Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json)
Hash identifier: Po9aLBvtLhVCU4KAxqd7xxGckozsdXl1Zv6CATIPWaw=
Subject key identifier: 63:B8:7D:EC:F8:A5:AB:E9:52:02:3D:65:24:0C:17:60:B9:B4:50:C5
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 019D273B35173147699319C4B29A66F7705E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
Manifest number: 10A5
Signing time: Wed 25 Mar 2026 23:01:24 +0000
Manifest this update: Wed 25 Mar 2026 23:01:24 +0000
Manifest next update: Thu 26 Mar 2026 23:01:24 +0000
Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: p4t3ygYX0CzORnU4JEjvz2SLIM8y7oaziRfrdczhOYc=)
2: YU2PfYClu9ods7OIVMXTM1gfT-s.roa (hash: vgGpyNSi4szw0MOFiG3xNxocVMlT/+cj/OnKigyXPcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:35:17:31:47:69:93:19:c4:b2:9a:66:f7:70:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Mar 25 23:01:24 2026 GMT
Not After : Mar 26 23:01:24 2026 GMT
Subject: CN=63b87decf8a5abe952023d65240c1760b9b450c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8a:74:b5:eb:eb:aa:f1:d8:6d:35:a9:5e:4c:
97:db:8f:ea:b1:97:4a:65:64:1b:ba:2f:e2:64:76:
79:b1:4c:59:b7:df:a0:01:a4:66:1d:74:6f:f1:bb:
5c:0a:2a:74:f1:ee:48:1e:c4:13:b1:a1:ab:32:6b:
7a:ab:5f:bb:4a:7f:f4:f3:dd:63:a0:a8:21:1a:cc:
7f:82:71:ea:4d:d0:cd:d1:04:dd:ef:48:79:42:17:
74:fa:46:0d:4d:15:34:29:29:c0:3f:1f:10:6c:4c:
69:d2:bc:86:1b:cb:68:5d:d6:71:3b:85:33:2b:93:
c3:31:f4:5d:7d:14:b8:2c:93:09:21:55:f2:cd:25:
36:9a:cf:e3:2a:85:f5:8a:da:6d:a6:77:49:7b:47:
a7:c2:65:e9:20:62:3a:f2:13:85:57:a6:89:0e:43:
e9:b8:ab:b7:3b:4f:9a:b1:a1:83:76:71:3b:31:ea:
14:66:2b:5b:a9:39:d5:a6:15:f7:79:66:0c:6e:b6:
b5:fe:8f:d4:60:29:8d:ce:f5:e5:be:23:37:51:7c:
12:0b:e1:05:3c:a2:2f:d5:ae:38:eb:2f:4f:1d:31:
f1:f8:9d:f4:1b:68:70:49:16:f8:b4:83:65:ad:35:
8b:03:b8:de:06:b6:60:b1:39:2b:69:24:42:a2:94:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B8:7D:EC:F8:A5:AB:E9:52:02:3D:65:24:0C:17:60:B9:B4:50:C5
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:cd:46:67:29:a8:27:77:f0:cd:97:14:41:31:ab:16:7f:41:
b4:16:6f:89:a5:00:b9:32:0a:65:75:4b:78:eb:97:95:f0:06:
8d:81:77:5e:23:64:04:48:ab:4c:da:c0:42:c9:c5:7a:c3:59:
f9:cb:a8:d3:24:8c:09:93:8b:74:f9:4b:a1:33:95:d3:de:ed:
d1:23:91:5a:90:a2:90:9a:50:70:11:2e:71:c5:d5:46:48:70:
1b:5d:a1:79:af:0e:3b:66:5b:b8:0e:71:85:b9:33:64:e8:c1:
a8:03:af:35:cc:50:6b:a8:d7:63:f1:7a:34:78:21:cc:33:1e:
0a:ec:db:b3:64:1c:eb:0f:42:af:20:17:dd:68:e6:8d:72:c1:
e2:95:41:8c:a6:8d:83:df:8b:7f:88:b7:0f:c3:49:ce:ad:f4:
f3:35:db:8a:a0:9f:08:81:28:58:5f:1c:b1:cb:9b:f4:a4:d5:
66:ed:b6:88:75:b3:77:82:99:0b:8d:25:00:49:6d:43:b3:eb:
d2:97:c3:3c:aa:8a:24:7d:51:98:b1:b4:0f:c3:74:a8:74:e4:
4a:3b:99:29:a9:ca:f8:55:c9:94:a0:79:97:d0:c1:45:d2:a6:
d8:48:a8:eb:39:5e:70:32:78:0a:c0:dd:2a:c5:5b:d8:82:da:
ec:b2:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:18 2026 by rpki-client