Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
File: RgeLLcCGzllV5i25IvNUuC0TzVs.mft (raw, json)
Hash identifier: nCyZAkMi5p+agKcmurShNrDQIOEUeLShXOJtuYejIrI=
Subject key identifier: FB:66:CB:79:20:70:D1:03:4D:B4:F0:0B:44:D8:8B:44:4E:0F:AC:80
Authority key identifier: 46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
Certificate issuer: /CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Certificate serial: 019D284E813E8CB095B91586012685A38BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:02:06 +0000
Manifest this update: Thu 26 Mar 2026 04:02:06 +0000
Manifest next update: Fri 27 Mar 2026 04:02:06 +0000
Files and hashes: 1: RgeLLcCGzllV5i25IvNUuC0TzVs.crl (hash: Tp269g/OC3+GlTwRa3smoY1DB+YolOvjpZyoT5qGIDs=)
2: w-HS7u9pOCeavi1t1p3yuKE0Dtk.roa (hash: vpKhQFUnBTckNnsA2ROYZZBHVXGsMz3MaClaBLJjb4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:81:3e:8c:b0:95:b9:15:86:01:26:85:a3:8b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Validity
Not Before: Mar 26 04:02:06 2026 GMT
Not After : Mar 27 04:02:06 2026 GMT
Subject: CN=fb66cb792070d1034db4f00b44d88b444e0fac80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:2d:54:39:b9:58:02:f1:fb:7e:21:dd:5c:
9e:75:87:40:df:c5:35:a9:aa:70:20:1a:05:73:5b:
89:36:79:52:4c:ff:bd:eb:75:9d:05:24:d4:ee:9d:
3f:e2:cb:58:ab:bc:1e:22:cf:89:b2:6c:95:89:99:
d3:55:93:31:64:7a:e5:8d:4d:78:46:02:33:0e:1e:
23:55:c6:c4:45:18:cd:5a:f6:13:2c:18:0b:91:db:
0e:64:90:70:e3:c1:e0:3d:a1:f7:06:85:e4:5b:75:
ac:28:76:28:e9:c4:87:16:11:1c:82:0e:d2:75:96:
b0:33:f2:a4:1f:37:c9:02:be:37:d0:e5:c9:61:a7:
91:5c:13:31:0a:60:c5:c8:39:c0:30:c0:4e:d2:df:
d1:53:dc:b0:c3:5a:9b:28:01:92:a3:10:d8:c8:a0:
2b:77:32:2c:ef:af:f7:e2:69:a2:19:5d:ce:0e:df:
ab:7c:4c:69:c9:eb:3e:69:52:a7:87:6d:3a:89:fb:
20:70:09:4d:f6:4f:60:a0:6d:0b:64:c7:d3:44:55:
af:98:1d:4b:b7:3e:d2:b3:b6:20:ee:12:6b:50:12:
92:01:1a:cb:e4:46:f4:03:37:0e:79:87:18:66:f3:
53:d7:de:cc:7d:9f:f4:00:1c:28:73:e5:4e:87:2e:
f5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:66:CB:79:20:70:D1:03:4D:B4:F0:0B:44:D8:8B:44:4E:0F:AC:80
X509v3 Authority Key Identifier:
keyid:46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:fe:b6:2b:76:9d:dd:30:82:0f:1a:5d:e1:13:7c:d6:88:04:
fa:74:45:0f:eb:a2:75:fb:d9:1e:98:45:88:a8:b6:e7:09:2d:
83:22:52:ed:6b:9f:6c:29:6b:99:5b:e5:93:4b:0d:8f:4a:74:
c0:fa:01:81:8d:81:3b:c5:97:50:64:15:4b:41:5a:cc:11:4a:
04:48:84:7b:11:21:b7:69:bd:f6:b0:12:5a:be:a8:32:2b:f9:
de:a8:b7:9a:5a:77:71:9a:e0:72:3c:35:9c:4b:e5:3b:fc:b1:
ae:b8:35:a2:a4:e5:93:eb:97:49:cb:62:88:0e:a0:b7:f5:24:
55:06:bc:05:29:c7:ff:a5:f2:8b:9f:5b:db:2f:30:9b:17:8f:
8f:04:f4:a0:b7:2a:e7:37:b2:91:71:f5:b9:dd:f3:93:b3:d6:
78:15:17:75:5b:c4:45:a7:53:8c:a8:8f:6c:49:69:4c:ae:fa:
7f:9e:37:4f:d9:c7:57:c7:d0:ac:76:16:58:3c:6a:7f:30:46:
25:11:61:a0:cf:7b:e7:3e:78:cc:c3:fb:cf:d6:9f:6e:fc:54:
bd:d5:11:72:d1:f0:64:8d:84:e0:a9:6d:09:77:07:dd:ab:43:
20:23:83:f8:aa:e2:e8:0c:a4:eb:2c:3a:57:6a:21:76:82:d2:
54:49:1b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:49 2026 by rpki-client