Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
File: Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft (raw, json)
Hash identifier: /Y+7449kj7NKrtblYXeRSOG5UIHhLHe9yxtoOzELHPI=
Subject key identifier: 5C:45:46:1E:54:34:64:63:04:DD:A2:75:8B:82:AF:DA:EE:7C:53:FF
Authority key identifier: 45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D
Certificate issuer: /CN=45be271d6495293347465c69b97d7380e4bbb46d
Certificate serial: 019D25837C91DDC215BBFE7C46EB9B54C641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
Manifest number: 0579
Signing time: Wed 25 Mar 2026 15:01:07 +0000
Manifest this update: Wed 25 Mar 2026 15:01:07 +0000
Manifest next update: Thu 26 Mar 2026 15:01:07 +0000
Files and hashes: 1: 3_pPfdiwC4KChF-Xshn4oiVhkZ0.asa (hash: AngmFfXAvvs7BeOIV/RLl023pzJd7MaM/N4lm/y2gng=)
2: Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl (hash: vo1AIPHtPER6diOglSKy6sfGuqY19qv1IhKD/ApjtYA=)
3: co3NoaTZrfbmxDfWvZVyzSF9zs4.roa (hash: W81jUWTx5An2ltxr3EmUDv1Bxve3EzM58yjJRH0amGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:7c:91:dd:c2:15:bb:fe:7c:46:eb:9b:54:c6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45be271d6495293347465c69b97d7380e4bbb46d
Validity
Not Before: Mar 25 15:01:07 2026 GMT
Not After : Mar 26 15:01:07 2026 GMT
Subject: CN=5c45461e5434646304dda2758b82afdaee7c53ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:14:8b:11:19:11:f6:63:15:2b:17:31:d4:
bb:95:60:e7:45:6a:d2:14:b6:0a:d4:aa:62:ff:80:
8c:7f:f8:71:f4:9b:fd:77:f2:5d:35:1a:37:20:05:
9f:40:d4:3e:d7:a6:e7:51:23:a6:e1:e7:62:79:6d:
42:92:d0:47:ad:5c:63:53:c0:84:86:6d:f1:3d:de:
ad:c2:8b:b8:bc:80:e9:27:df:54:8d:7a:c4:ca:e0:
16:b7:1b:c1:7d:e7:78:2c:45:bc:15:72:7b:14:2c:
78:67:63:1c:a8:11:87:8a:c3:b8:ce:0a:d3:cf:d1:
df:53:11:0b:69:00:03:49:14:6c:d1:98:ea:93:fc:
82:6e:cc:d5:da:16:ed:81:53:71:db:c0:2e:b4:e6:
7e:38:19:ff:31:8e:8f:f4:75:e2:c7:c1:e1:fb:f6:
ee:9e:b0:94:2a:bd:91:f7:ee:b6:a6:23:a9:42:ff:
12:1f:c3:05:87:52:06:28:0e:b3:b5:bd:fb:bb:20:
51:13:e7:f6:50:6b:16:96:24:fb:eb:87:94:eb:95:
6e:3b:14:39:5a:15:65:39:b6:a2:19:b4:d2:0b:9e:
b0:22:dd:5a:ae:46:98:0b:d7:1e:77:99:62:9a:3b:
83:54:12:07:ca:2e:70:76:d8:e6:21:81:29:f0:67:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:45:46:1E:54:34:64:63:04:DD:A2:75:8B:82:AF:DA:EE:7C:53:FF
X509v3 Authority Key Identifier:
keyid:45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:27:3e:ca:50:f4:cd:0b:de:ae:2c:b2:fa:90:68:d5:a9:6b:
8c:5f:51:82:51:87:98:0e:c5:d5:d4:db:e0:03:67:12:8d:a1:
20:ab:3e:1c:6a:1b:da:0e:5d:6a:d3:44:75:35:f2:0a:1d:72:
03:cf:02:4c:3a:3b:2d:7a:cb:ab:84:47:57:f2:0a:28:23:44:
64:ee:6f:f7:f9:b1:1d:b0:53:e1:46:d5:f3:8e:d0:f5:be:45:
25:94:99:9a:2f:9a:eb:dd:b4:83:a9:3d:e8:99:10:eb:23:b3:
7d:bf:c8:54:2d:8b:36:36:21:1c:3f:60:e4:e6:b2:4f:59:4c:
cc:c0:9d:61:7e:3f:54:70:49:b5:bd:e9:ce:6d:76:57:b9:d3:
88:60:2c:42:d2:da:34:32:d7:92:25:1e:0e:de:6a:3a:94:64:
11:14:de:bc:a2:1e:2e:5e:79:81:da:75:85:87:c4:52:3a:01:
02:09:b5:b0:2e:09:82:a2:59:cb:79:73:d6:9a:b0:cd:d2:e6:
65:7d:ab:c8:e9:90:22:77:b3:51:1e:92:5c:58:1f:4b:45:14:
f2:c8:22:d2:d9:c4:d4:c9:60:86:1b:3e:59:30:80:ee:5e:03:
01:cb:a1:74:d8:b3:3a:2f:4b:65:84:5e:47:22:a1:67:3a:5d:
4e:54:c4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:29 2026 by rpki-client