Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier: OGcQ9raIiwUWVZ7YxeokV449giMNj/63CdQpZA0jeTw=
Subject key identifier: 3F:FE:C3:05:76:98:4D:3D:15:5D:58:26:7F:93:F1:84:81:97:1E:48
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 019D2704C7BF2377A935BA9C44D5159A62FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number: 0CA1
Signing time: Wed 25 Mar 2026 22:01:57 +0000
Manifest this update: Wed 25 Mar 2026 22:01:57 +0000
Manifest next update: Thu 26 Mar 2026 22:01:57 +0000
Files and hashes: 1: 16srEBoxiiP_SLONARpHEy8GOoo.roa (hash: +6A67bqXKJfVetajXvC/jcqmg3rLZdsfP1x5JHp+/TM=)
2: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: pLRM9alCkEmo8cmPuZydik2SHn78NHYUt0muwQYfDOQ=)
3: fERV_JWJtZ06djuribfR-EanimI.roa (hash: 1SfqauH/gyHrveo9ouFTP8dPyATzr66l3d0+S3nbdG8=)
4: fEvs1D6h_tnnMzXsm5m1S12m8tQ.roa (hash: Vr/ir+k302yq1Y+i5sBWnYUalv9cePo9w43+EMlEP7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c7:bf:23:77:a9:35:ba:9c:44:d5:15:9a:62:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Mar 25 22:01:57 2026 GMT
Not After : Mar 26 22:01:57 2026 GMT
Subject: CN=3ffec30576984d3d155d58267f93f18481971e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:9b:82:2c:49:58:83:3a:5d:1e:22:cc:70:
d2:aa:32:32:b3:4c:3c:02:6f:26:71:ff:61:b8:74:
b6:eb:b2:7a:16:c2:b6:5a:f0:4c:28:0b:f0:86:6f:
0e:11:28:50:77:13:5c:0c:7d:9a:27:57:e2:6a:91:
5e:81:d3:db:40:07:5b:93:ca:76:a4:41:3b:86:fd:
cc:75:eb:8e:11:bc:53:29:f9:ce:a8:b2:02:6b:9c:
99:48:29:fe:31:ae:18:cd:54:d0:bf:16:84:94:1b:
cc:97:a7:33:9d:53:1a:d5:2d:b3:c5:48:b6:3c:e4:
13:21:09:70:5c:9a:cc:aa:fa:c8:45:1b:ab:47:ee:
e5:eb:54:b3:10:ca:d1:4c:12:9c:32:ba:34:14:ad:
af:6e:ec:a4:d7:5c:a1:34:97:c8:6f:9f:67:67:75:
29:52:0f:7d:25:bb:ec:c8:bc:ab:c8:2c:0f:09:5f:
c9:52:4a:d1:0c:89:90:4c:31:dc:41:a3:27:bb:25:
b5:16:21:36:af:64:91:eb:00:fe:76:fa:9f:f8:0a:
59:64:47:64:5c:cc:2e:91:b9:2f:cc:a9:ac:dd:09:
db:f7:02:b2:20:e8:3a:57:77:fd:47:43:aa:ec:76:
c2:70:4e:0f:0a:3c:2b:59:f1:47:dd:d0:7e:3e:57:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FE:C3:05:76:98:4D:3D:15:5D:58:26:7F:93:F1:84:81:97:1E:48
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:97:2d:0b:41:6a:28:88:2b:be:3a:46:bc:1a:5e:a6:1e:c2:
c5:b4:74:99:f8:eb:28:51:5a:8e:0c:0a:ef:50:2d:d0:50:a3:
37:3c:26:9c:12:ee:a1:3a:7a:ca:c8:3b:f2:1b:f1:b9:17:97:
48:c2:e0:3a:50:a5:01:9a:10:07:33:37:df:d3:bd:c5:0b:c3:
06:ed:27:fa:fa:ce:02:c1:c6:7f:05:60:7a:5b:70:d2:63:65:
b5:b5:a4:5d:d5:74:aa:e1:eb:f2:a4:d3:25:d7:54:06:e8:a9:
22:b2:b0:a6:5c:22:98:f8:66:62:88:0f:7a:b6:a8:a3:ee:de:
ec:3a:00:d5:5b:15:63:ae:c8:46:20:77:67:1a:c4:ca:0b:9e:
f8:38:cd:2f:1b:0c:91:40:08:d6:54:c8:97:6d:e7:21:47:fe:
ac:6c:19:7c:32:ca:af:60:b2:02:61:fc:2d:61:51:fe:2c:09:
05:19:47:0e:d9:8d:2a:47:9c:cc:6f:ed:97:70:fa:80:5f:cc:
1c:64:52:b7:97:ef:75:e1:a5:0f:bf:f6:32:ec:e3:06:c0:f5:
2d:b6:40:a2:4d:48:c1:09:13:00:3a:d7:2a:a3:bf:68:e3:c2:
6d:83:fa:9c:41:8a:61:21:47:2c:2c:d4:2c:7a:ff:01:1f:8a:
83:d6:0f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:58 2026 by rpki-client