Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: d2G8TBTbMAn0MxB+WtIuaFuCApKvzTuqUAixD2cs+VM=
Subject key identifier: 0B:47:09:D8:89:ED:6E:61:E0:82:B4:01:79:9F:B5:6A:A6:26:D0:9B
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 019D273AB8A175BE7A01E360D054DDACB54C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 155F
Signing time: Wed 25 Mar 2026 23:00:52 +0000
Manifest this update: Wed 25 Mar 2026 23:00:52 +0000
Manifest next update: Thu 26 Mar 2026 23:00:52 +0000
Files and hashes: 1: 1-r4Lv2Rmvz8PS3uEyqLHDg79e6o.roa (hash: Ynnh/ie5fd1c8AWIp3/nOFWKmHgGwnafc2HeQlk9EJ8=)
2: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: 8R1DpPqRuMmn044auUZB1lFxNhxFh0DmRH986BBJiZ8=)
3: w3Lux0gfeLL5j0FE93SK7EkO-xA.roa (hash: /yS1rew79qv077Dug+2vMb4pmqIyVizWzCEA9rbz10o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b8:a1:75:be:7a:01:e3:60:d0:54:dd:ac:b5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Mar 25 23:00:52 2026 GMT
Not After : Mar 26 23:00:52 2026 GMT
Subject: CN=0b4709d889ed6e61e082b401799fb56aa626d09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dc:93:a9:50:48:97:d2:71:3a:64:f8:60:50:
2f:91:cc:fb:e7:0a:9a:94:10:95:48:df:90:0f:f5:
b9:4e:79:23:30:94:30:88:94:55:70:d3:22:0b:5d:
1a:08:af:92:a8:d1:1b:5c:1c:20:32:22:0f:fb:90:
20:c4:f0:4e:c1:75:7c:03:6c:d2:13:75:e4:c9:93:
b7:0a:25:b5:a7:27:a7:9a:a6:67:33:6e:b4:1d:6d:
81:f5:bf:7b:5c:9d:2c:98:8f:a6:5e:77:e1:df:10:
34:d0:da:42:e4:31:8d:25:00:95:90:02:ed:d9:2d:
bf:44:9c:6c:62:fb:01:61:89:8b:db:27:3a:a1:7d:
87:48:15:df:f4:b1:58:5c:23:27:25:42:66:85:33:
0d:5d:c7:0f:3d:e9:fe:ac:6a:8a:2d:07:01:66:da:
ea:bc:b9:7a:a6:cf:c6:5e:16:3e:45:14:0a:da:b8:
17:d0:6f:28:c3:bd:fd:bf:2c:47:0c:81:a3:bd:ee:
22:43:fd:31:ba:e0:51:10:72:ad:81:8a:57:08:d2:
af:3a:fa:c4:12:ea:ef:17:92:13:f1:48:8f:cc:c6:
85:84:42:d7:37:02:f3:d9:e5:dc:00:4d:af:9e:c2:
75:90:97:48:c3:73:b7:7b:b3:aa:13:c9:72:33:c2:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:47:09:D8:89:ED:6E:61:E0:82:B4:01:79:9F:B5:6A:A6:26:D0:9B
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a2:f1:ee:b9:4b:a4:40:8b:ff:47:d0:d9:4a:a3:d7:90:6d:
bc:54:59:75:75:e7:b4:90:b5:41:c3:21:c8:e9:a0:81:ef:40:
15:70:43:8c:8b:5e:f6:31:85:08:4f:8d:6b:f5:be:e2:5f:d0:
60:35:20:7d:6d:9a:06:cc:9b:13:f2:b2:64:7b:f0:41:e6:6d:
dd:34:21:b5:7f:5f:65:13:c5:d8:e4:9e:b1:f6:50:42:70:51:
bf:ed:c8:71:05:62:b0:2d:d5:73:66:1c:52:67:b6:e3:49:6b:
ab:20:4e:73:82:71:4b:6c:0f:49:44:d5:96:1a:ad:fd:67:57:
cb:8e:7d:2c:36:f4:6d:d3:2d:ac:d3:06:74:bb:5f:ff:9f:a5:
1a:f6:1d:b0:3d:81:73:b0:59:74:f4:8e:c8:35:68:56:22:b8:
8f:e8:db:6d:ba:c4:76:ae:55:69:2d:a5:50:76:ea:d5:68:f6:
8e:a3:c2:84:01:40:44:1a:d1:22:a5:05:f6:2e:03:72:18:7a:
09:fb:df:cf:68:98:b9:a1:48:1f:7e:56:41:37:e2:e7:d0:e4:
10:77:4b:64:5a:52:d9:94:a9:4b:18:0b:6c:d1:09:c2:47:d3:
ab:7b:80:cb:2a:aa:d5:27:73:d3:7d:f9:52:c9:5e:5a:fd:3e:
79:3e:f7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:11:11 2026 by rpki-client