Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
File: roNVKZN0KXkz0oH1HrdLpcLJHME.mft (raw, json)
Hash identifier: 6phyMUMxC0AvFalJi3AyT8Tfv4j6k2LXjcYB1B+ZG9k=
Subject key identifier: 6C:E3:89:15:BE:9D:8D:02:2E:03:E3:54:74:8B:F9:BF:2D:38:67:D0
Authority key identifier: AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
Certificate issuer: /CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Certificate serial: 019D2A3B4EAF5521096B400182B6C5070ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
Manifest number: 13DB
Signing time: Thu 26 Mar 2026 13:00:22 +0000
Manifest this update: Thu 26 Mar 2026 13:00:22 +0000
Manifest next update: Fri 27 Mar 2026 13:00:22 +0000
Files and hashes: 1: luvzxOrHEfm-oTNUE5I96OhB6uA.roa (hash: v1k8+jSnmhy9x9cDTWQEao/543k2k6aoV/oRZ1O120I=)
2: roNVKZN0KXkz0oH1HrdLpcLJHME.crl (hash: d+Ple47uQrG8xWOO7cdMo8e7wirwYJae5ykOUby1ajs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:4e:af:55:21:09:6b:40:01:82:b6:c5:07:0e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Validity
Not Before: Mar 26 13:00:22 2026 GMT
Not After : Mar 27 13:00:22 2026 GMT
Subject: CN=6ce38915be9d8d022e03e354748bf9bf2d3867d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:b0:f7:62:8a:2c:2d:b7:4c:c6:08:38:da:
31:2f:5a:ea:1a:de:d4:69:d0:b0:b6:93:55:11:37:
23:2b:6f:f2:ca:82:18:08:1f:44:d4:2a:92:87:56:
72:ba:8e:86:e9:da:9b:ec:0f:34:d3:89:79:b2:2a:
fd:3f:80:be:8e:f5:6a:8f:53:3f:c9:6f:29:11:2f:
18:c5:76:db:e3:74:fa:29:ce:e2:6b:6e:f3:3b:32:
37:b8:45:f6:0a:4d:3b:f1:8a:6f:b7:db:f0:80:58:
3a:fa:94:84:32:c2:a1:5d:cb:49:a3:49:ff:a8:2e:
d6:7a:6f:d9:19:be:62:29:e8:a7:52:4b:9a:c6:5a:
d0:19:dc:b1:a6:17:bf:40:74:fc:98:30:9c:a0:57:
44:a5:c1:72:9d:e3:af:01:72:97:6d:0c:d1:d7:82:
a3:e7:f5:f4:9c:47:a7:f1:ee:78:73:d7:c2:e0:93:
e7:bc:c2:f2:fd:49:5e:07:e9:4c:93:01:c4:02:04:
b0:3f:f0:12:8f:f6:b7:9d:b8:a5:56:7e:6c:96:60:
a9:11:d5:87:d4:60:9f:12:11:12:b6:a8:73:5b:29:
87:35:b1:70:e2:f1:8a:8d:b6:0f:a0:de:ea:c9:52:
76:20:2b:99:22:c3:18:f3:07:34:02:85:33:d4:b2:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E3:89:15:BE:9D:8D:02:2E:03:E3:54:74:8B:F9:BF:2D:38:67:D0
X509v3 Authority Key Identifier:
keyid:AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4d:df:a9:d4:bc:14:dd:2d:7f:b8:20:dd:b8:8a:03:12:84:
7c:0a:54:ec:91:19:98:f0:cb:9b:e0:07:75:e6:31:0d:6a:04:
21:50:08:12:55:0a:72:2c:41:41:79:0f:2c:38:d7:be:24:fa:
6b:0c:28:36:ce:5c:41:82:af:2b:8f:99:2d:a7:01:b7:ad:b2:
00:49:3c:18:ac:3c:0e:54:c1:1f:67:54:f2:5a:49:61:e2:93:
99:ba:87:59:dd:7f:b6:ec:ba:c6:5a:85:bd:9f:b9:bf:ad:28:
14:f0:61:32:55:5a:3f:74:e4:2b:27:f7:e1:c4:d9:a0:3a:2d:
b2:46:c8:16:b2:3a:34:0b:12:c8:c5:28:12:a9:e2:97:d2:b7:
47:bd:8f:85:18:51:09:98:73:9b:fc:75:e9:be:73:99:af:01:
f1:f7:b1:9d:41:9d:c2:e3:fe:8c:83:13:08:ab:69:85:b5:56:
ea:67:8f:f9:28:d4:50:6e:1a:c1:8c:12:b4:79:7d:cb:da:7a:
c1:bc:24:3f:ad:13:eb:06:0a:4e:a4:ae:eb:c1:05:64:ad:3d:
d4:38:d7:7d:f3:27:5c:2e:91:00:0f:fc:68:50:91:f0:7f:7f:
01:81:fc:94:43:6e:0c:e6:55:7d:c6:de:ea:10:6f:e9:d8:74:
35:b3:1d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:22 2026 by rpki-client