Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
File: riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json)
Hash identifier: 6Uc1aCSjQT6JcR+CIR6PdvFRItcn913a8QGvgopC+DE=
Subject key identifier: F6:E0:09:4A:81:1D:4F:9E:6B:54:0D:B3:98:53:4A:69:F1:5F:12:03
Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Certificate serial: 019D26CD725575E1F5E794D9CB4412785AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
Manifest number: 108A
Signing time: Wed 25 Mar 2026 21:01:31 +0000
Manifest this update: Wed 25 Mar 2026 21:01:31 +0000
Manifest next update: Thu 26 Mar 2026 21:01:31 +0000
Files and hashes: 1: Nw5e2XBeWz1F5V3fCUooSdjIByw.roa (hash: hszO3zUWOu3PHw9A9VPhEVEpCWtMNuuin6SDD3mP7Bc=)
2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: ECxJArS7zHHYDm1hw//hqINGNu5XLXAxhrRDYPUolu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:72:55:75:e1:f5:e7:94:d9:cb:44:12:78:5a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Validity
Not Before: Mar 25 21:01:31 2026 GMT
Not After : Mar 26 21:01:31 2026 GMT
Subject: CN=f6e0094a811d4f9e6b540db398534a69f15f1203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:ad:36:f3:35:71:1a:f5:05:33:58:60:92:
8d:17:9f:26:56:28:3f:b8:5e:1e:b7:8b:1d:6e:69:
14:31:99:e4:93:f0:02:00:d0:64:11:5d:01:a0:ae:
57:46:d4:0e:a7:47:84:92:1e:9c:09:3d:b7:a1:a0:
ca:b8:82:56:1e:1e:44:2a:17:33:48:37:6c:9b:a4:
2c:89:81:75:70:04:c4:fd:5e:50:23:15:33:e3:64:
06:3f:55:a1:c7:a2:76:b3:bd:ca:1c:02:c0:7a:85:
06:0b:5e:c4:0e:a0:12:e5:36:f8:ca:49:ce:ba:23:
8d:9b:7f:37:c3:36:e5:51:0d:59:95:fc:d2:c9:5b:
87:3e:db:46:86:6a:82:2b:cf:09:25:e9:dc:19:b3:
24:5f:a5:51:63:a6:fb:b7:1d:51:95:37:2f:a7:34:
ba:5f:fb:b6:81:fb:b6:f6:18:75:e7:fb:60:94:6e:
f1:f6:2b:05:89:40:b3:63:d5:b2:df:c4:ee:39:40:
d7:5d:6b:b7:17:3e:74:31:6b:7d:8d:b6:23:dc:08:
9a:62:42:f8:de:6e:7a:89:70:06:28:38:4f:7c:20:
99:9c:4d:2c:25:04:4f:a5:3c:ec:29:51:42:fa:0b:
56:14:f3:10:47:7f:f0:9a:a0:a8:4a:8e:9d:b3:ad:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E0:09:4A:81:1D:4F:9E:6B:54:0D:B3:98:53:4A:69:F1:5F:12:03
X509v3 Authority Key Identifier:
keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:96:3a:36:de:fe:a9:6a:16:0e:64:4e:97:6c:da:b8:77:35:
5a:d1:55:fd:6f:7b:0a:0c:17:e0:52:fe:ee:19:4a:77:70:26:
e1:c7:90:f1:e4:ec:36:34:9e:43:11:81:ff:a2:e9:ad:ea:93:
ee:c7:f2:66:7e:00:13:b1:2d:24:c8:6a:fa:d0:32:6f:69:05:
81:89:ae:e9:d2:d0:f0:9b:16:bb:71:ef:91:c8:40:bf:cf:d6:
41:56:f0:7b:9e:42:b9:a7:62:83:0c:b6:2b:4c:1e:a5:0b:eb:
b2:43:6d:eb:5c:44:bc:c4:d3:bf:6e:a8:e1:3f:05:8e:99:0d:
b6:1d:6a:fc:95:ca:53:d1:79:7d:0b:19:d0:7b:33:bb:8a:e4:
95:35:d6:83:12:07:44:7b:67:ad:03:18:0e:06:5e:90:ac:21:
a0:c8:e8:34:25:ca:3c:a6:53:96:34:dc:3b:1a:c9:a5:6c:6a:
ed:71:28:ff:7e:0a:fa:ba:13:cb:19:13:a9:c3:4f:59:8e:de:
f4:a2:b8:b9:6c:31:76:33:e0:f6:42:61:d4:0d:e1:1d:bc:d2:
38:f9:77:54:00:3c:8f:e0:15:74:11:e2:29:a5:1b:56:b7:c2:
ec:31:c3:c4:80:a5:8a:92:49:63:b3:35:36:4b:e2:6f:bf:3b:
2c:20:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:19 2026 by rpki-client