Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
File: 484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json)
Hash identifier: wTLJ4Id2+b1aY8Qfas6UXX+ZQ/wPCkKjrdOcdPS6vjY=
Subject key identifier: AC:9F:A4:68:52:47:2C:6C:00:C1:6B:35:18:D0:DB:8B:6D:C8:5C:AC
Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
Certificate issuer: /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Certificate serial: 019D2961B1FFE30E1BFA725746B6DC5753CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
Manifest number: 0F1A
Signing time: Thu 26 Mar 2026 09:02:41 +0000
Manifest this update: Thu 26 Mar 2026 09:02:41 +0000
Manifest next update: Fri 27 Mar 2026 09:02:41 +0000
Files and hashes: 1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: Dt1VUyYhtrzfEpPqAhjz1V4tD/MTqt5jdgLhu0FFTGg=)
2: Sb27fx8W2Bv1m1pEAWpcbW-vK10.roa (hash: ClUudBc4gF5lYIHf+aYM1gznaI2Os4gu/iEuZ8iqJzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:b1:ff:e3:0e:1b:fa:72:57:46:b6:dc:57:53:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Validity
Not Before: Mar 26 09:02:41 2026 GMT
Not After : Mar 27 09:02:41 2026 GMT
Subject: CN=ac9fa46852472c6c00c16b3518d0db8b6dc85cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:a4:8b:f7:93:fe:52:73:98:10:40:aa:52:
0e:85:6a:fc:0a:6d:e9:2f:34:f0:34:3f:fc:c3:de:
18:47:5c:07:36:d5:ec:7b:85:d6:53:3d:39:a1:19:
90:94:d1:6d:cf:9d:20:ad:4a:09:62:e5:7f:f6:1a:
f7:5c:15:ed:20:3a:10:cc:ca:dd:f8:e0:e3:8f:0e:
99:35:7a:30:c5:15:e7:e9:9c:f8:64:5d:33:f7:80:
49:bf:24:86:2f:fc:bb:f2:4b:8d:36:7c:fc:75:40:
f3:8d:ac:83:32:0f:4e:b9:39:4b:cf:69:3e:d6:a1:
b8:6c:32:0d:dc:45:93:e9:fe:95:6e:6f:6e:66:3a:
46:39:52:ef:7d:75:11:f2:75:ea:52:c8:28:d9:ff:
14:cc:e5:1c:e5:84:72:e9:8c:eb:02:a2:c5:75:cc:
4e:fe:50:f2:a5:5c:04:2a:50:36:fe:61:be:8b:2d:
df:a9:f1:4f:cc:26:8e:97:0d:7e:c6:46:f8:26:3a:
51:20:43:ea:80:d7:4d:9c:d5:ed:2e:60:a9:2e:1a:
f0:3d:c1:e8:c0:56:fb:d0:fb:2f:ca:b3:29:7c:e4:
32:80:98:ea:c7:63:80:b8:ad:dd:9d:d0:ec:bb:a3:
47:c6:d8:2d:5d:c3:55:f4:ca:d2:35:4e:6c:18:d4:
ab:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9F:A4:68:52:47:2C:6C:00:C1:6B:35:18:D0:DB:8B:6D:C8:5C:AC
X509v3 Authority Key Identifier:
keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c4:df:13:43:95:7e:ef:d8:b4:0e:9c:7e:9e:91:c5:ec:8f:
00:f1:92:8d:2e:0d:d0:a3:6a:93:00:be:d8:1b:88:51:03:22:
f1:6c:b2:f4:34:74:83:1b:65:5b:85:c0:cf:75:bc:67:73:f2:
d0:d7:cd:59:ab:77:60:29:c5:eb:b0:a6:cc:dd:49:54:40:46:
55:58:14:34:24:36:50:33:d9:05:ba:7d:76:ca:21:aa:57:74:
72:3c:b5:47:7c:4b:60:ce:97:2f:12:d3:e6:f3:4f:2d:af:8b:
3b:80:12:29:4d:b7:20:80:32:7b:2f:08:37:99:5a:cb:21:44:
ba:b5:42:6a:04:c1:41:05:b0:e1:a5:33:42:7d:ed:26:86:06:
fa:95:61:5e:8f:b3:ed:cb:bb:30:29:42:0d:61:63:72:2e:c4:
64:99:c1:50:c4:46:34:05:fe:06:6a:8d:6e:9d:a4:bc:59:65:
0b:b5:8c:d3:fe:24:d9:51:cb:36:46:e8:74:7a:4f:65:ec:90:
3d:8f:f3:81:fe:79:a6:e7:ae:e3:6e:c6:5b:8a:45:e7:93:ff:
d7:33:5c:ac:4a:f9:84:43:a8:76:57:19:5f:06:8b:db:5d:b6:
15:c7:3f:bc:1e:8b:a5:c4:a9:63:03:a8:7e:2c:20:a6:4d:b9:
45:9a:2d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:38:04 2026 by rpki-client