Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: NoA1JWBETU/4Zp1uXpDneZUry+Hj7yjj9KSFXn3V628=
Subject key identifier: 44:36:AE:FB:A7:49:A3:07:9F:9A:F0:07:18:48:CD:42:62:B3:14:18
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 019D2704BDDED5B11B382FB227192839B059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 0AE9
Signing time: Wed 25 Mar 2026 22:01:55 +0000
Manifest this update: Wed 25 Mar 2026 22:01:55 +0000
Manifest next update: Thu 26 Mar 2026 22:01:55 +0000
Files and hashes: 1: 7hkN41FQK4rNVtwj2BraoZnJuqg.roa (hash: 5m1MRTp35SIueLauNwTAW0LsW5mYAj38kHx8oT3d5Os=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: NQRvsEFmhGMhtwgcbGUm6S5NH3N8LljvKBLs13fB/QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:bd:de:d5:b1:1b:38:2f:b2:27:19:28:39:b0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Mar 25 22:01:55 2026 GMT
Not After : Mar 26 22:01:55 2026 GMT
Subject: CN=4436aefba749a3079f9af0071848cd4262b31418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:7a:b6:36:7d:be:a5:12:ec:2f:5b:d6:3f:
2e:98:3d:c8:19:97:c9:ff:cc:d1:78:1e:7a:f5:d1:
ec:8a:3f:c9:a4:cd:05:96:cb:15:d5:88:36:2f:e0:
a5:89:73:d6:46:11:4b:cf:64:78:8e:3a:d4:1f:86:
e9:98:ac:fb:71:dc:7d:df:c4:c5:de:84:19:5f:15:
59:8f:17:53:5c:fd:9e:18:8d:95:ca:5f:7d:db:e4:
68:ad:03:a3:03:bf:c7:2d:83:de:48:b6:8b:13:f1:
52:9c:45:34:f5:6a:dc:2e:a6:3b:7f:91:bf:8b:1f:
9a:49:0f:f1:2c:a1:0b:38:a6:ae:a8:c1:02:10:db:
fc:49:b7:fa:8c:a3:e8:e4:c5:a8:59:bd:fb:66:99:
12:6e:83:c9:ae:ff:f1:b5:46:48:ec:0a:58:4a:0e:
de:7d:3f:ee:0e:22:df:97:17:3f:7b:5f:21:2b:9f:
3d:fd:58:07:bb:e2:1e:b8:e7:cc:86:9c:f5:94:bf:
22:51:dd:7c:ba:0e:c6:b3:d2:03:60:01:0f:ac:e5:
36:26:1e:2a:77:6d:d9:a6:b7:39:df:6a:a8:ee:52:
c9:01:31:13:bb:b7:45:eb:54:8b:31:db:63:52:c8:
2c:e0:16:17:48:73:d2:59:1c:38:48:f2:82:57:1c:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:36:AE:FB:A7:49:A3:07:9F:9A:F0:07:18:48:CD:42:62:B3:14:18
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a4:80:e7:ae:93:eb:47:99:1e:de:ee:92:c8:d2:80:ed:c7:
69:f9:53:da:71:30:15:bf:66:18:e8:48:12:57:60:cf:e8:d8:
ff:d0:54:d3:a1:ae:58:75:61:b9:34:4b:8a:c7:c4:6a:8b:ba:
9a:ab:db:8a:8c:6d:c5:64:ce:99:5c:3b:d5:84:a4:4a:3d:44:
7e:dd:42:38:ba:1a:0a:9d:89:15:99:72:e4:86:a0:a6:5c:d2:
8d:ff:ba:c0:1b:a9:c6:b7:19:fb:a7:4c:ea:89:88:53:49:36:
84:af:5d:43:3c:af:86:1e:0c:74:bb:ae:e7:88:d0:39:d3:9f:
ac:8d:4b:84:31:99:85:2f:8b:d3:c0:01:ca:a1:d4:06:e9:f2:
2f:71:57:7d:8e:da:0a:45:ae:ed:6d:ae:9b:91:c7:7a:e7:04:
81:11:d0:e0:71:69:0c:76:91:e9:9d:62:65:01:1d:b4:c9:e7:
b4:27:54:98:da:d2:8b:44:39:5a:f4:05:2a:c6:96:b7:10:41:
bd:47:8e:bd:a4:74:55:81:ce:62:f7:43:8f:d5:95:3b:4d:75:
b9:01:3a:5c:25:53:91:fe:9c:29:43:4a:8c:fc:36:f7:f3:78:
51:13:d2:65:a9:bc:b1:aa:eb:4c:c6:a2:08:68:21:f1:71:e8:
6a:dd:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:21 2026 by rpki-client