Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
File: 81bN1aSc5sQqmjX6d7lyeBloiJY.mft (raw, json)
Hash identifier: R4nfEKiOepDzUELRsnZTilZYOO31Ui+XNIji7Vdt9/o=
Subject key identifier: 6A:A2:CB:80:37:29:52:04:03:8F:BE:B2:65:AE:8C:C0:77:83:68:EC
Authority key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
Certificate issuer: /CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Certificate serial: 019D2772B7460DDB0CF513BAA2B1C9A51B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
Manifest number: 0F2A
Signing time: Thu 26 Mar 2026 00:02:02 +0000
Manifest this update: Thu 26 Mar 2026 00:02:02 +0000
Manifest next update: Fri 27 Mar 2026 00:02:02 +0000
Files and hashes: 1: 2gtdnmtxdp159yoykWR7atnRXug.roa (hash: QojryZo1S1FIxC+Q/WaC+2xdtTehaO8dflArcrZGQ6E=)
2: 81bN1aSc5sQqmjX6d7lyeBloiJY.crl (hash: Lkzm1SDc4s2g4vTn33EBTDu1L1zr5EWKYcmYJ04tR4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b7:46:0d:db:0c:f5:13:ba:a2:b1:c9:a5:1b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Validity
Not Before: Mar 26 00:02:02 2026 GMT
Not After : Mar 27 00:02:02 2026 GMT
Subject: CN=6aa2cb8037295204038fbeb265ae8cc0778368ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:57:37:4c:76:d7:be:1d:4c:db:59:e7:25:34:
af:f3:c9:0f:55:a6:07:a7:66:e1:73:a6:e2:82:f9:
7e:4a:19:52:94:75:cf:63:34:63:8c:c7:9c:85:8d:
12:11:ba:5e:01:aa:d6:6d:63:66:d7:73:b0:bd:30:
45:9e:eb:14:3a:a2:b7:38:cf:22:ab:f8:85:d3:93:
6c:f0:64:cf:52:c2:54:24:31:34:6f:65:bc:e7:f1:
5b:83:00:e8:26:18:3d:de:3d:e5:09:d0:ac:a2:ef:
c1:b6:31:31:3b:06:2b:b9:8f:98:63:0d:5f:65:6d:
15:df:82:9d:ac:79:f2:25:e0:5c:ca:c8:c9:6b:14:
50:b1:a2:51:ad:bc:a7:32:23:7a:ba:5f:83:e3:22:
18:68:13:4a:a3:27:b9:e2:b9:7e:7e:e0:4b:49:43:
bc:67:9d:ad:18:59:72:a8:c8:c3:9d:31:20:53:b3:
9c:92:b0:4a:72:8b:fb:15:46:69:23:17:c5:bb:2f:
9c:4b:9d:9b:e1:65:94:bc:56:b2:19:ab:09:3a:3f:
c3:b5:78:74:b3:7e:e6:35:1a:be:4f:4e:7d:36:f2:
cb:32:f3:52:b9:62:a8:8d:e3:0e:ca:4f:6b:1f:1d:
af:a6:5c:77:04:db:43:a5:7a:0f:d9:27:69:3b:e3:
07:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:CB:80:37:29:52:04:03:8F:BE:B2:65:AE:8C:C0:77:83:68:EC
X509v3 Authority Key Identifier:
keyid:F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7e:48:61:a2:31:f9:e8:78:80:e5:4f:15:27:e3:93:bc:96:
46:00:69:7d:f4:49:7d:67:69:99:bb:46:6d:a2:55:58:29:53:
fa:8c:77:cc:20:73:3a:3f:38:cf:68:45:69:58:c2:db:5a:87:
54:da:c2:1f:c4:91:d8:a4:0a:ac:e6:e5:a5:8f:5d:a5:d2:af:
9c:90:10:25:62:b9:b3:a8:84:7f:6f:65:de:f8:21:e1:f8:67:
31:d6:b2:17:19:04:e6:0e:78:9c:18:a8:08:94:24:ef:a2:8a:
f3:bb:4a:fa:99:25:df:74:10:01:e3:53:81:23:ab:18:3b:5e:
19:82:e0:7c:ba:6a:96:80:1f:94:17:b4:0d:96:ed:af:50:01:
f9:a7:0f:fa:76:54:a5:45:08:d2:f1:cc:a6:ff:6d:53:5c:7f:
6e:47:5d:2e:38:cc:64:31:31:29:ef:a9:55:1f:b8:72:36:af:
62:ee:b2:f2:fc:e9:5a:e3:3d:5d:4d:3f:b2:d6:ce:f9:e3:54:
bd:d0:a7:86:23:80:68:30:67:4d:dd:6b:9f:13:7f:77:6f:67:
e3:74:ee:60:a2:26:7a:7f:79:7f:ee:f9:7c:f6:ba:6f:2a:e2:
03:e9:b9:d9:37:85:f2:60:95:d6:4e:cb:f3:4c:bf:4b:84:c6:
85:d5:5f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:00 2026 by rpki-client