Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
File: RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft (raw, json)
Hash identifier: wbDFYQp7duJrfpRfuu7tdwavYFZIwkEjdf91DyFO+GE=
Subject key identifier: 2D:FD:12:9E:9A:32:04:F0:15:EB:1F:81:D3:F2:70:AF:DC:CC:3F:DD
Authority key identifier: 46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D
Certificate issuer: /CN=462767a7375f1ac546691aaf2a511fbb6277031d
Certificate serial: 019D273B005DFBEC557CB1E08DA08EF030C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
Manifest number: 0107
Signing time: Wed 25 Mar 2026 23:01:11 +0000
Manifest this update: Wed 25 Mar 2026 23:01:11 +0000
Manifest next update: Thu 26 Mar 2026 23:01:11 +0000
Files and hashes: 1: 0ppkgAkMVUZmtvxiis_JaRg_jKc.roa (hash: hmBjjzY/GLh0BaP+YN19dWeqC0F3ldt8pYexHB8bxW0=)
2: RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl (hash: MBM7HCJFi1yUkW7hJTDA02hkyg+qo3NXMZ3K8gauMyQ=)
3: hvFmobLJgv_FtphUoy5jADPJJnc.roa (hash: jnuVvbpAgeJ1NUOXj3up5SgN82P8AgWr5+BqvtU3HaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:00:5d:fb:ec:55:7c:b1:e0:8d:a0:8e:f0:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462767a7375f1ac546691aaf2a511fbb6277031d
Validity
Not Before: Mar 25 23:01:11 2026 GMT
Not After : Mar 26 23:01:11 2026 GMT
Subject: CN=2dfd129e9a3204f015eb1f81d3f270afdccc3fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:67:87:14:cc:46:7e:3a:af:72:d2:28:9f:
25:26:4c:69:3a:6f:68:0b:53:e8:a0:47:3d:6c:0a:
0b:b4:49:c8:34:ba:61:44:c7:49:12:a0:3a:50:df:
11:fa:de:fa:90:57:8b:ce:b4:e5:a3:37:03:f2:9b:
a4:af:a8:a2:eb:d3:c5:8f:5a:e7:56:7a:66:4e:fe:
56:87:0b:15:40:c3:5b:46:a5:39:b3:9b:cb:bf:7d:
9e:1f:7a:19:6d:9a:22:d8:35:e3:ad:78:de:39:9d:
d0:bb:af:01:fc:2f:ed:13:22:6b:53:a1:63:0d:d7:
39:a1:89:68:83:6d:24:0e:db:bd:0f:b4:2c:ae:85:
73:9f:2e:d5:ca:b3:8d:dd:d0:15:95:ca:3e:ff:f0:
fc:64:c7:7a:72:97:fa:61:d0:86:05:57:7b:8d:9e:
32:45:18:dc:85:c5:49:ad:a4:c8:24:d1:12:f2:6e:
8a:eb:26:45:c3:5d:cf:b2:92:9e:ad:65:2f:01:26:
47:c3:83:d9:eb:a5:fc:d5:93:18:b0:c9:3c:cc:75:
4f:2f:ae:19:a5:1d:6b:4c:c3:6d:24:4c:65:c7:41:
9a:d1:8f:40:92:a2:ec:fc:5c:2c:52:3c:ae:e0:8a:
34:3b:c6:e1:bf:25:dd:d1:40:e4:e1:83:70:3d:7f:
8c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FD:12:9E:9A:32:04:F0:15:EB:1F:81:D3:F2:70:AF:DC:CC:3F:DD
X509v3 Authority Key Identifier:
keyid:46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8e:bf:46:94:eb:3a:e7:f3:98:79:48:b5:b0:ea:9e:95:ea:
e7:9e:d5:49:e8:25:24:5d:25:d7:a8:0c:c0:96:06:a4:26:f4:
ad:fd:85:b7:8c:21:36:7a:9f:52:bf:35:af:af:3c:eb:ab:f9:
de:c6:15:df:02:c5:79:2e:47:11:c4:20:60:08:84:b1:cd:3c:
63:1e:dd:db:08:e4:12:21:89:fa:90:58:11:20:54:5c:e9:47:
6c:f9:44:97:63:1d:a2:06:e3:ae:c5:f9:e9:fe:25:67:78:a0:
9d:0c:6e:72:51:ec:c8:6b:3f:73:18:57:d1:9d:ec:6a:79:8e:
8f:9d:f6:3d:7b:52:e7:53:65:3b:95:d5:58:8f:97:fe:ed:d2:
3f:7b:5a:66:bd:fb:02:55:6f:8c:d8:c1:70:4a:3c:e2:a9:88:
9c:a9:31:85:64:7a:d4:6b:0f:ed:ac:a1:85:af:cb:96:ed:a0:
27:05:44:02:55:43:cc:53:25:77:2d:c9:f3:7d:13:ed:b2:a5:
bc:70:aa:75:d2:74:12:1a:18:cc:90:9a:c8:66:a7:a2:0e:65:
a3:fa:11:43:d1:f7:8d:51:5b:41:27:d1:f7:c4:c5:c5:fd:74:
75:23:a4:ae:ee:41:01:68:5f:e6:0f:0a:2a:df:22:b3:d8:58:
96:e9:83:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:21 2026 by rpki-client