Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: bMtDoIdbBz7d+ATGuhuDQbsFx71QxG7z7ooVcxSPS4Q=
Subject key identifier: F8:6D:0E:96:08:36:12:31:76:BC:88:9B:09:87:98:FD:87:6F:78:96
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 019D29614811CF05AC6A906D2C50D3AECAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 0606
Signing time: Thu 26 Mar 2026 09:02:14 +0000
Manifest this update: Thu 26 Mar 2026 09:02:14 +0000
Manifest next update: Fri 27 Mar 2026 09:02:14 +0000
Files and hashes: 1: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: Jkps5ZL4vWECCXYFoJ4EsDAhtxp93gz5F1CeP7SgoDM=)
2: iZFLoubthAW-BC4w-7ChI6OwAD8.roa (hash: dWAb16oUg/afrMlWz39glEGNuafzmLmIv2nVeIlgG+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:48:11:cf:05:ac:6a:90:6d:2c:50:d3:ae:ca:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Mar 26 09:02:14 2026 GMT
Not After : Mar 27 09:02:14 2026 GMT
Subject: CN=f86d0e960836123176bc889b098798fd876f7896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:a7:4b:2a:0f:d6:94:61:64:8c:5c:f1:b4:
9f:8d:51:6e:2f:23:b2:0d:2a:17:c7:a1:ad:ad:fe:
a1:4a:91:93:d8:e4:6c:f5:71:aa:52:f8:60:64:cb:
7c:31:0f:af:3f:87:00:d3:2d:a5:66:21:3d:10:63:
f6:1a:6d:e8:bb:ab:a5:a3:dc:be:48:1a:47:f6:5a:
59:a9:87:eb:b4:7a:f8:a4:b4:12:ee:9b:61:81:43:
0b:73:e5:cf:e5:08:4e:6f:a7:d8:30:76:47:09:f2:
38:44:a3:39:a5:55:1d:79:8a:f6:36:48:ef:43:02:
f5:d9:cd:d7:31:60:75:0d:bc:62:c5:08:7c:06:19:
87:d9:24:fb:a1:3e:e4:f5:51:48:1a:6b:74:83:2b:
ed:bf:8e:44:48:88:8e:ed:c5:1f:a0:10:e4:44:4f:
00:ef:27:cb:1c:7f:02:bb:ef:8f:b0:c0:7a:92:d6:
df:6d:e7:e6:2e:fc:7c:3c:8a:f1:2e:bc:99:66:ef:
91:88:f7:0b:09:3e:de:2f:f7:26:b5:c5:33:dc:a2:
9f:15:72:9f:75:ed:ad:08:79:a6:12:ca:b6:93:36:
61:80:1f:25:fd:6b:5d:29:6f:6a:d1:ee:be:f8:bf:
49:e0:56:9c:a3:df:19:4b:ef:29:05:d0:38:06:d4:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6D:0E:96:08:36:12:31:76:BC:88:9B:09:87:98:FD:87:6F:78:96
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c5:61:6e:5c:eb:38:9d:a4:3c:21:15:d8:f9:a8:22:9e:66:
e0:77:9b:09:2c:7a:60:52:eb:d9:5f:d2:95:6f:03:9e:a7:a4:
62:f7:7f:77:6e:d9:ef:d3:0b:45:bb:40:5f:eb:a9:ab:b9:12:
37:9f:0f:f1:f2:c3:b3:49:35:0b:8d:bc:fc:05:bd:13:02:e7:
57:15:8e:b7:c0:fe:72:4e:d3:ba:0c:e5:93:12:b7:fc:81:b9:
ef:ef:93:eb:fa:03:cb:be:42:87:43:f0:ac:88:5e:3b:5f:33:
78:c7:72:4f:5b:2c:12:71:f8:14:67:09:de:b8:76:de:ce:30:
2f:0b:5e:f7:de:2b:fd:22:da:a3:69:bf:8f:41:60:01:32:00:
73:92:f3:b1:5d:50:8b:67:a8:8c:5c:49:31:a1:38:b5:97:51:
67:a0:bf:79:3e:8b:88:d0:08:59:49:63:b0:eb:68:87:da:c3:
71:02:b0:2d:78:38:85:b7:b4:2a:8a:6f:cf:58:49:52:12:0c:
a3:fd:8f:22:9f:66:86:19:6a:b6:6f:18:e8:50:7d:f6:b5:06:
7a:d1:b2:7c:63:2e:43:41:2d:df:86:7d:0a:58:8a:c0:dd:1a:
bb:bc:a8:18:52:31:30:f3:74:97:ed:b6:06:2d:c8:ff:38:2d:
c9:1b:38:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:40 2026 by rpki-client