Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
File: RciwwWM2uTM7RE_x4YzHjXanw_Y.mft (raw, json)
Hash identifier: 6NPKqp9qhH7lB2/28nOxpRPr6MgzCBKUzme/FFUZI6Y=
Subject key identifier: 71:C6:E1:66:C8:DD:4C:24:A3:69:84:1E:42:3F:C3:6B:68:C0:47:CC
Authority key identifier: 45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
Certificate issuer: /CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Certificate serial: 019D2771D35A3E1709B53492AC21F58316C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
Manifest number: 04CF
Signing time: Thu 26 Mar 2026 00:01:04 +0000
Manifest this update: Thu 26 Mar 2026 00:01:04 +0000
Manifest next update: Fri 27 Mar 2026 00:01:04 +0000
Files and hashes: 1: RciwwWM2uTM7RE_x4YzHjXanw_Y.crl (hash: d7NGNdfTX1cpL1eW9URGDKtO7rNbztWI7/mqJMNYUQg=)
2: q547rqVuRHDrkdRQeLcAfoatWLM.roa (hash: pwOHGiBDa818vgm5rLQAdwYCv/4nGflJp4wp+uqq1YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d3:5a:3e:17:09:b5:34:92:ac:21:f5:83:16:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Validity
Not Before: Mar 26 00:01:04 2026 GMT
Not After : Mar 27 00:01:04 2026 GMT
Subject: CN=71c6e166c8dd4c24a369841e423fc36b68c047cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:c5:60:2b:fe:1c:5a:f5:60:8a:82:71:1d:
5c:ef:42:eb:b6:8a:29:46:94:02:19:9d:63:bd:0f:
31:2d:83:19:ce:e4:59:ed:ef:0d:70:7a:2f:39:69:
6d:68:ff:66:e2:b2:d9:bd:62:1b:e9:f2:91:bc:96:
a9:c6:71:ac:66:87:2d:9c:0e:84:92:30:f3:01:5d:
b4:4b:3f:44:20:16:b1:4b:75:f0:20:03:ab:42:0b:
23:db:da:b5:61:b6:80:e2:65:60:34:f5:65:c4:99:
70:c2:81:b2:9d:33:a7:db:5a:0a:d1:b7:fd:d1:aa:
6a:fa:bf:22:93:e3:bb:f4:54:79:02:7b:41:02:53:
6d:d4:b8:5b:dd:45:1e:dc:d2:eb:c6:0c:44:11:d5:
0a:cf:b5:08:25:07:e1:68:41:53:c9:40:cf:99:a2:
8a:d2:ab:9c:52:f7:eb:4f:6f:f8:f3:a3:78:01:8a:
74:8b:60:f8:c2:89:df:6f:e4:e9:54:f5:82:d1:be:
3b:fc:26:85:22:8d:72:d6:a0:0f:c5:ca:40:06:e1:
f1:ed:8e:f9:22:e5:2a:db:38:02:af:c8:cb:b8:e6:
c2:b6:fb:da:f2:97:c0:e8:68:68:b4:5f:cb:df:0f:
02:c7:03:a9:43:47:58:24:3f:a3:5e:32:d2:07:44:
17:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C6:E1:66:C8:DD:4C:24:A3:69:84:1E:42:3F:C3:6B:68:C0:47:CC
X509v3 Authority Key Identifier:
keyid:45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ef:c7:d2:56:ca:7b:63:80:3e:d9:75:00:69:17:91:2c:bf:
a9:65:4b:84:38:b1:4b:d6:c9:b1:67:ed:67:ce:5b:f3:05:e4:
5f:ff:5b:80:32:ae:23:c9:19:0b:ec:15:68:d7:d2:38:91:24:
be:ca:43:a2:18:99:c3:7e:42:15:90:25:8b:ac:24:22:b3:fe:
90:b3:38:8c:e7:6b:48:17:49:3c:30:b2:eb:60:55:fc:9e:49:
da:f0:7b:cc:9e:50:dd:8d:5e:2a:e3:5b:09:28:86:2c:9d:10:
81:8d:98:2a:bc:53:49:d8:dd:5d:90:3e:a8:56:f7:23:72:31:
10:ca:fb:ea:69:7b:d5:30:40:52:e0:97:f6:83:e1:1f:97:b3:
36:03:90:18:eb:0b:98:ea:4a:68:40:78:34:76:94:35:de:50:
c1:11:fb:9e:1f:77:9e:b9:ab:fc:c4:51:4c:0b:3f:db:9a:13:
5b:49:de:c0:c0:97:78:a9:fb:60:60:d5:ff:8e:6f:46:97:84:
10:2a:7f:2d:38:31:15:5d:48:d4:23:50:78:ea:43:c3:04:9d:
66:50:c2:c6:df:91:69:84:f9:68:d8:1e:24:e2:4f:10:b9:b8:
9d:d2:2a:f0:2b:f7:e1:04:7f:35:f7:a8:0e:5f:ac:17:55:9d:
2c:d9:f7:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncdNaPhcJtTSSrCH1gxbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YzhiMGMxNjMzNmI5MzMzYjQ0NGZmMWUxOGNjNzhkNzZh
N2MzZjYwHhcNMjYwMzI2MDAwMTA0WhcNMjYwMzI3MDAwMTA0WjAzMTEwLwYDVQQD
Eyg3MWM2ZTE2NmM4ZGQ0YzI0YTM2OTg0MWU0MjNmYzM2YjY4YzA0N2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzvFYCv+HFr1YIqCcR1c70Lrtoop
RpQCGZ1jvQ8xLYMZzuRZ7e8NcHovOWltaP9m4rLZvWIb6fKRvJapxnGsZoctnA6E
kjDzAV20Sz9EIBaxS3XwIAOrQgsj29q1YbaA4mVgNPVlxJlwwoGynTOn21oK0bf9
0apq+r8ik+O79FR5AntBAlNt1Lhb3UUe3NLrxgxEEdUKz7UIJQfhaEFTyUDPmaKK
0qucUvfrT2/486N4AYp0i2D4wonfb+TpVPWC0b47/CaFIo1y1qAPxcpABuHx7Y75
IuUq2zgCr8jLuObCtvva8pfA6GhotF/L3w8CxwOpQ0dYJD+jXjLSB0QXkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHG4WbI3Uwko2mEHkI/w2towEfMMB8GA1UdIwQY
MBaAFEXIsMFjNrkzO0RP8eGMx412p8P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmNpd3dXTTJ1VE03UkVfeDRZekhqWGFud19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMmExNWMtYWRkMC00OGQ2LWIwNGYt
Y2RmZWY2ZDVmOWI5LzEvUmNpd3dXTTJ1VE03UkVfeDRZekhqWGFud19ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lMmExNWMtYWRkMC00OGQ2LWIwNGYtY2RmZWY2ZDVmOWI5
LzEvUmNpd3dXTTJ1VE03UkVfeDRZekhqWGFud19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+/H0lbK
e2OAPtl1AGkXkSy/qWVLhDixS9bJsWftZ85b8wXkX/9bgDKuI8kZC+wVaNfSOJEk
vspDohiZw35CFZAli6wkIrP+kLM4jOdrSBdJPDCy62BV/J5J2vB7zJ5Q3Y1eKuNb
CSiGLJ0QgY2YKrxTSdjdXZA+qFb3I3IxEMr76ml71TBAUuCX9oPhH5ezNgOQGOsL
mOpKaEB4NHaUNd5QwRH7nh93nrmr/MRRTAs/25oTW0newMCXeKn7YGDV/45vRpeE
ECp/LTgxFV1I1CNQeOpDwwSdZlDCxt+RaYT5aNgeJOJPELm4ndIq8Cv34QR/Nfeo
Dl+sF1WdLNn3TA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:43 2026 by rpki-client