Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
File: 91sCopx2blsTs-sXapccEt3h1M4.mft (raw, json)
Hash identifier: xknx4dIn8/xnszKzBs2AB/wzy2rCGHxrl8SMilG1pa0=
Subject key identifier: 10:C3:44:5A:F8:27:CF:E9:07:FE:61:1A:A7:A7:D5:FD:D7:3B:46:66
Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE
Certificate issuer: /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
Certificate serial: 019D27729600BBC172198D48E23A4FAC0252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
Manifest number: 140D
Signing time: Thu 26 Mar 2026 00:01:54 +0000
Manifest this update: Thu 26 Mar 2026 00:01:54 +0000
Manifest next update: Fri 27 Mar 2026 00:01:54 +0000
Files and hashes: 1: 91sCopx2blsTs-sXapccEt3h1M4.crl (hash: RHsfw4SSToOEDjgy5KBqo2e7thzHKnoz6X7ii+jmWaA=)
2: zzK4qCAtynNjDjZWUiRCQn5dpDk.roa (hash: E6+IdS0ezqI3UKO4kCUBOk2GF16tHu1sV21TlzMQxMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:96:00:bb:c1:72:19:8d:48:e2:3a:4f:ac:02:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
Validity
Not Before: Mar 26 00:01:54 2026 GMT
Not After : Mar 27 00:01:54 2026 GMT
Subject: CN=10c3445af827cfe907fe611aa7a7d5fdd73b4666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e7:c9:2d:8a:b9:d3:40:fb:c7:4f:c8:d2:cb:
f0:86:20:6f:27:75:a8:0a:7e:0c:d4:d1:6e:7b:df:
1e:b3:63:c0:16:78:19:0f:ad:bf:85:2b:8c:81:0c:
12:38:5c:8b:1a:02:00:c4:f9:e4:cd:64:09:0e:18:
ad:b4:3f:9c:3c:4e:0d:bf:41:40:40:51:18:c3:70:
70:f4:f5:0a:ef:10:f1:06:4a:63:56:b2:5c:68:c5:
e7:0c:b0:11:29:c4:7c:f8:06:0c:d5:59:05:2a:05:
54:1f:24:c0:e2:06:c1:d7:ac:b9:61:b5:c6:a2:5d:
e6:3f:a0:e4:10:4c:fe:b0:d2:cc:2f:8a:2d:b3:45:
06:48:52:1f:74:3e:43:2b:f8:ca:91:06:05:45:70:
4b:33:40:13:64:1e:74:f7:c3:73:b7:4c:91:38:1c:
b9:76:76:6b:1f:89:ad:a8:a2:04:fe:de:c8:1e:81:
45:98:d3:1f:92:b5:1c:5a:64:5d:17:89:da:1b:01:
a6:85:56:a5:e9:84:5a:f5:ce:44:50:67:24:c5:30:
7b:0e:ca:17:28:03:71:1c:f1:46:f3:78:a7:35:4d:
f8:ad:34:34:ea:46:36:b5:9d:cb:57:51:0b:da:d1:
20:94:1d:88:01:c4:aa:8c:11:ef:ef:cd:bd:55:0e:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C3:44:5A:F8:27:CF:E9:07:FE:61:1A:A7:A7:D5:FD:D7:3B:46:66
X509v3 Authority Key Identifier:
keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e3:ed:ea:df:bd:3f:2c:6f:b9:dd:e2:41:01:a5:c4:da:1e:
f3:55:dc:6a:dc:22:e2:2c:8f:24:08:40:e3:60:f3:70:c5:22:
d7:e5:78:c2:46:3f:00:7a:b8:8a:0f:66:f4:f9:38:19:36:d7:
5b:92:ee:68:08:2c:bd:3b:cc:01:53:25:c5:3b:c6:a1:91:62:
6c:97:ec:8f:dc:8c:be:25:b5:de:e4:81:3d:47:67:ff:f7:6f:
56:fb:b7:2c:fa:ae:44:2d:9d:d4:07:14:56:55:30:13:8a:a5:
3c:9d:bd:eb:e0:1e:53:87:17:f4:ee:55:de:02:fb:de:e4:8a:
c8:59:70:9e:b2:c1:6f:a9:05:96:89:f6:0d:f9:dc:be:01:7d:
d6:0c:ff:e9:08:91:f3:99:99:1b:13:08:86:da:53:4b:91:f8:
33:82:f9:a2:05:3d:12:24:62:8b:8b:7f:7f:98:8e:37:dc:b4:
66:b5:b3:8f:9b:ee:15:f0:fa:fb:ed:df:b4:bb:f8:99:41:60:
2a:2c:89:92:5c:b6:f4:74:26:a5:8b:87:a3:6c:68:b4:f1:91:
b9:4c:9c:50:d2:1b:3d:aa:5f:d3:55:ce:8c:65:8a:41:14:5b:
8a:47:89:57:be:42:22:9b:82:c0:a8:14:42:27:7a:d5:fe:5d:
82:07:ef:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:23 2026 by rpki-client