Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
File: RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json)
Hash identifier: sXOAzFstyKzPT4xuA2xbW5/t1RQ+LEtYv5kLRUmy67g=
Subject key identifier: 4A:17:A6:E1:BE:E3:A9:AD:DF:B2:7F:1C:C6:F1:7D:88:64:9F:E7:2C
Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
Certificate issuer: /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Certificate serial: 019D2771D43B5EEA3C47B028DFA25F81687B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
Manifest number: 16AB
Signing time: Thu 26 Mar 2026 00:01:04 +0000
Manifest this update: Thu 26 Mar 2026 00:01:04 +0000
Manifest next update: Fri 27 Mar 2026 00:01:04 +0000
Files and hashes: 1: KNGzhIaCKCO7BqVAGRH0hS28bSE.roa (hash: p/4zAAWK0QGA2GZKTcppMHA4sXwzCSeZJaQW4PAVpBk=)
2: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: JqBaMpnZmv+Zx3xmEBZPAXkZmadTMu/97mcdKmv8V94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d4:3b:5e:ea:3c:47:b0:28:df:a2:5f:81:68:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Validity
Not Before: Mar 26 00:01:04 2026 GMT
Not After : Mar 27 00:01:04 2026 GMT
Subject: CN=4a17a6e1bee3a9addfb27f1cc6f17d88649fe72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:ab:ed:f2:c4:e3:d9:93:16:f5:4a:11:8b:
12:3c:b4:d0:94:d0:b6:21:8d:36:2b:3c:b1:ed:8b:
fa:80:c5:40:9a:53:49:e1:76:02:97:d0:6f:ec:91:
6b:91:dd:86:97:cb:98:d3:41:9c:2e:2e:57:26:b6:
7d:d0:4d:8d:50:ff:d6:97:82:6b:44:da:5c:cf:01:
92:ab:7c:6c:79:0b:90:56:2e:c4:32:10:1d:73:9d:
19:d7:3b:18:47:0a:e6:cf:1c:f0:83:69:e7:88:a9:
37:92:84:6a:32:5d:77:89:d4:44:3a:df:ff:8f:f6:
e2:df:42:63:c1:18:72:fc:96:20:97:66:00:7d:ea:
a7:08:a8:90:e3:cd:f6:78:94:eb:90:26:82:e4:b9:
e3:a1:fa:ac:4c:e4:c3:0e:8e:22:47:7a:af:07:23:
cb:1b:dd:92:96:e8:8c:a8:95:22:d1:8b:6c:fb:90:
f0:69:59:a3:36:8f:14:e3:18:c9:03:7d:a8:28:59:
46:42:c9:cf:92:07:ec:f0:78:13:d0:16:ee:93:6b:
7f:01:2a:5f:26:e9:23:f2:cd:b7:4c:a2:67:1d:d0:
c7:c9:24:1b:d7:66:ef:1c:96:8a:85:56:06:8a:40:
8d:16:8f:91:21:3b:6f:7c:d2:80:dd:6b:a9:aa:7c:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:17:A6:E1:BE:E3:A9:AD:DF:B2:7F:1C:C6:F1:7D:88:64:9F:E7:2C
X509v3 Authority Key Identifier:
keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:03:46:88:14:8e:b2:e0:2a:4f:4a:cc:93:29:f1:bd:de:09:
aa:84:90:32:04:15:1f:ed:7c:06:bc:2c:48:79:46:b5:8c:53:
da:fe:3d:35:0f:82:f6:17:4e:41:e5:84:84:58:ad:33:ad:57:
a6:2c:c1:72:9e:d5:bd:09:1b:79:86:02:10:0a:95:b2:23:18:
71:5e:4c:0a:00:3e:fd:0d:69:f5:6a:a5:75:20:62:2b:57:03:
1f:e1:9a:68:1d:79:19:32:92:71:b2:5f:42:fe:42:21:84:71:
03:64:2f:a2:bb:1a:0f:09:40:a9:92:6d:bc:36:0c:44:4a:5c:
ab:9c:71:53:31:26:e4:d6:0f:55:1d:1f:a2:38:ec:07:af:5f:
90:d3:32:73:82:08:59:fc:25:97:80:6d:d4:b3:5e:1b:6d:32:
eb:41:e7:31:2b:0b:6b:4a:7e:86:9a:8b:d2:ad:f5:25:e6:39:
7f:15:36:78:0e:1d:8e:92:d7:12:f1:2c:ff:4b:29:58:a9:60:
2c:da:0a:e0:02:9b:23:a5:9a:be:9d:db:23:70:c1:86:b0:60:
37:e1:bd:a1:4f:62:bf:32:c1:2e:14:03:ca:4f:01:09:b1:78:
95:8d:48:41:a5:17:82:87:d1:a5:45:8a:65:6c:4d:4f:28:6b:
d1:89:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:42 2026 by rpki-client