Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: WIgDCPdiEZZZxQs7kQRvewSgpwG53orV43M5Nps58IM=
Subject key identifier: 89:E5:5F:24:B0:CB:A5:04:75:F1:79:AD:76:45:C6:EA:C3:CB:BC:12
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 019D2583E3199AF9C2C8263D7F4D2418BCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 100E
Signing time: Wed 25 Mar 2026 15:01:33 +0000
Manifest this update: Wed 25 Mar 2026 15:01:33 +0000
Manifest next update: Thu 26 Mar 2026 15:01:33 +0000
Files and hashes: 1: ILGhz3ePO9oxIjIbV8ykYhaN2H4.roa (hash: VOXzwbv4ZGeGv9kyp7nhD/yFTySLzaFzJgbxt6Ep0+U=)
2: eU85RU0taQL8h-5P8OgU9OyopXY.roa (hash: 9O8C8fNo7lE1aPgGPT+DIp3qar7x4bHGxqk5sLTXTcI=)
3: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: ZMh6V3OCR8vwy4Nr+NjFK21ARpUIGcda9hF8yO155dQ=)
4: w1gMt94WQ5eAPDOTWGJbst0F5fM.roa (hash: qfjHzZsPbhZdXrk21Rq3gvOAzicOO4wsSfCE26q4PYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:e3:19:9a:f9:c2:c8:26:3d:7f:4d:24:18:bc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Mar 25 15:01:33 2026 GMT
Not After : Mar 26 15:01:33 2026 GMT
Subject: CN=89e55f24b0cba50475f179ad7645c6eac3cbbc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:ae:59:ab:89:cb:21:3a:42:dc:0f:1c:76:
0f:47:a9:36:fc:45:ba:60:a3:a6:24:a1:cb:7b:35:
67:57:21:58:22:a3:f7:ad:af:01:9f:65:51:19:5c:
18:26:7c:40:fc:0e:80:f4:d6:45:85:e7:2d:11:27:
1a:1b:8a:c1:04:21:0e:b5:47:1c:f3:f9:07:e9:e5:
43:76:9d:9f:e8:49:d9:90:86:d1:a8:d8:de:df:ec:
ce:e4:d3:8c:03:ac:3b:23:17:a5:d0:8f:4e:ba:54:
16:ea:2e:45:22:de:05:34:83:4e:00:03:0e:67:30:
06:63:65:a1:b3:7c:cb:18:de:b7:19:f9:dc:3d:80:
75:5d:64:41:78:0e:3c:d1:cb:f0:e5:24:f0:5a:a9:
c6:8d:97:86:ba:c9:0e:61:8b:a4:ad:38:88:f1:7e:
93:6e:c7:32:60:8f:62:5b:bf:ec:fb:63:cd:1f:17:
b4:86:13:1c:68:81:37:55:51:5b:11:12:bf:58:35:
b3:16:d4:5a:27:68:1f:55:3d:ef:7e:04:86:d3:f4:
9e:8e:a0:52:5e:fa:76:27:70:2e:3a:b9:79:7d:52:
9e:63:97:82:c0:15:56:04:dd:a5:32:3a:ff:d9:1a:
96:1a:92:d3:43:02:88:88:c5:33:63:4c:72:b2:f9:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E5:5F:24:B0:CB:A5:04:75:F1:79:AD:76:45:C6:EA:C3:CB:BC:12
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7d:17:46:68:88:52:90:aa:99:24:3b:18:44:fe:aa:ff:18:
71:f0:ce:50:19:25:0f:6f:b7:99:5b:34:ef:a0:d3:14:23:0e:
72:b6:1f:2c:10:3a:56:69:ef:87:d2:c3:9d:38:4a:90:85:bc:
35:8a:1d:a8:15:8f:5b:ea:c4:48:12:95:86:dd:27:a9:71:32:
0e:df:cb:a7:23:d7:eb:cc:e1:07:1d:75:aa:37:f2:b5:67:ab:
a4:30:d9:4a:07:4e:3f:ad:38:a0:8c:6c:b2:58:98:4c:a7:0b:
68:e4:4a:e3:0b:74:63:59:79:d5:f0:0d:d7:42:9b:8b:99:d1:
d3:08:8e:58:21:23:63:23:53:3c:53:94:63:c1:98:dd:dd:8a:
c0:1c:a6:a0:a4:8d:54:54:5e:66:36:d2:03:d3:6a:39:56:3c:
ab:61:f1:73:c0:22:6d:56:27:68:1f:0b:ab:e9:96:b3:00:47:
71:11:74:01:31:8f:a0:4c:e9:20:07:37:70:ff:9c:62:19:e0:
e7:ed:78:8c:44:e1:cf:e9:0d:f4:16:85:86:2c:db:eb:70:65:
61:75:1d:e7:c3:43:28:68:b2:2b:0b:50:4f:a5:1c:58:c7:89:
52:63:b2:1b:65:ab:8c:e2:2b:70:86:fc:0f:b1:d1:c3:49:10:
e2:f6:c8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:30 2026 by rpki-client