Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File: ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier: 7Je1yYJm7Uty0U5+sAKBuBBgfJx7FE8XwHS2/QiuQXA=
Subject key identifier: 03:25:4F:64:B8:B2:44:52:4E:F1:EE:B5:BA:1E:F1:57:8D:63:95:96
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 019D262889784CBDBECE02BD2D934E3DC27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number: 0B27
Signing time: Wed 25 Mar 2026 18:01:23 +0000
Manifest this update: Wed 25 Mar 2026 18:01:23 +0000
Manifest next update: Thu 26 Mar 2026 18:01:23 +0000
Files and hashes: 1: 5frQX9750HL3NN8-MyZHPLOJTsI.roa (hash: pxj83AtJMZvXD4c0K+PkZXGVzhxJMxFhP3iPQm4dFuQ=)
2: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: U9ITYWVfrCXPRti36aHnKTYWEckdA/euXysEf07Dwgc=)
3: yzlJwvPmp_FWuAYFJVX7D34LL5o.roa (hash: oyzk/Lk1+iN0NJFMafNwk7yqhxfs0bRUTnktsAxu4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:89:78:4c:bd:be:ce:02:bd:2d:93:4e:3d:c2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Mar 25 18:01:23 2026 GMT
Not After : Mar 26 18:01:23 2026 GMT
Subject: CN=03254f64b8b244524ef1eeb5ba1ef1578d639596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:46:7e:d3:ee:ef:a8:68:88:3e:b1:73:45:
e3:10:61:5c:ba:af:2b:f1:64:33:0e:c7:6d:09:d9:
be:bd:ff:fd:89:01:95:6d:61:bf:af:1e:33:86:55:
53:4a:d0:4b:4b:53:85:84:b4:9a:d8:c2:47:63:96:
d4:97:e3:2c:3b:2a:03:8c:de:aa:8b:10:a9:bc:eb:
56:aa:49:6b:5c:15:74:32:cc:91:61:0f:95:9a:c1:
47:dd:ac:c5:5a:f1:95:e5:9a:11:9c:56:2c:fd:d5:
da:92:a1:a8:d7:6b:fe:55:0b:db:78:39:fb:78:64:
e9:91:9c:56:44:f4:8d:00:b9:99:42:29:ce:6b:ce:
f2:0e:2f:b3:a5:09:3a:94:2c:62:d4:78:2b:e1:0a:
68:5a:2d:19:7a:74:76:2d:8c:2d:ce:cb:64:5c:c5:
04:29:d8:00:85:3e:d7:50:f5:ff:a7:17:6c:96:14:
f5:3b:5e:81:3f:04:df:16:96:ec:1c:81:b3:91:8c:
cc:a5:b4:e5:47:cb:b0:ef:4f:e6:1e:73:1e:4f:60:
19:b6:f9:96:4a:08:fb:7b:a8:f2:22:3d:48:48:cf:
4f:3e:bf:da:dd:6c:33:f3:8a:b3:74:30:67:75:13:
99:71:83:4b:34:a4:1e:ff:82:32:64:bd:68:95:fe:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:25:4F:64:B8:B2:44:52:4E:F1:EE:B5:BA:1E:F1:57:8D:63:95:96
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:cd:e3:f4:2b:53:fd:e3:ff:55:b2:23:ec:6c:cd:28:92:66:
54:4f:4b:98:b9:69:6e:9d:ea:c0:6d:9e:ae:83:43:5a:98:c1:
1c:3b:a9:eb:17:b4:3f:67:6e:dd:2a:89:bb:ad:ee:42:4f:4b:
d4:07:63:fb:06:1a:aa:2e:af:5a:6a:ab:15:33:05:97:3b:c8:
69:3e:83:1b:33:b7:56:51:18:49:6e:49:79:e6:06:02:1b:3b:
32:d3:d0:24:0e:d3:6a:78:ce:a8:41:4f:b4:76:bd:3b:d7:62:
0a:73:88:ac:d4:b9:bf:30:f7:7b:10:28:1c:e8:09:67:cf:a7:
fe:8b:2f:57:e8:13:a8:c4:44:aa:4e:16:cc:b8:24:4a:fc:19:
39:a2:bd:32:56:08:51:63:d1:da:d5:cb:3f:95:8c:dd:45:6f:
bf:a2:43:a6:0d:aa:fb:95:de:78:63:e1:12:88:17:06:6d:3b:
e3:5d:4d:d8:ec:d8:56:69:45:07:50:21:0a:45:33:f6:c4:3c:
7a:c6:53:92:a7:3e:c3:a5:b1:29:50:7e:59:55:a4:07:03:89:
23:f0:56:ae:9c:b7:7f:05:df:f0:f0:22:12:85:2b:da:0c:34:
4e:28:1e:21:f9:b8:ca:32:f6:f0:08:6b:ae:6c:e4:64:cc:d0:
1b:39:a1:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKIl4TL2+zgK9LZNOPcJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZTNhMGMxZjFkODFlZTA2OTY0M2I0MGMzMjM5OTliYjU1
ODQ2MzEwHhcNMjYwMzI1MTgwMTIzWhcNMjYwMzI2MTgwMTIzWjAzMTEwLwYDVQQD
EygwMzI1NGY2NGI4YjI0NDUyNGVmMWVlYjViYTFlZjE1NzhkNjM5NTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yBGftPu76hoiD6xc0XjEGFcuq8r
8WQzDsdtCdm+vf/9iQGVbWG/rx4zhlVTStBLS1OFhLSa2MJHY5bUl+MsOyoDjN6q
ixCpvOtWqklrXBV0MsyRYQ+VmsFH3azFWvGV5ZoRnFYs/dXakqGo12v+VQvbeDn7
eGTpkZxWRPSNALmZQinOa87yDi+zpQk6lCxi1Hgr4QpoWi0ZenR2LYwtzstkXMUE
KdgAhT7XUPX/pxdslhT1O16BPwTfFpbsHIGzkYzMpbTlR8uw70/mHnMeT2AZtvmW
Sgj7e6jyIj1ISM9PPr/a3Wwz84qzdDBndROZcYNLNKQe/4IyZL1olf5viwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMlT2S4skRSTvHutboe8VeNY5WWMB8GA1UdIwQY
MBaAFEXjoMHx2B7gaWQ7QMMjmZu1WEYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYjMxZGEtNDQ5MS00ZjNlLWJhZTUt
M2Q1N2I2NmIyMTM0LzEvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYjMxZGEtNDQ5MS00ZjNlLWJhZTUtM2Q1N2I2NmIyMTM0
LzEvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqM3j9CtT
/eP/VbIj7GzNKJJmVE9LmLlpbp3qwG2eroNDWpjBHDup6xe0P2du3SqJu63uQk9L
1Adj+wYaqi6vWmqrFTMFlzvIaT6DGzO3VlEYSW5JeeYGAhs7MtPQJA7TanjOqEFP
tHa9O9diCnOIrNS5vzD3exAoHOgJZ8+n/osvV+gTqMREqk4WzLgkSvwZOaK9MlYI
UWPR2tXLP5WM3UVvv6JDpg2q+5XeeGPhEogXBm07411N2OzYVmlFB1AhCkUz9sQ8
esZTkqc+w6WxKVB+WVWkBwOJI/BWrpy3fwXf8PAiEoUr2gw0TigeIfm4yjL28Ahr
rmzkZMzQGzmhSA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:57 2026 by rpki-client