Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier: ZqgrTYy6osMbe7o1XHcF19lKJuHK+2tRs5ACUOCG8Mk=
Subject key identifier: 15:7B:96:A6:90:41:3A:41:AB:C3:FD:29:C7:26:D7:1C:8C:23:B0:F2
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 019D273B2CC07A57DB75CC86EDFD54457DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number: 0B54
Signing time: Wed 25 Mar 2026 23:01:22 +0000
Manifest this update: Wed 25 Mar 2026 23:01:22 +0000
Manifest next update: Thu 26 Mar 2026 23:01:22 +0000
Files and hashes: 1: 9tGzK-FCrgGlyf8btSGObHH6Jkw.roa (hash: NlammvVp7/v8P1KUtxpc69bkMW7FgZFFOJxxoLecI3k=)
2: NJAtBEz3Ixv_CCYeRvRJJECYvnk.roa (hash: 8VY+OH2qENoVZQA8QBMe/XGjN1hAsUDKuWI2emaWxMU=)
3: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: 7zVRPVp7V6wZAHJB+8HbamfOgKcYwT/bZQvdbUK7d3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:2c:c0:7a:57:db:75:cc:86:ed:fd:54:45:7d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: Mar 25 23:01:22 2026 GMT
Not After : Mar 26 23:01:22 2026 GMT
Subject: CN=157b96a690413a41abc3fd29c726d71c8c23b0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:9c:5b:31:1f:a5:aa:82:3e:65:18:fc:10:
ca:41:fd:53:cd:70:fe:b1:1c:7b:90:b4:83:15:f4:
3c:d1:1c:97:3c:24:51:2c:05:67:82:58:56:03:3d:
fa:e8:3f:62:9f:1d:a6:6b:51:e6:a7:78:af:83:3f:
44:a9:65:64:95:b6:bd:e1:a4:dd:06:fe:0b:79:0d:
7b:5a:23:e7:12:ae:ff:f9:0b:d5:d5:93:a7:64:fa:
69:47:da:ee:d4:eb:af:34:ed:ef:6c:e6:d9:4c:19:
3f:b6:dd:b5:63:6b:f2:fa:cb:f1:93:ee:a3:36:83:
4b:37:4d:2e:bd:ae:c4:f2:c2:14:9a:be:96:0a:15:
db:b1:73:70:6d:9d:13:d0:02:b3:6d:65:14:7e:28:
78:ba:40:2d:da:c4:a9:59:be:9c:e8:e8:85:d6:ae:
43:96:72:af:d8:48:6d:df:ac:45:86:a4:e6:b5:fb:
67:5a:e5:b0:76:51:a9:96:d3:3c:61:fa:d2:59:c9:
08:a0:de:64:06:e1:f2:e4:7a:c9:69:d8:ae:d6:45:
d4:70:f5:17:51:c9:b1:52:44:01:76:d0:f0:cd:7f:
b8:61:85:1c:3f:c3:08:61:b9:6f:7d:ed:bc:18:c2:
b3:c0:7e:24:8a:23:00:74:f0:b3:cd:2c:47:ad:93:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7B:96:A6:90:41:3A:41:AB:C3:FD:29:C7:26:D7:1C:8C:23:B0:F2
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:11:d3:5d:fa:29:80:1c:b2:8b:f7:60:ec:5e:48:72:90:aa:
d8:9d:39:6a:8d:eb:73:fd:40:3a:90:27:de:4d:77:e6:7d:e7:
46:98:9b:4a:67:fe:18:32:65:56:84:16:9d:c3:36:6c:31:c6:
9c:12:3b:99:c1:26:ec:c9:7c:68:ca:63:67:6f:21:41:bc:1f:
51:67:10:d5:ee:0f:3f:d8:dc:0f:1d:02:db:4c:0f:0b:52:c9:
b4:3d:73:98:2e:6d:9e:b5:75:c3:c6:55:22:02:4b:36:c6:ca:
65:38:a8:13:c8:5a:09:6b:b9:27:a7:34:5e:47:69:cb:bc:37:
84:41:d5:c6:c9:ed:71:71:62:88:d2:77:43:3d:f5:0a:ad:4a:
1d:73:d8:e4:05:e8:99:b5:85:02:6e:8b:ac:9e:e2:a8:b3:95:
a5:0f:f3:1d:e1:3f:64:5f:8b:ec:28:be:2f:95:f3:43:3d:15:
fd:a6:53:23:55:66:5e:a5:84:cd:2c:96:f6:71:43:99:c2:18:
1a:a8:3a:53:05:7c:47:12:bf:c1:c0:f4:99:65:f8:e3:62:a3:
8a:98:f1:92:71:ac:3d:df:5d:99:57:c8:3b:dd:ad:60:bc:a0:
74:3c:67:70:d4:c3:f1:25:f7:3a:d5:7c:79:58:78:77:61:53:
e7:d3:97:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:58:01 2026 by rpki-client