Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
File: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json)
Hash identifier: 4yilPAZbdjodUWzUYMvteys+q41d2QTyM86G+4DMDEY=
Subject key identifier: A6:AE:B4:2C:40:11:4E:55:24:B5:A2:24:9A:3F:FC:B7:6A:D9:00:1A
Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
Certificate issuer: /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Certificate serial: 019D2884326F3E6C23EB79355B11C5922536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
Manifest number: 0605
Signing time: Thu 26 Mar 2026 05:00:45 +0000
Manifest this update: Thu 26 Mar 2026 05:00:45 +0000
Manifest next update: Fri 27 Mar 2026 05:00:45 +0000
Files and hashes: 1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: FI86RbKbWhpjOIaWs6bu8eQtQo8Rlu28DX7ft5gbBqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:32:6f:3e:6c:23:eb:79:35:5b:11:c5:92:25:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Validity
Not Before: Mar 26 05:00:45 2026 GMT
Not After : Mar 27 05:00:45 2026 GMT
Subject: CN=a6aeb42c40114e5524b5a2249a3ffcb76ad9001a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:68:9a:c4:a4:09:e1:97:8a:10:cc:6d:3d:
2a:0c:ad:46:bd:36:0f:9d:b2:ae:aa:31:95:5d:b1:
db:6c:6a:45:60:f5:82:6f:cb:c2:3e:9e:a8:46:e0:
1c:c1:44:b7:7a:1d:a6:bf:28:fc:1a:d9:38:c7:6f:
3c:db:67:29:c3:f2:9e:13:c1:6e:26:b3:68:57:2d:
e4:6f:38:47:0a:24:c8:11:f7:1d:7c:a3:d1:b9:8f:
ab:25:6b:31:6e:2b:f7:dc:65:0a:89:d1:05:bd:ec:
bc:63:da:ff:fd:b4:ea:b6:dd:d3:4d:d7:61:98:72:
68:fe:e4:0a:79:78:63:ab:84:53:94:d7:1a:73:de:
e8:e9:d4:d3:8a:08:a2:af:2d:4d:74:39:d9:d0:a0:
2f:9e:5e:09:ba:11:20:45:8c:c8:df:db:5a:30:6f:
ff:1a:be:63:88:a3:40:c7:1d:3c:2e:8d:81:08:45:
fb:75:43:02:77:e7:f4:ff:06:20:db:6e:fd:27:a0:
3e:c4:c1:ee:d3:88:c7:60:1f:ea:34:34:55:38:07:
a9:4d:8b:0b:78:e6:7c:74:d3:42:e1:b0:96:d4:9b:
83:0a:1d:b9:7c:0c:58:f5:08:f7:27:75:66:ab:77:
d9:17:c7:7c:a1:58:87:5c:cd:5f:2b:38:de:e3:c1:
8e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AE:B4:2C:40:11:4E:55:24:B5:A2:24:9A:3F:FC:B7:6A:D9:00:1A
X509v3 Authority Key Identifier:
keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:77:c7:f9:57:21:63:03:6a:c1:39:80:de:48:f1:a2:21:47:
77:63:6e:74:bd:0c:c7:75:90:1d:8c:c3:72:e4:c2:ff:34:71:
32:7b:83:b4:53:32:9f:e0:f1:28:5c:68:17:a0:f5:d7:06:7c:
50:23:58:0c:2d:ef:50:6e:ff:89:74:80:27:89:9f:c7:f8:1f:
aa:7c:ba:ac:f3:be:5a:36:72:0f:5f:a8:1c:76:0e:61:61:a7:
e3:af:7d:77:97:28:47:f8:0d:ce:5e:a1:35:39:52:e0:91:89:
43:ab:b2:1b:66:b4:f0:52:dc:31:c1:f7:94:a6:b7:67:c1:32:
df:d6:30:80:77:43:cb:91:33:fa:62:88:50:c5:d9:2a:4a:ab:
d0:87:33:70:5c:cc:96:92:c0:e0:0f:a0:da:da:c4:2c:e1:33:
46:7a:e2:5c:59:20:88:88:57:b5:34:16:52:60:2d:1a:da:95:
63:a7:c0:ee:b8:10:bd:81:2c:2a:b1:8b:d4:db:56:17:55:06:
aa:c6:23:99:30:fa:56:42:68:64:c4:da:bc:4a:09:5c:24:18:
40:b9:be:cb:88:a7:9b:76:5e:41:be:a1:af:09:03:74:2f:d3:
1b:50:52:56:50:99:a6:52:e8:0b:2d:90:74:d8:27:e9:7b:15:
dc:b3:bb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:15 2026 by rpki-client