Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File: Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier: E+V/Wl1dx5hmNNF51FcSiMLHNwSXF5OpCqIMgKd6zPQ=
Subject key identifier: B8:29:07:46:89:6C:F7:F3:BC:19:24:47:B2:86:28:09:63:AB:3F:E8
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 019D29979C45F58AF3B85BF910FF7A75EE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number: 1897
Signing time: Thu 26 Mar 2026 10:01:34 +0000
Manifest this update: Thu 26 Mar 2026 10:01:34 +0000
Manifest next update: Fri 27 Mar 2026 10:01:34 +0000
Files and hashes: 1: 0MnT-Cev0aWfox9D3TA-NvqEMlk.roa (hash: JJLpUG+0ObMqR5bxSAi6saPQ/DL3PUHcYLY29JhBmbE=)
2: 1-LbhNdw_AJV43onNE0QCUpCX6so.roa (hash: dSYVcw8EiYO4/PAbhwcAgMdvgRcG7f4kUZi0vNXjJIw=)
3: 4BHAHtAhc28ZrQwUD5OHuec1Ir8.roa (hash: 0iGZlpXjvTxGNf9N3a9R/JttWSb6ffwtMSks1EBv2mQ=)
4: 9h9M7PjhCe5Xzh52sY19F_HCfoo.roa (hash: dKnlXAO85KhguToJuoLLUtMZOEcwIkloXdGeaFlciRA=)
5: AFX34QTnP207XVV_8PKrJ8TJVJg.roa (hash: hVizqqIjbbc78J/ZubGhAhYsI/9yAoa6vJ1uP6RfMPU=)
6: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: LE7F0RQnYdD6PXaxCPNNNfu5bM5n9behO3tVPa+ObK8=)
7: TB3TWMd6B_jTmmabHUiaE7GbxpY.roa (hash: Asm92jz966O9dWSXvo5IS2rhxQ2wThoj/frBnCQjxYo=)
8: kHyEvJhu_w11Kx9L4McOAF2P03o.roa (hash: jmuEXw0e3wCECNG5mj5zMNmwosrMAavIJYnu60jwGTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:9c:45:f5:8a:f3:b8:5b:f9:10:ff:7a:75:ee:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Mar 26 10:01:34 2026 GMT
Not After : Mar 27 10:01:34 2026 GMT
Subject: CN=b8290746896cf7f3bc192447b286280963ab3fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8f:37:39:d2:c9:ae:f4:33:25:7f:43:56:e6:
2e:6f:f3:81:c0:a3:77:09:8e:d8:40:80:5b:85:99:
69:06:b7:c7:b0:75:d6:9a:cc:85:b6:05:e0:78:ee:
05:66:06:58:07:97:f7:c5:dd:a8:ce:c3:0c:57:78:
c1:f6:48:41:23:a3:3f:47:d6:5f:7b:93:dd:c4:89:
06:9d:bf:7f:3c:ba:77:eb:f1:0f:5c:fa:7e:a2:72:
dc:63:1c:56:8c:a0:b5:f6:45:b4:6a:a1:fc:cf:b9:
30:0f:c9:84:71:58:db:c9:a3:da:e1:e1:c3:49:7b:
12:78:20:b3:1b:99:69:6c:ae:68:34:05:07:06:43:
69:42:7e:17:c0:38:1a:50:f5:e5:eb:7a:cb:e1:69:
dd:4e:82:ce:68:ac:25:2d:1b:d7:85:f5:3e:16:02:
fb:e1:fa:47:c9:d9:a9:b0:c3:08:f2:30:38:03:a3:
43:58:26:7d:a4:83:69:cb:cc:85:ee:d7:51:56:6b:
aa:a5:ae:b4:fc:16:13:3a:0e:d4:24:ac:55:87:2b:
55:89:c7:60:8b:85:67:cb:41:fc:b8:2b:d7:16:9a:
ab:d2:58:26:5a:4c:48:cf:35:8e:8c:8c:6c:b8:f2:
71:4d:3f:37:96:2d:50:5a:6c:e4:ff:38:1e:1d:fe:
74:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:29:07:46:89:6C:F7:F3:BC:19:24:47:B2:86:28:09:63:AB:3F:E8
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8c:2f:29:e3:0c:a7:40:54:ee:ed:cf:32:d7:67:0d:b9:3c:
50:3f:b2:1c:b9:b3:84:71:3f:7e:91:fc:c8:12:67:f0:c1:c6:
50:b1:99:0c:6b:67:ad:b5:70:05:c5:0b:8d:d7:22:53:83:c0:
b1:39:99:f7:24:34:ad:78:27:02:9b:7c:a8:b7:d2:d2:8e:5a:
d1:c0:3e:ec:aa:d9:d6:be:25:ca:e1:2d:b3:9e:13:9a:27:07:
df:89:9d:b0:13:65:bb:03:2e:78:04:1d:be:0f:c8:86:b7:d5:
33:ff:a1:86:c9:0e:c3:c1:52:ee:d7:21:58:0c:1c:57:1c:b1:
d4:15:8d:b7:58:6b:f9:da:50:fb:46:71:e3:93:e2:9e:91:3f:
7a:07:c8:89:d4:46:58:f8:82:c2:40:96:12:aa:25:7b:df:09:
93:e8:10:b2:9e:0d:96:8f:f1:07:08:61:95:50:8d:21:1c:4d:
1e:d0:da:67:17:8a:c3:60:53:6e:f8:be:d3:73:c3:7e:5c:1f:
2c:18:43:80:0a:5e:fc:66:f7:ee:ad:82:1c:81:5b:ce:59:aa:
43:54:b7:f5:0d:c7:35:88:2f:24:d2:71:24:cd:14:33:91:5f:
2e:17:8c:9a:62:58:43:55:88:b4:53:9a:99:28:47:0f:19:c1:
4e:f8:f4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:15 2026 by rpki-client