Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
File: RI63RgCeGCwI7YT4F30ACKZIWD0.mft (raw, json)
Hash identifier: Cy1HZN1mvPCmPrDJEfrpeRW3rYHvit/hBIn9PRFFkhM=
Subject key identifier: D4:5A:E0:5F:11:F8:0F:5E:73:EA:D1:77:62:AD:BB:1F:00:78:8A:D6
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Certificate issuer: /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial: 019D25BA39D1C949EA3A6D3BACA248B3D3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
Manifest number: 32
Signing time: Wed 25 Mar 2026 16:00:54 +0000
Manifest this update: Wed 25 Mar 2026 16:00:54 +0000
Manifest next update: Thu 26 Mar 2026 16:00:54 +0000
Files and hashes: 1: 8MEW4LhZnlTnZHpLLOu2i3k4f70.asa (hash: xNoCB9vHOWlyJDRMNvsd28N7c1284wMKE2GDeG1Uj6c=)
2: RI63RgCeGCwI7YT4F30ACKZIWD0.crl (hash: IZthSaEsuEX4XwvI0oZ6khAXBTpnXnZ1zSgMaQxRBf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:39:d1:c9:49:ea:3a:6d:3b:ac:a2:48:b3:d3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
Validity
Not Before: Mar 25 16:00:54 2026 GMT
Not After : Mar 26 16:00:54 2026 GMT
Subject: CN=d45ae05f11f80f5e73ead17762adbb1f00788ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:3d:3c:a2:e1:32:e9:6d:a2:4e:3a:5a:64:
88:58:9e:7e:bc:ff:a2:9c:46:a8:b6:63:e8:21:2f:
81:72:53:ef:9a:a0:c2:74:2b:18:08:8d:48:66:3f:
3d:33:be:26:21:6c:8c:32:80:69:50:83:44:ea:12:
4f:bc:40:f8:65:3c:04:54:58:0d:e9:35:90:3b:c3:
6b:62:d4:a4:53:51:65:79:9a:18:fb:35:28:23:5e:
8c:a1:15:52:76:d2:a5:2a:6f:20:17:d0:8d:81:04:
d1:a6:9b:0d:05:9e:fd:b0:e8:59:89:ae:65:4e:ef:
68:d4:0c:73:c1:a8:6c:49:52:cf:90:43:fd:0f:d5:
09:ca:b6:74:e5:e4:0f:0d:37:da:2f:6f:21:cd:d8:
d1:91:11:c5:24:13:e9:64:fe:cd:d3:62:d0:81:24:
35:87:10:c3:ab:b3:e8:ee:37:bd:b1:44:3b:20:c3:
c8:76:87:b6:0e:be:29:ec:23:12:e5:57:03:fe:b4:
ea:66:24:d9:89:1d:9e:35:78:4c:f1:25:e0:5c:20:
92:1d:87:fc:c1:17:9b:b8:d3:e4:04:3f:2f:b4:af:
40:e6:62:30:49:2c:f5:35:82:34:98:8e:ff:a2:58:
ca:c3:ba:bf:54:fb:74:49:bd:8f:69:86:6e:bd:86:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5A:E0:5F:11:F8:0F:5E:73:EA:D1:77:62:AD:BB:1F:00:78:8A:D6
X509v3 Authority Key Identifier:
keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:95:85:8a:f3:0c:05:0b:8b:5c:6e:ea:48:d7:5f:d8:fe:54:
0d:92:36:84:28:4e:aa:0a:d7:33:35:25:37:fa:e6:96:74:ab:
5e:27:d5:b5:94:f1:ba:a8:20:53:4c:3b:1a:81:e8:93:c9:21:
4d:0f:ee:3e:f4:8f:6e:9f:d6:08:88:ed:fb:9d:83:d9:40:df:
4f:ae:68:1e:f0:c9:e2:83:63:10:b7:05:73:04:8f:b5:ac:81:
e2:18:f7:13:ea:f4:b5:1b:dd:bf:d1:be:b1:05:93:1b:e6:ab:
f9:c6:63:8e:09:b0:ee:d3:69:25:03:83:45:17:0a:e9:67:44:
6b:63:62:b7:41:57:69:2b:df:c9:a7:7e:75:0d:d4:75:e3:02:
51:f4:28:4e:a0:00:f6:d3:fb:4e:aa:93:7b:5c:93:38:b9:8f:
98:0f:62:f1:e6:b0:72:90:b0:9c:b9:26:bb:19:89:77:35:2f:
3b:bc:37:b5:b4:0b:75:83:bc:ce:af:26:60:13:50:ae:82:50:
ab:34:75:66:0f:ef:e2:65:bc:bf:f2:e2:c7:cd:3a:9a:28:4e:
14:4c:11:36:73:0e:fb:b4:a8:d4:0b:b3:5a:3d:b7:a0:94:a1:
6e:69:3a:23:b2:b4:2d:84:7e:e6:7a:02:6d:91:5b:b8:77:29:
fb:8c:30:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:21 2026 by rpki-client