Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json)
Hash identifier: d5y8xvFpmnGJDY9+xVEExnTexpzXYiwLMhSHl9LTE/c=
Subject key identifier: 78:33:FF:1B:22:FA:5E:84:60:5A:83:6E:4B:28:3F:DB:EB:70:7E:BB
Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Certificate serial: 019D26280FF785E3A0E678EED8443F53C94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
Manifest number: 147D
Signing time: Wed 25 Mar 2026 18:00:52 +0000
Manifest this update: Wed 25 Mar 2026 18:00:52 +0000
Manifest next update: Thu 26 Mar 2026 18:00:52 +0000
Files and hashes: 1: iECZqjEQaP4vYPdGbi8_2UCo3kQ.roa (hash: bwkxeGL5KMOQda9sUnHQc+cPiNjhbKFYbhK5Z8/KX+0=)
2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: QvdqnCGczdhVdDgQb53bZ3A4s8L6YAiwSLQWnaptzWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0f:f7:85:e3:a0:e6:78:ee:d8:44:3f:53:c9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Validity
Not Before: Mar 25 18:00:52 2026 GMT
Not After : Mar 26 18:00:52 2026 GMT
Subject: CN=7833ff1b22fa5e84605a836e4b283fdbeb707ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:c3:a5:bb:d6:bd:14:2d:0f:1b:2b:c1:8b:
2c:d9:b7:c0:ae:41:2f:00:80:d8:ed:28:1c:96:98:
23:fc:ab:1a:23:6d:c2:4a:e9:27:18:4a:89:c9:f8:
6e:1d:1c:7f:9e:f8:6a:8f:94:f2:21:3b:eb:4f:20:
fd:10:25:d2:8d:50:8d:a2:40:b4:ce:eb:77:af:1a:
80:b1:35:67:f1:37:5f:93:14:95:15:d6:20:10:42:
4a:d0:3e:b7:97:c3:bd:0b:97:3c:c7:2f:ba:53:73:
b6:e4:9a:60:25:f7:40:61:74:82:c4:84:ac:ac:f4:
42:9a:a5:33:3b:c2:10:f1:3b:8c:c2:50:b2:f3:f7:
22:7f:c8:d9:8e:19:8c:86:32:fe:e2:b7:f9:73:21:
cf:f7:af:5a:d6:56:17:f3:aa:37:b5:61:7c:3c:54:
ce:1a:38:7e:ee:cf:15:58:39:ee:06:46:eb:8c:d9:
c9:a0:8f:2f:55:09:9b:22:87:b5:4e:61:43:8e:a1:
8b:9a:94:8f:af:65:65:d7:3f:b8:91:2f:01:b1:7f:
2c:33:87:26:24:67:b2:37:0d:b3:cf:4b:18:bc:ec:
80:3d:c8:22:77:c0:c6:69:d6:1f:af:cc:f2:e7:bf:
5d:ff:d9:e5:dc:b1:95:2c:41:32:46:5a:eb:25:d6:
3d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:33:FF:1B:22:FA:5E:84:60:5A:83:6E:4B:28:3F:DB:EB:70:7E:BB
X509v3 Authority Key Identifier:
keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:cd:6f:82:10:0b:8d:0f:d6:7d:37:bf:09:bf:04:a0:84:0b:
f0:3c:78:fa:72:a6:a6:f5:73:d1:33:5a:7e:43:00:16:5b:fb:
1e:70:91:f7:7a:cf:d2:c1:cb:42:2f:21:61:db:60:42:de:22:
4a:67:d4:db:c3:be:2d:d0:ce:a6:87:a5:d5:a3:c5:bc:49:1c:
ee:7c:fc:38:53:2d:2a:30:0d:42:8f:0a:56:97:98:12:19:2c:
9d:46:d4:c1:7f:28:c2:d4:fe:bb:70:7c:ff:f8:a4:3f:e9:33:
da:09:71:80:16:82:74:b5:6d:5a:6c:0e:0a:4d:a7:50:6b:af:
30:bd:0c:5a:61:d2:be:75:e1:fd:9d:ec:14:a1:9c:0d:e5:e5:
c5:c8:7e:3c:1e:2e:e1:e1:df:bb:fe:d2:9a:72:1e:cb:ad:bc:
89:fb:51:61:38:39:df:48:42:0b:21:89:e4:2a:4b:57:2b:75:
56:72:aa:bd:66:51:f1:ac:49:fb:9b:28:3a:d2:bf:7b:4b:92:
18:a8:81:58:cf:d4:3e:1a:89:67:39:8c:a0:7c:51:d7:cc:92:
6d:12:10:22:8c:95:44:3b:a0:1d:44:fe:23:6e:3e:32:d3:66:
7d:de:09:f3:95:38:8f:ac:22:85:f9:26:b3:4d:1e:74:4c:e4:
fd:e3:04:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:26 2026 by rpki-client