Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File: v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier: I/IyNQaolCh4RhTBPG3XDBYUJgc8TFO63YmdO6tgpo8=
Subject key identifier: 71:3B:99:07:84:04:1B:7B:F6:C5:C0:BA:11:A8:4F:F3:37:97:5F:98
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 019D2816A594FA0D91A683DF421742C6C705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number: 12C2
Signing time: Thu 26 Mar 2026 03:01:05 +0000
Manifest this update: Thu 26 Mar 2026 03:01:05 +0000
Manifest next update: Fri 27 Mar 2026 03:01:05 +0000
Files and hashes: 1: 2Wp3YnKolCKlk8ttOD4thTqnK8s.roa (hash: AqwDEsgdXjCQtmMemZbnyoQLvLWRfHb/l/ITgYIXcT0=)
2: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: VCebcEpk4/Vhos2mmfaHtSWyeshgdxI2u7Pch+GPsCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a5:94:fa:0d:91:a6:83:df:42:17:42:c6:c7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Mar 26 03:01:05 2026 GMT
Not After : Mar 27 03:01:05 2026 GMT
Subject: CN=713b990784041b7bf6c5c0ba11a84ff337975f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:20:f0:25:c9:d4:79:fc:68:fc:76:37:53:
6b:67:11:d7:82:6c:46:6d:05:77:a5:ae:7b:45:35:
22:8b:79:ea:d0:36:93:ab:7f:07:ed:3d:ed:e8:e6:
fe:87:fb:3e:e3:22:dd:9d:97:3f:ad:2d:28:a7:1f:
d5:aa:b9:c2:ab:ad:7c:3e:73:95:66:92:e7:63:e6:
38:fe:6f:a9:c5:36:d5:d7:9c:ac:00:92:3d:bc:e9:
40:74:26:ce:e3:d3:76:39:eb:f6:e7:8b:cf:66:86:
dc:5f:19:b3:00:cc:9d:ed:be:b0:40:71:e9:45:11:
0c:68:4e:86:e0:c7:4e:8c:4f:a2:0f:88:26:49:18:
61:01:09:33:bc:e5:78:d5:5a:e5:30:98:e1:45:a8:
b8:5f:92:84:23:a9:f1:7b:71:28:81:74:24:03:c2:
31:4c:a1:0a:f0:fc:ed:05:21:2a:ff:0a:eb:f0:2e:
b5:1e:da:c3:2c:9d:f7:ad:8c:4f:36:13:91:63:ec:
ca:20:9c:81:4f:94:da:1d:20:04:93:bb:f9:a1:77:
95:25:51:59:dd:4d:c2:37:24:b8:f1:80:78:af:89:
fd:80:f6:d6:ab:6b:1d:f7:f4:b4:bb:55:99:ed:48:
e7:07:fa:66:e3:a0:42:b9:60:76:da:1a:34:03:64:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3B:99:07:84:04:1B:7B:F6:C5:C0:BA:11:A8:4F:F3:37:97:5F:98
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6f:87:7f:c6:e8:3e:60:b8:95:5e:b0:56:47:71:6a:1e:40:
3e:59:9c:96:7d:cf:89:68:fe:f1:17:8c:a7:dc:0c:88:97:a6:
82:f8:a9:f9:c0:88:58:25:b5:11:5f:a5:d8:4c:95:d0:75:ee:
41:fd:38:97:84:23:e3:08:bf:d6:48:50:5d:d6:04:20:27:cb:
08:2a:59:3c:5e:1d:03:98:fd:b7:51:ba:90:c7:f0:93:6f:4a:
55:ba:5e:99:4a:b7:fe:bf:ba:16:94:65:c3:1a:99:7b:0e:18:
bc:5b:f7:94:8b:7f:d7:2d:4c:d5:62:40:3d:74:54:31:c9:70:
e4:1f:5b:a4:e1:f5:d5:74:9e:6f:e7:47:6d:b2:cc:c0:dc:f9:
22:47:bb:5a:d6:6c:31:11:a2:fa:e3:03:b4:e4:34:a8:83:ee:
ec:c7:05:88:3e:86:48:db:02:77:81:65:59:14:51:a8:63:4f:
29:28:bc:ec:94:08:19:ac:67:54:f3:45:21:1b:21:f9:6b:20:
46:bd:87:f0:f7:5c:a6:3f:91:5a:22:b1:68:1d:3c:67:ea:3c:
8a:41:e8:ec:24:36:c2:7b:51:6a:ce:ce:0c:fc:f5:b2:69:44:
76:a8:42:d4:d5:3a:e8:96:0f:df:10:29:57:ab:d7:32:be:2d:
bc:24:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:00:20 2026 by rpki-client