Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: OY2CPA1lPOaWIm9bK9dNuOlNiQ/rR5rVa/6Brh5tMio=
Subject key identifier: 38:2B:3B:3E:63:13:EF:18:A6:B9:CA:08:65:59:39:71:D6:9F:56:DE
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 019D25BAB209E565ABE644110E4399E7A3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0CF0
Signing time: Wed 25 Mar 2026 16:01:25 +0000
Manifest this update: Wed 25 Mar 2026 16:01:25 +0000
Manifest next update: Thu 26 Mar 2026 16:01:25 +0000
Files and hashes: 1: OTZcNe4faH1uSoNvCZiXYbKK1ds.roa (hash: uIfg5U+1EbmCjtFgcikAr/bmU9dQajvTUZ3MYk7/2xU=)
2: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: KEFKk/1InYiaWApw8o+WdI7NioP2Z8QX0HKQBxP490c=)
3: zRiHFdGjFdtLfm7gsvy2-5E0CpI.roa (hash: LIfEP9SyJvvx/mP2z1DtCTkpaRU2RlrQg1/zTilnakw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b2:09:e5:65:ab:e6:44:11:0e:43:99:e7:a3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Mar 25 16:01:25 2026 GMT
Not After : Mar 26 16:01:25 2026 GMT
Subject: CN=382b3b3e6313ef18a6b9ca0865593971d69f56de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d3:f9:30:0d:2f:52:14:5f:12:bc:bd:f4:80:
7d:13:24:95:64:7d:63:ef:66:5f:1a:50:85:b1:1e:
34:8f:f3:80:25:51:76:19:7b:bc:71:21:ff:80:ef:
c4:a3:63:8b:c6:9e:ef:f1:e2:c9:e8:33:8d:d6:18:
b4:28:79:c9:46:7b:b3:f2:fd:3b:76:85:53:32:33:
69:33:5c:75:c0:dc:a5:90:ba:9f:bf:d3:9a:09:9e:
49:6b:2f:c0:f4:d4:ff:1a:37:35:12:3b:2e:3b:ba:
49:a3:5d:65:26:bb:97:d7:17:30:1d:c4:5f:07:a7:
02:c4:5f:91:eb:e9:2c:44:3a:36:a4:98:39:86:60:
de:ba:07:61:32:29:0a:dd:83:7a:f1:d3:27:a0:f1:
8a:7b:9f:17:87:a8:99:3a:f7:f7:9a:db:6e:b3:b4:
e0:5e:8f:55:30:6e:05:bc:0c:5a:ab:b4:b6:7e:a7:
c4:9e:6f:bf:d1:b6:13:26:1e:ff:a4:2a:1c:c4:5a:
f0:5f:a8:19:bb:6a:c7:9d:0f:fc:70:8b:c4:bf:7d:
da:ab:cf:71:01:bf:1c:a2:4f:e8:4e:c1:3a:38:e3:
6b:38:51:2e:c9:75:d1:68:c4:7a:f2:0d:09:a2:9e:
7b:ed:52:fc:3b:a4:91:a8:ee:f7:0c:00:41:94:c8:
60:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2B:3B:3E:63:13:EF:18:A6:B9:CA:08:65:59:39:71:D6:9F:56:DE
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:00:2f:e9:fa:03:bd:54:e7:0d:5d:78:02:df:5a:ec:ae:d5:
93:76:6b:50:b5:07:40:f5:64:5d:a3:8b:ce:85:bb:70:cd:80:
60:35:02:74:a8:f2:fa:ee:d1:da:b5:cc:3b:c2:77:a9:15:60:
2a:7e:fb:0f:f3:70:bb:c5:a5:78:6b:37:e7:d2:bd:b1:90:fc:
a6:95:70:c0:6c:fd:ea:27:9a:de:90:3c:1e:c4:ed:98:62:38:
4b:5c:4e:b7:28:39:81:df:79:8b:72:d8:e1:be:f9:06:f0:19:
3d:62:d9:3b:5a:7d:7b:78:7d:91:b7:60:a6:7c:cd:e7:45:0e:
42:10:99:d5:dc:b9:f2:ac:a9:f8:1b:49:0c:3e:40:af:64:ff:
d9:6c:36:92:9e:a9:c5:ac:1a:7b:49:f0:35:50:4b:47:dc:70:
7c:6c:1e:93:f6:8e:f7:52:d6:6c:1d:0b:3a:cb:05:86:42:b4:
a5:2d:c0:f4:9d:89:55:80:1f:cc:8a:a6:82:fb:34:df:51:78:
32:a3:73:bd:6a:37:42:c8:54:c5:aa:66:60:17:f7:e8:ff:42:
b9:15:7b:3b:79:69:d5:5e:31:17:11:b5:01:f7:2a:59:aa:b4:
4d:34:29:4a:37:c6:c4:c4:a2:19:c0:7f:af:f1:7b:d8:14:99:
f3:ba:60:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:48 2026 by rpki-client