:72:2b:f6:52:
c9:17:a9:54:db:e0:b4:23:d2:47:d3:fb:b7:95:6e:
5e:cd:41:17:54:f9:a2:95:5c:12:ca:be:98:be:90:
04:71:51:7a:37:d3:f6:e6:8a:c5:0f:a1:95:a8:2c:
3c:cd:b0:9c:ba:48:40:27:01:bc:55:75:e0:fe:8e:
69:1a:f3:e2:d3:03:4f:e6:24:d8:92:cb:6d:01:98:
a0:54:0a:5d:3e:ca:1b:40:bc:65:38:22:1d:0d:f7:
78:b8:60:7b:97:64:10:9a:d7:bd:3f:35:cd:2f:55:
b2:44:83:22:11:be:fa:6c:a9:a7:1f:a9:f6:16:7e:
14:7b:37:8a:37:82:c8:c4:8f:68:a4:ad:a7:59:d9:
ce:d1:3f:41:e7:0c:23:b4:0e:bd:1a:40:59:75:2d:
c3:24:81:59:28:93:71:a1:0d:99:5f:af:88:74:6c:
ff:95:3f:f4:50:ca:3f:14:eb:d1:e6:d7:68:9e:27:
4e:8c:69:64:f2:4b:e4:db:89:c0:9a:b2:f9:ce:4c:
d8:21:d2:f4:47:98:69:6b:09:62:21:0c:eb:7d:08:
ba:1a:7f:7a:6e:a1:c6:d5:e5:02:ed:55:af:75:a6:
6b:12:6a:b1:6f:a9:bb:e3:4a:71:72:dd:3e:44:66:
3b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D1:EA:D1:CD:EC:E4:0E:99:7D:08:A5:B3:9C:F4:E0:94:9E:78:27
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cb:12:98:8c:70:dd:1d:77:b0:b2:18:6f:7a:66:7c:41:6b:
39:47:04:99:a8:47:99:e2:8b:b8:b7:4c:5b:c3:7a:4a:59:9a:
3f:d1:17:50:48:2e:9a:aa:3a:35:c4:f0:5c:67:2b:11:22:b1:
e9:96:33:c8:18:9b:50:b5:af:b3:d3:93:d2:44:07:94:7a:5a:
e6:74:ef:50:0d:d1:24:93:ce:97:ba:97:68:35:70:ae:63:d6:
0d:05:35:f6:80:36:96:44:f5:04:1f:8d:7b:16:81:8d:2e:06:
22:58:cf:57:d7:20:e4:fa:29:ed:7c:c4:ff:a7:38:83:f6:2a:
0b:71:44:f0:dc:7c:f3:b5:c4:fc:3c:0f:36:34:a0:77:94:83:
fa:84:b1:2f:c4:6c:52:fb:51:7e:8f:9e:b2:89:4e:8f:f8:b3:
79:be:cb:a6:34:8e:3d:86:d7:1c:f2:93:bc:59:18:8b:d5:19:
e1:c8:73:06:56:43:b0:da:b4:b5:65:6b:d1:24:70:db:4a:d3:
4f:06:13:a0:1b:d7:9d:05:d4:82:2f:e1:80:eb:82:74:b4:0f:
09:fe:cc:09:3b:15:fb:cb:73:32:1a:6d:16:2f:f2:7d:82:53:
b4:6e:0d:6b:91:fb:5c:4e:51:67:06:0e:39:9a:b4:53:d3:8d:
3f:84:44:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:36 2026 by rpki-client