Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
File: r-us3hVZeiga4rspMG3E2m3Pt14.mft (raw, json)
Hash identifier: QID4tDVOEQK9i+UuDF0FPzQwfbO62YVGzBpWpXqYaX8=
Subject key identifier: D1:16:89:62:5B:C8:34:C4:81:15:9F:93:17:A2:DF:8B:7F:72:E1:D7
Authority key identifier: AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E
Certificate issuer: /CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
Certificate serial: 019D24712748AB624EA9E9DD58F646A154B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
Manifest number: 9A
Signing time: Wed 25 Mar 2026 10:01:28 +0000
Manifest this update: Wed 25 Mar 2026 10:01:28 +0000
Manifest next update: Thu 26 Mar 2026 10:01:28 +0000
Files and hashes: 1: jdSx0T-sdrzr500OOr7Atdy3Z4E.asa (hash: nbjDNb/jtcCfwpceFtypmGiC8RlKHHL0LGrtqS6ZCo8=)
2: r-us3hVZeiga4rspMG3E2m3Pt14.crl (hash: P4pNXWfXDvyS8rrVjrKMYgH5/A7e7gk32DBIeVglt1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:71:27:48:ab:62:4e:a9:e9:dd:58:f6:46:a1:54:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
Validity
Not Before: Mar 25 10:01:28 2026 GMT
Not After : Mar 26 10:01:28 2026 GMT
Subject: CN=d11689625bc834c481159f9317a2df8b7f72e1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:05:c5:4a:9e:21:9b:63:06:fe:5e:cb:75:
0f:54:be:3c:70:f0:4f:9a:24:39:7c:84:8b:c3:89:
19:50:da:bf:bd:e1:86:9c:a4:c4:92:9f:44:a2:01:
6e:4f:68:2f:f5:af:35:6b:00:4d:f9:98:50:43:6a:
39:93:a8:8d:71:f8:41:cd:99:18:41:48:b8:b3:0c:
71:4f:11:a1:06:d2:74:cf:0c:1b:8d:bb:8a:84:62:
05:d4:70:16:0b:6a:15:d4:5f:1a:c0:6e:6e:8d:09:
b2:3a:6b:87:f4:07:4e:9d:f4:9e:4d:75:96:84:18:
cf:5e:8c:0c:a4:00:5b:5b:df:ab:00:2b:db:2c:fd:
e2:b7:9c:5e:c9:6c:07:15:cf:26:aa:43:08:74:40:
c5:bc:97:49:1a:60:4f:cd:e7:c9:68:df:bb:2d:6c:
09:76:78:88:79:88:6e:35:f1:72:14:9d:29:46:eb:
ac:8a:db:91:2d:e3:75:ee:f7:ee:05:11:6d:99:2c:
c5:75:44:2f:68:20:af:fd:f5:44:93:a0:8f:39:03:
6f:84:84:a2:4e:9f:50:67:9d:e1:58:a4:86:37:92:
87:72:f3:89:31:61:dc:e0:55:23:5a:95:17:3f:b6:
2a:38:92:6c:b4:ac:fd:65:1d:90:2f:c0:85:c6:86:
5c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:16:89:62:5B:C8:34:C4:81:15:9F:93:17:A2:DF:8B:7F:72:E1:D7
X509v3 Authority Key Identifier:
keyid:AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:72:f2:97:95:39:4a:42:70:a0:5f:af:2d:f9:58:33:63:e1:
00:64:04:0c:1c:e5:a5:bc:15:1b:1b:77:b9:a0:9b:5e:03:c1:
6b:58:c6:bd:c4:54:51:be:42:f7:82:8c:ce:37:6b:ad:76:72:
cf:3c:05:9a:bb:a1:f3:73:3f:2e:19:f8:54:7e:83:66:53:82:
cb:dc:ab:3c:a7:c2:0e:d6:76:6f:bd:ca:74:a1:aa:fc:63:8a:
35:09:73:cf:9c:66:b7:ae:0b:85:c6:0e:ba:1f:6e:98:6e:96:
51:64:6d:04:58:f9:4a:3e:6f:79:01:e6:2d:07:2a:b6:57:86:
da:99:ff:3f:df:db:6a:46:4c:76:5d:92:ad:85:41:5c:c1:a7:
0c:69:9d:25:61:d6:81:58:73:ef:97:12:54:48:19:3c:6d:57:
11:84:98:c8:ae:9c:85:d1:90:9a:e0:7a:34:f5:0c:99:6a:b9:
4f:c7:c7:3c:94:5f:6b:4c:60:43:f4:e9:17:3d:e3:4b:48:a8:
3d:cb:d7:28:ae:99:35:91:36:60:65:b5:b8:b0:02:25:03:d3:
41:30:a3:60:ce:67:96:22:79:26:e0:54:a3:89:e9:4d:f8:ad:
48:3d:e6:6c:aa:5a:97:b3:f6:cb:63:2e:ce:ed:f3:35:51:be:
36:cd:c7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:12 2026 by rpki-client