Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
File: rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft (raw, json)
Hash identifier: m6jbfApd5YraHZtRy7Qv1WML4lBjIwYn7lqWm6DyGUo=
Subject key identifier: CF:32:C2:73:51:B1:EF:EA:3B:3E:06:59:65:16:A5:FC:9D:6E:91:86
Authority key identifier: AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
Certificate issuer: /CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Certificate serial: 019D2960C63EBB449BF359A8417B7E448DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
Manifest number: 124D
Signing time: Thu 26 Mar 2026 09:01:41 +0000
Manifest this update: Thu 26 Mar 2026 09:01:41 +0000
Manifest next update: Fri 27 Mar 2026 09:01:41 +0000
Files and hashes: 1: rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl (hash: SJo0SwQhmNtyrYrdzcKsY3xN2Umlj4LLqxF48uKAVbQ=)
2: vKOYOseCMmqNIjMxRhwMUDEk7WQ.roa (hash: pJtwgYaoF3xi2Mwr73dINom7FFrcw02MnipnSTRfmM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:c6:3e:bb:44:9b:f3:59:a8:41:7b:7e:44:8d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Validity
Not Before: Mar 26 09:01:41 2026 GMT
Not After : Mar 27 09:01:41 2026 GMT
Subject: CN=cf32c27351b1efea3b3e06596516a5fc9d6e9186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:ae:4e:7f:5b:f9:73:92:d0:12:0a:f7:0d:
67:da:d5:db:0d:4d:70:7c:cc:73:39:da:eb:8f:55:
99:af:11:2a:a3:c0:f6:4a:b1:3e:57:7c:96:bc:12:
84:52:87:20:84:89:76:7e:6f:8a:27:b2:0c:e4:b1:
99:94:52:11:a3:0f:68:8b:62:21:b8:1f:07:64:12:
a2:84:fb:70:4e:8c:32:9a:4b:24:06:78:7b:5d:60:
fc:3c:01:a8:9f:1e:ec:ec:23:e4:49:ae:43:fa:4f:
e6:f9:f0:88:19:78:75:c0:71:21:d1:94:53:9a:87:
ca:dc:3c:36:f3:51:16:71:4b:5d:48:94:f8:c3:b2:
cd:3b:7e:4b:51:f9:82:a9:46:ab:7a:4f:8d:a5:93:
3e:8c:38:a4:d9:01:70:85:3b:b6:c1:97:26:0f:f5:
9b:3e:9d:a7:1f:f7:23:63:0f:39:50:23:65:72:8a:
fe:31:e2:36:e9:88:2f:50:c9:35:f9:28:91:24:14:
6d:a7:d5:c8:63:b1:9d:19:be:85:1a:7b:16:0a:fe:
f7:c1:98:ca:fc:c4:99:01:8c:6f:4e:62:9e:ba:ca:
53:3b:7c:1f:b8:45:7e:f3:ec:d8:e6:5b:fd:d7:77:
7d:ea:16:4f:93:35:54:5e:69:0f:c3:87:7c:6d:78:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:32:C2:73:51:B1:EF:EA:3B:3E:06:59:65:16:A5:FC:9D:6E:91:86
X509v3 Authority Key Identifier:
keyid:AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:54:a3:e9:a9:6a:c4:7c:48:96:89:ad:e9:91:33:6b:dc:ec:
27:49:47:de:ed:79:87:c1:9f:e7:0e:61:94:c8:a8:77:8a:21:
de:5d:8e:65:0b:df:9c:da:3b:8d:47:2e:82:ce:0b:bf:49:dd:
d3:7d:46:57:ed:64:4b:b1:bc:e2:d9:61:fd:10:3e:34:e8:83:
a6:d3:f9:36:ab:d0:69:38:5b:c7:fc:e4:40:de:e4:67:07:dc:
0e:cf:51:84:d2:ab:45:7e:e2:33:61:3e:de:14:a2:9f:23:05:
4a:e3:f6:cd:6d:c2:b0:b7:08:13:dd:38:e2:75:2c:0e:38:fc:
b2:ca:e1:01:ae:a6:76:52:90:20:7d:23:85:4b:d3:4f:4b:8d:
96:ff:f9:15:4b:01:33:f1:dc:d4:b6:89:9e:2b:67:86:0d:27:
ea:f3:5d:52:7c:5e:09:9d:14:27:e1:0a:18:69:23:ff:62:85:
6f:f6:40:db:3a:54:8c:26:6d:dd:75:86:f6:22:ee:0c:d7:e1:
c9:ce:54:98:3c:85:fc:d5:99:ee:09:56:b9:ff:d6:df:73:d6:
3e:fd:8b:d6:f5:e1:d9:4d:13:eb:ba:c7:75:06:86:b9:05:26:
da:a2:bf:99:49:d4:fd:2d:26:74:6c:f2:95:60:5f:ea:90:90:
b6:27:16:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:57:42 2026 by rpki-client