Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
File: RNPMWRzro4YTDzyfdCZFi4iHwus.mft (raw, json)
Hash identifier: o9MkDjlPA7WadlwUYNagpyg7Q1eNmvHzw+XzGPt7j60=
Subject key identifier: C3:55:B9:AD:96:FF:CF:22:7E:4F:3F:A2:87:77:76:C7:86:72:03:03
Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
Certificate issuer: /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Certificate serial: 019D29972EEAD86474BB3AF6F79835A0B277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
Manifest number: 08B2
Signing time: Thu 26 Mar 2026 10:01:06 +0000
Manifest this update: Thu 26 Mar 2026 10:01:06 +0000
Manifest next update: Fri 27 Mar 2026 10:01:06 +0000
Files and hashes: 1: QSPZWdBj02_wXIuy1IGBOnPdy1w.roa (hash: bUbRWWpDUh0QcX+CtlV8kusXAQJDODXxvoAaGuQVCaM=)
2: RNPMWRzro4YTDzyfdCZFi4iHwus.crl (hash: AJQpNEr0gIy0S4Nm0zyI/5/lJsEhzK5DvVCyBueazzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:2e:ea:d8:64:74:bb:3a:f6:f7:98:35:a0:b2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Validity
Not Before: Mar 26 10:01:06 2026 GMT
Not After : Mar 27 10:01:06 2026 GMT
Subject: CN=c355b9ad96ffcf227e4f3fa2877776c786720303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:93:cd:3f:d7:41:ee:ba:0e:5c:64:83:ab:
36:ad:94:84:13:c6:1f:29:02:89:36:ef:cd:07:d3:
f6:82:43:76:13:11:8b:73:11:e9:4a:78:c0:f5:8d:
9a:25:f2:31:3c:0b:98:a7:12:98:38:69:16:41:0b:
0a:8c:29:9d:0f:47:ab:3a:e4:93:a1:81:21:1b:e2:
41:ef:71:b5:71:7b:75:b8:30:80:bd:35:5c:a5:1c:
86:f8:be:20:14:42:26:47:31:30:7c:a0:1d:13:6c:
d8:1e:cc:24:12:4f:81:0a:5d:9c:66:90:5a:56:8e:
9f:34:09:4d:e0:fb:15:6a:c0:6b:55:38:e3:1b:29:
3e:be:0f:1c:21:56:11:71:13:f6:2c:c3:8e:08:2a:
3e:ec:2c:7f:5d:c6:98:a5:da:1b:a1:23:21:40:93:
10:55:55:17:21:6a:bf:f4:d0:42:30:1d:d0:54:4c:
ab:40:b8:f9:24:e8:40:8f:f4:3d:ae:50:a8:6e:93:
48:a5:1b:65:0f:c1:b9:09:bf:dc:d2:2a:a3:af:a2:
db:32:9e:4a:ac:d6:31:4d:d8:20:b3:5c:97:6e:4e:
d8:7f:21:e7:5e:57:fe:a2:9a:06:11:70:bd:3a:27:
e7:4f:02:cf:eb:73:05:62:e4:26:a4:40:6d:a0:38:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:55:B9:AD:96:FF:CF:22:7E:4F:3F:A2:87:77:76:C7:86:72:03:03
X509v3 Authority Key Identifier:
keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:12:4d:00:86:21:f4:a5:ea:65:08:dd:9d:bf:e8:2f:e5:1f:
93:64:eb:b1:70:73:16:a5:e9:bf:32:6c:12:26:a0:36:ac:40:
24:4e:df:e9:16:02:0a:bd:dc:cb:38:66:49:66:bb:07:7c:75:
3b:af:33:0c:b4:54:05:bf:24:3b:f3:a9:74:71:e8:8b:82:34:
2b:46:06:5f:fd:00:4e:d8:22:42:14:db:08:00:55:1f:cb:0b:
c2:02:6e:cb:74:f4:6b:2b:a1:ca:b1:8c:97:42:ec:07:cd:e7:
0c:bc:b1:1d:eb:f2:fc:cf:25:08:69:a8:c4:1f:e3:ca:6e:d6:
f1:48:c0:46:0b:ab:1e:cb:ae:d5:de:8d:09:6f:7a:9d:7a:cb:
73:b2:7b:a3:ab:6d:0d:90:31:a2:4e:09:34:d3:f2:f7:ef:59:
d1:c4:8f:37:37:9d:e3:ff:f6:39:45:ff:fa:6b:45:87:96:fc:
7c:8a:02:7f:28:f7:3a:25:8b:65:45:90:ca:cc:8c:1f:a1:03:
b8:ee:a1:4a:9c:0e:4d:95:01:71:98:98:52:c3:39:2e:fc:bd:
61:09:99:db:2e:b5:e2:00:b3:36:4a:c0:f2:83:9c:3c:2a:9a:
36:2e:be:bb:bb:c1:1d:b8:72:dd:34:bc:d1:a4:2a:bd:d6:8c:
01:77:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:16 2026 by rpki-client