Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
File: rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft (raw, json)
Hash identifier: y4ofBPmpPMcKjwwRtwvR8xZ706Ah3xkl13XnGTMxSKk=
Subject key identifier: 21:B6:22:7F:74:47:2C:CC:33:C7:EC:1E:C5:99:A1:E6:D6:75:AC:18
Authority key identifier: AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
Certificate issuer: /CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Certificate serial: 019D2961B80FAAEB1BD006F77B1A44CB52B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
Manifest number: 15
Signing time: Thu 26 Mar 2026 09:02:42 +0000
Manifest this update: Thu 26 Mar 2026 09:02:42 +0000
Manifest next update: Fri 27 Mar 2026 09:02:42 +0000
Files and hashes: 1: rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl (hash: zenAB84XGmGQFlw7jrYAUZ7XpFE/97BFk13aEPkpSJo=)
2: rcclP2fW2M9d6FzhFGpcIug6Slw.roa (hash: Ah4o3LwYLB7WSaBBzcrCq3rn0s5Unn57tKa0V6nN2u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:b8:0f:aa:eb:1b:d0:06:f7:7b:1a:44:cb:52:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Validity
Not Before: Mar 26 09:02:42 2026 GMT
Not After : Mar 27 09:02:42 2026 GMT
Subject: CN=21b6227f74472ccc33c7ec1ec599a1e6d675ac18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:d0:4f:e8:e3:8a:bd:45:5b:d9:32:c3:e4:
fb:1b:4e:bd:de:6f:06:8f:16:38:0d:a7:98:9e:13:
3b:05:de:4b:67:b8:30:fa:b9:cc:de:6b:e9:01:fa:
52:de:60:af:77:ee:0b:3c:02:0b:94:98:83:1b:e5:
14:0f:18:37:a0:a4:d9:6f:e3:4d:eb:10:3e:1d:dd:
37:ec:48:e0:fc:3b:40:d5:6d:78:dc:d1:d6:e1:46:
ac:25:ff:97:23:15:3d:68:53:60:de:9c:8f:22:b4:
5d:d6:68:df:52:67:f7:22:5f:f8:d1:e4:0f:eb:19:
fc:2a:b0:3a:1a:10:92:b5:ba:19:de:6d:a2:52:c1:
42:f1:d6:03:e0:13:51:27:44:c7:bb:7c:68:b4:06:
c0:d9:21:1b:33:63:30:be:1b:3b:24:05:a1:9c:0f:
dc:75:92:e7:a8:da:4d:25:b8:a9:1f:a1:fa:06:34:
2a:70:b5:ca:ce:20:e3:6d:8d:21:93:93:11:3e:e4:
85:7a:7c:4b:e6:62:9b:61:a3:17:6e:78:11:f9:df:
26:dd:f1:36:ba:ff:24:74:82:94:80:2e:83:f1:58:
54:66:8b:42:7c:3b:6c:74:9f:26:ed:3f:d8:0e:ba:
db:93:f0:fa:89:23:bb:09:fb:6d:74:ae:17:00:6e:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B6:22:7F:74:47:2C:CC:33:C7:EC:1E:C5:99:A1:E6:D6:75:AC:18
X509v3 Authority Key Identifier:
keyid:AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8b:16:e4:df:67:b0:b3:bb:84:60:77:d5:9c:c1:a3:7e:7a:
1f:3b:c9:2e:ae:d4:13:2a:22:b9:b5:90:12:6e:53:f1:5d:21:
01:31:4c:64:fc:0a:6a:69:e3:fb:e8:b1:65:03:fe:48:82:eb:
70:a3:ca:44:2e:68:a0:be:db:b2:eb:4c:a6:a5:e4:24:ff:46:
39:44:66:a3:e6:a9:b1:5d:68:b0:ed:08:cf:20:37:ef:65:48:
48:32:de:00:fd:c7:4c:b6:5f:09:d1:a3:40:5c:e7:14:44:22:
3e:70:b0:15:e2:35:d5:28:d8:bf:17:c2:3c:4a:31:69:50:ca:
d8:e0:7d:b3:d1:1d:d0:fc:0e:60:73:8b:dd:30:44:4b:1b:ee:
31:c9:0e:2b:3d:2b:2b:d6:d9:6b:e4:2f:2d:57:60:cc:8e:21:
bc:8b:6c:50:cb:d9:72:85:3a:68:c6:1e:d7:d8:25:b2:e4:85:
7a:20:f3:3b:8f:d8:54:9b:a6:b8:23:fd:69:9f:59:6b:45:8c:
00:12:f3:c5:62:1f:d1:82:8a:eb:a8:3f:36:9f:dc:66:cb:78:
42:bc:81:4f:05:d4:1f:a7:78:e1:e0:9b:ae:a6:35:52:a9:9a:
0a:bb:54:6c:cc:ab:3f:1e:39:c1:06:6b:92:15:a7:35:79:84:
4a:fa:1e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:01:15 2026 by rpki-client