Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
File: rrcMp77FOQL1z1eeuT7bDZKi-0M.mft (raw, json)
Hash identifier: IhBErcfMTBFZ0zcni9XyvJ1b8VJR/4ly0+d0qnzXzhg=
Subject key identifier: 98:D9:08:E5:C0:35:EC:97:90:F7:68:DB:DF:39:F6:CB:F2:B8:FE:87
Authority key identifier: AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43
Certificate issuer: /CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43
Certificate serial: 019D38D2BCE1733B53DB639BDFEDAADCAC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
Manifest number: 0124
Signing time: Sun 29 Mar 2026 09:00:28 +0000
Manifest this update: Sun 29 Mar 2026 09:00:28 +0000
Manifest next update: Mon 30 Mar 2026 09:00:28 +0000
Files and hashes: 1: qZ7w8eltwpusgDZDYcyCDOLAgd4.roa (hash: tsflvwgXfYhAOmry/PKXKjcvkUzgCka5jl0JMjyOtdE=)
2: rrcMp77FOQL1z1eeuT7bDZKi-0M.crl (hash: Q5Rk2MNcARgGyaPhoGDcwpM3ZcSzuiXzSqhFW0Aix2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:bc:e1:73:3b:53:db:63:9b:df:ed:aa:dc:ac:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43
Validity
Not Before: Mar 29 09:00:28 2026 GMT
Not After : Mar 30 09:00:28 2026 GMT
Subject: CN=98d908e5c035ec9790f768dbdf39f6cbf2b8fe87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d2:86:d9:22:06:51:81:24:df:62:ee:23:bd:
07:65:9b:1a:62:03:46:a4:82:aa:7f:dd:30:7c:92:
78:a4:5f:15:3e:94:b9:c3:25:51:97:c6:92:d2:83:
a0:79:ad:fa:a6:86:52:ae:24:1d:70:7b:3a:09:ff:
f8:b3:51:bc:e3:3b:4f:53:ff:03:5c:c1:8a:b9:f3:
94:5f:5a:8b:32:5d:39:9c:cf:83:54:20:35:56:7b:
b2:ae:19:dc:55:d5:76:76:b6:3c:bc:c4:66:69:21:
33:38:71:bd:1a:44:96:43:e0:c4:75:e4:f7:00:24:
d8:dc:f3:8b:2c:92:d4:70:31:3a:74:7b:cc:ab:6c:
7b:4f:51:e6:9e:c2:15:f1:95:8d:01:f6:8a:b8:70:
d5:3c:17:1a:cb:3d:56:91:98:63:3b:79:34:2e:24:
64:f9:5f:68:69:2d:5d:31:1c:bc:7b:39:6f:ce:f4:
ef:18:67:65:99:0c:f7:13:3c:3d:60:13:86:cc:3c:
89:73:03:bb:b2:e0:49:32:49:19:4f:91:64:57:7b:
a1:e0:c6:93:8a:3f:4b:9c:4b:86:34:55:af:d1:73:
27:16:35:55:47:08:2e:49:1e:c5:99:6d:19:a4:39:
c6:85:fc:10:8a:98:24:79:8c:5d:22:4d:54:9d:32:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D9:08:E5:C0:35:EC:97:90:F7:68:DB:DF:39:F6:CB:F2:B8:FE:87
X509v3 Authority Key Identifier:
keyid:AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c6:e9:af:fd:e2:27:04:30:ac:fb:cb:90:dc:85:d8:0b:33:
3e:ba:cc:27:71:02:02:3f:70:c5:fb:14:3f:c0:06:ac:eb:55:
a4:36:d6:51:cc:4f:fc:3f:0c:84:4f:62:b9:ec:99:92:45:9a:
90:29:93:56:f7:23:9d:d0:fc:d8:72:e5:45:d5:db:4e:66:3a:
fe:1e:20:dd:f9:19:d8:69:34:97:45:94:da:b9:ec:0c:91:97:
e0:78:08:60:65:39:d0:9f:c5:f5:49:1c:26:13:37:7f:16:86:
64:69:0c:dc:8a:d3:71:f5:30:a3:67:4e:66:7a:cf:cd:ef:1b:
8c:5b:30:6c:d2:88:2f:04:6d:19:7f:e8:f9:70:4a:9f:0f:a9:
f2:39:7c:dc:c1:56:ae:87:66:14:91:9b:11:ee:1f:4f:18:8b:
a7:62:0a:89:4c:58:66:91:29:bf:0e:1d:9c:41:1b:86:cb:0b:
d0:c5:3d:e4:e0:e0:29:16:c6:42:e9:70:b4:7d:b1:0b:6c:af:
1a:30:38:34:a5:39:61:eb:ab:02:e5:0d:cd:94:f0:03:f8:a9:
8b:88:16:fc:b4:f4:7d:1a:e6:e7:e5:60:8d:9a:6f:05:73:52:
e8:ed:3b:37:e0:13:9a:4b:a0:c0:d2:14:13:06:84:3b:65:f9:
42:aa:c4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:15 2026 by rpki-client