Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
File: ROkQGinJOPhPhgRda-XfSz9Re9E.mft (raw, json)
Hash identifier: o60/PuUGHF+c3ABCcbnqcB0ZP2iZVmC6KreoK/ydPD4=
Subject key identifier: 18:DD:30:85:71:2A:7C:1B:59:77:D4:77:E1:9A:BF:40:7D:2D:8C:8C
Authority key identifier: 44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1
Certificate issuer: /CN=44e9101a29c938f84f86045d6be5df4b3f517bd1
Certificate serial: 019D2704BD9D1C8C4F1C92221E22750A07C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
Manifest number: 0351
Signing time: Wed 25 Mar 2026 22:01:55 +0000
Manifest this update: Wed 25 Mar 2026 22:01:55 +0000
Manifest next update: Thu 26 Mar 2026 22:01:55 +0000
Files and hashes: 1: ROkQGinJOPhPhgRda-XfSz9Re9E.crl (hash: Q50aoabUNWY6VJi1/lepfLMU5Xs4BuOioibzOYYpipw=)
2: mLc4nrUmR72L5a_hibMuCOUOjes.roa (hash: Oiq1+1if7qn5D54vTTs160dOXJEuE6xP7iBsVrbNwmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:bd:9d:1c:8c:4f:1c:92:22:1e:22:75:0a:07:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e9101a29c938f84f86045d6be5df4b3f517bd1
Validity
Not Before: Mar 25 22:01:55 2026 GMT
Not After : Mar 26 22:01:55 2026 GMT
Subject: CN=18dd3085712a7c1b5977d477e19abf407d2d8c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:68:e9:e9:36:f1:55:81:b8:95:ba:4e:12:
45:13:6c:50:12:8d:13:93:6b:20:af:0e:43:52:97:
2a:8c:80:26:ff:f1:6e:ea:0a:21:4b:00:4b:e0:f5:
26:60:c1:89:23:d8:9a:0c:c7:9c:d9:7a:ec:40:1a:
af:8b:db:af:6f:ec:91:24:8a:af:da:9f:0c:51:4a:
85:a3:71:ea:7d:41:0c:f2:64:8b:ac:31:45:0e:b3:
30:e0:1f:45:c3:58:4b:bd:7a:3c:89:d3:6a:0b:4a:
34:b3:5f:d6:26:39:62:cd:3c:92:e1:ac:b9:b4:27:
02:ac:4e:b6:3e:11:d0:0d:6e:14:ba:6a:f3:ba:63:
54:71:3e:ee:43:85:fd:2d:76:ec:68:3a:56:d9:fd:
60:22:0c:c2:83:9b:1a:a3:70:4e:bb:b3:f0:55:17:
4b:67:32:60:59:cf:c9:8b:b9:93:07:95:26:9b:51:
63:1c:c5:27:fa:78:04:0e:1d:45:ba:f4:93:65:3e:
eb:bb:1e:c8:3b:71:4d:ff:de:ae:82:d3:91:e3:8f:
99:6a:17:ff:c8:15:3e:5a:e6:d8:85:44:81:91:69:
df:11:f7:75:ea:2e:3b:b3:f3:bb:bb:a6:ae:8b:c7:
fc:29:9d:3e:bc:19:4e:29:55:ab:dd:8e:94:73:6b:
6a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DD:30:85:71:2A:7C:1B:59:77:D4:77:E1:9A:BF:40:7D:2D:8C:8C
X509v3 Authority Key Identifier:
keyid:44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ca:20:84:99:3b:d1:20:e1:1d:e8:72:99:5a:1c:f6:ef:de:
15:ca:dc:c0:79:29:01:07:8e:c5:58:d7:98:49:c7:46:7a:af:
62:86:5d:30:6b:9f:f0:f1:22:54:1e:51:c4:21:3a:6e:cc:51:
fb:a1:c6:6c:57:bb:c5:81:aa:7b:a6:4d:bf:18:f8:27:e7:10:
ea:dc:4a:a5:36:57:e2:f4:9e:20:d0:6d:ad:f4:7a:31:2a:38:
97:67:e7:a0:26:e9:59:a9:59:c2:1f:73:0f:48:62:1c:da:f0:
9a:a6:d1:cd:16:da:97:fe:22:64:62:b7:6b:fc:51:e3:56:be:
50:d8:b2:d0:e1:b1:ef:86:a9:84:be:c1:58:be:ad:61:a5:a0:
7f:19:8a:09:c2:d2:ce:40:69:1f:34:c3:dd:37:d0:f1:2b:1f:
93:6a:44:b1:8e:15:85:a1:f2:58:7a:7a:3c:ed:3a:45:05:74:
35:6d:c5:e4:b0:eb:96:61:2d:6c:54:5c:b2:34:2f:d4:af:dc:
54:33:94:44:47:55:a7:9b:b4:18:38:e9:43:2b:7f:84:e9:6b:
2c:ce:b9:f4:42:0b:0c:75:ec:a4:42:99:a5:51:c3:95:ff:bc:
af:72:39:fa:64:2f:0f:6b:c5:de:21:c9:ba:3e:4d:ef:5d:b7:
55:b0:b6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:06 2026 by rpki-client