Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: lAtbGYhr6nSV6AgGA4DFvwIhNyvtBFg1ZdNh6ERo6fs=
Subject key identifier: B0:FE:92:A1:67:B2:54:12:79:7A:17:07:53:1C:9B:B4:99:C8:27:27
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 019D25BA3D9B192A96385991BBEE75FF2922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 15D2
Signing time: Wed 25 Mar 2026 16:00:55 +0000
Manifest this update: Wed 25 Mar 2026 16:00:55 +0000
Manifest next update: Thu 26 Mar 2026 16:00:55 +0000
Files and hashes: 1: 7P6Im5vS7MUJ-yzLLIAK6fKBDP8.roa (hash: 1brCRxslIloGUfdpm6U1pSbh0q8gMyESOmn7LpzNMpo=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: 0LT9pb8ct48ERQ84iaMTuV4dnqCS8n0XOPWyVWnYmsA=)
3: GZUDzWqJAL2dZXm7LPA-IYt2BZk.roa (hash: fyE8ucidyo4EGIyTiAJR8gxoQAHilS40FZAtS0gtSZ4=)
4: TshvxkGRzWpdZkmbQujodceCcYA.roa (hash: 5VbxjvyHiHbVKo9Pu4BWifcKzehAhCSW23xWmJmvVCU=)
5: terKgDp-lp4YdKLQD6_mhNXlVsA.roa (hash: ntHuNsx6woJ+rhTmlKP6IT/q0AwRNxfD1ikTgfZepas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:3d:9b:19:2a:96:38:59:91:bb:ee:75:ff:29:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Mar 25 16:00:55 2026 GMT
Not After : Mar 26 16:00:55 2026 GMT
Subject: CN=b0fe92a167b25412797a1707531c9bb499c82727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:10:57:ea:4c:95:73:a7:e9:01:63:b2:30:
86:4c:c3:ed:c1:a6:ca:25:b0:e9:95:d1:54:a7:d8:
cb:fd:bd:79:c5:85:e3:15:ae:34:f1:84:1d:3c:bf:
1f:7a:3b:70:4a:ad:99:fc:36:41:d5:b1:70:40:36:
8b:f8:23:78:a4:4e:d7:98:8c:70:bd:25:d0:46:3a:
a7:33:95:7a:17:85:43:38:b9:e8:27:2a:5e:6c:78:
4f:40:62:21:0e:cf:7c:09:64:3a:3b:5a:72:08:fc:
d4:fd:ca:af:14:31:2d:f3:6c:18:1f:2b:f5:98:48:
d0:19:95:b3:9d:4e:b2:46:0f:b2:be:d0:94:50:54:
b2:88:5d:72:69:8e:f4:e2:7d:f9:e8:30:77:d5:b7:
bb:18:a9:92:6f:2a:3f:b5:20:12:bd:7f:cb:6d:c4:
f2:cc:e2:9a:36:a2:a5:54:ea:53:35:a2:0e:b7:c4:
f6:c3:18:c3:15:60:1d:bb:86:76:e9:a8:41:cf:e1:
f5:ab:fb:10:da:e6:9e:83:4c:ab:da:70:2a:63:16:
a5:6c:95:0f:d1:dd:ed:fb:99:9d:4d:6a:92:ce:ba:
51:f3:df:05:3d:19:62:a5:39:46:df:ff:48:99:d8:
c3:58:ed:79:52:44:e2:f6:fb:ca:d7:01:98:45:80:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FE:92:A1:67:B2:54:12:79:7A:17:07:53:1C:9B:B4:99:C8:27:27
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e3:ff:f0:18:9f:43:2e:47:1b:30:39:96:cd:87:21:01:b0:
28:88:a9:b1:9e:d7:e0:a3:ef:0d:f4:4b:b7:a1:7b:c0:0f:3d:
90:6d:34:ed:49:9c:99:64:e8:5f:50:53:46:70:2a:8d:89:cf:
94:62:a1:09:ac:e9:44:fb:88:e1:f4:b2:db:d8:37:2f:00:eb:
f5:51:04:c5:32:bb:a9:06:1c:53:18:1c:be:44:a1:46:ff:62:
b6:78:fa:06:69:a0:9c:1a:db:65:f7:0d:ca:51:70:71:60:3f:
09:f5:81:2f:a6:2a:4d:2e:03:e5:23:9b:b9:13:10:e8:eb:cb:
cb:1e:f0:09:3c:ee:91:cb:d9:69:b0:67:a7:c5:8a:b3:59:0d:
b4:dc:25:aa:6b:fc:fd:4a:7d:4c:fe:2e:5e:f0:e1:29:11:d7:
81:2d:11:2b:7b:b3:99:ce:de:f3:fd:45:1c:ca:18:1b:2d:4c:
ca:33:00:69:14:1d:42:d7:21:11:d1:bf:0d:5a:b4:ea:49:7e:
0c:98:9c:18:e5:12:a4:c8:60:35:72:ab:71:01:ef:f7:3c:03:
7c:71:7e:b8:2f:10:4c:8e:3f:de:89:c4:35:f1:a5:80:f0:36:
06:33:7f:7b:b0:df:a0:06:af:96:98:43:e5:75:85:43:ca:dd:
76:a4:35:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:46 2026 by rpki-client