Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
File: RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json)
Hash identifier: Q87wce0khI9YsiSbSntMVpaUSI9xWe1q+WxsGsL6uFs=
Subject key identifier: 63:D1:71:7C:6F:D1:55:7A:60:B2:26:1C:BB:DE:6F:AE:35:AD:20:49
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Certificate issuer: /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial: 019D39408A0A5E44BBC3B450DFB4925B491C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
Manifest number: 0C80
Signing time: Sun 29 Mar 2026 11:00:24 +0000
Manifest this update: Sun 29 Mar 2026 11:00:24 +0000
Manifest next update: Mon 30 Mar 2026 11:00:24 +0000
Files and hashes: 1: KYrFJEDEjhc9HhmYSiPT-yYtVPQ.roa (hash: /AaiErA0b5IK+9x0vkOcwB+KnCvGEkMNKJApI/jbN6I=)
2: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: sjs8zP5Xpy53q31d35YR49IFzkN0pNsdiiBl3NtKTdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:8a:0a:5e:44:bb:c3:b4:50:df:b4:92:5b:49:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Validity
Not Before: Mar 29 11:00:24 2026 GMT
Not After : Mar 30 11:00:24 2026 GMT
Subject: CN=63d1717c6fd1557a60b2261cbbde6fae35ad2049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:e0:6d:38:08:66:23:40:d4:8b:95:7b:9e:
2e:a0:61:8f:ae:fb:11:87:89:b7:9a:f7:1f:4b:73:
66:d9:52:8b:47:29:63:bd:bf:9a:72:27:71:0b:d7:
ff:f6:92:6c:21:be:76:c7:46:c0:61:77:3d:20:dd:
01:bf:f2:6e:36:cc:a2:8a:8b:cf:22:8a:fe:e6:e2:
8d:a5:e2:9b:2c:14:af:bf:9c:58:41:63:28:25:10:
85:8b:ac:c4:10:bb:bd:1e:5d:93:75:aa:54:36:c8:
fd:8a:d6:4e:c7:26:eb:a9:a6:62:74:7e:5c:22:40:
00:0c:21:50:bf:8e:89:4e:dd:5b:97:68:1a:ce:4a:
66:f5:60:1a:51:e2:8d:cb:17:6b:fc:a0:fd:a9:c1:
5a:04:fa:d8:52:e2:ef:93:46:41:8b:b4:76:8d:8b:
e2:47:72:d9:ac:77:28:4e:43:b2:c9:e8:a5:c7:31:
6f:da:94:e9:df:c5:2f:2e:05:64:ca:5f:59:72:af:
58:a6:5b:14:c0:31:30:fe:19:45:20:df:cf:fc:31:
e6:72:31:72:6e:cd:44:f5:15:1c:c2:56:26:02:5f:
c0:f3:1f:0a:bd:ce:a8:cf:bf:57:d2:a6:aa:54:00:
7c:5f:bc:d1:67:86:ff:90:17:b3:03:7f:d0:8f:7b:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D1:71:7C:6F:D1:55:7A:60:B2:26:1C:BB:DE:6F:AE:35:AD:20:49
X509v3 Authority Key Identifier:
keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b7:5e:a8:3f:97:fb:ad:7b:97:d3:8e:74:61:98:be:c3:ff:
e5:6a:8b:20:da:1a:9c:42:11:b5:ae:db:8f:0b:ed:b2:66:ed:
f4:8f:a2:c8:ed:68:98:6c:44:9a:fd:86:fe:3b:05:61:ff:29:
ec:92:20:d2:e6:fd:29:de:a4:9c:fd:f6:82:f4:22:f3:54:c7:
90:fb:a2:24:74:e0:45:23:00:b8:06:4c:2c:7c:4e:ed:02:bc:
b4:1e:5b:b9:f2:bc:52:e3:11:be:76:8c:39:e2:0c:37:a4:55:
93:ff:da:22:f6:33:00:b4:90:03:2f:48:5f:29:ee:9a:80:2b:
df:fe:57:fe:a0:7b:71:aa:7a:63:aa:30:02:8c:c8:61:9d:11:
ea:35:13:69:b6:96:d1:29:16:a1:57:5f:4a:72:2d:be:18:e9:
3f:b7:fa:32:f3:20:d3:e0:af:1e:2d:54:df:94:56:9e:f9:97:
50:28:0d:2e:39:49:4c:8c:0a:98:e2:4e:70:4f:4e:93:f8:05:
17:3f:3f:0b:03:ad:ff:b4:80:5e:e5:37:db:ba:a2:54:bf:b4:
e7:d1:95:1d:d7:22:bd:d1:f7:59:c0:6c:7a:c3:23:95:4c:b5:
fe:68:eb:f6:6f:74:16:57:95:10:10:5f:33:a9:f3:a5:05:ca:
a3:8e:f2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:41 2026 by rpki-client