Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
File: iAsPesuH0TTDhZ1y0NGmHkdRusA.mft (raw, json)
Hash identifier: KHVrhmYdzi0Wgt2nDjkMp29oeo6b1rFT8ke4UPDwpds=
Subject key identifier: FF:68:18:65:D7:C0:E5:B0:C5:05:4A:F0:16:9B:85:87:C5:38:6E:7F
Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
Certificate issuer: /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Certificate serial: 019D37F794ABA8BC8262D6039213F5C98E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
Manifest number: 0F3A
Signing time: Sun 29 Mar 2026 05:01:05 +0000
Manifest this update: Sun 29 Mar 2026 05:01:05 +0000
Manifest next update: Mon 30 Mar 2026 05:01:05 +0000
Files and hashes: 1: QFY0JdkqZACX6DbQrMuCDT111r8.roa (hash: 8ei2JwlhItg4y3r3m8oI+dJmgo/uwKKNh5cafYIl8Iw=)
2: iAsPesuH0TTDhZ1y0NGmHkdRusA.crl (hash: lqv6VJQpg42swv7eIiChxA1QlHsmXaCmxYJmHJ47uFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:94:ab:a8:bc:82:62:d6:03:92:13:f5:c9:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Validity
Not Before: Mar 29 05:01:05 2026 GMT
Not After : Mar 30 05:01:05 2026 GMT
Subject: CN=ff681865d7c0e5b0c5054af0169b8587c5386e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:da:90:c3:a4:93:51:e8:65:e2:c9:08:0d:54:
f7:f6:5a:83:9d:e4:23:79:d3:ae:35:7c:40:97:e6:
ce:87:da:9e:ac:05:f3:e0:30:97:c2:94:df:ef:18:
33:e9:5b:93:2c:dc:ce:27:cc:83:42:ce:26:e3:82:
d8:e2:d8:49:cc:30:36:31:83:26:41:62:51:41:b7:
b1:09:3e:41:d2:13:a1:a0:93:38:80:4f:0f:53:02:
84:dd:32:49:5d:d7:87:9c:7a:be:7a:3b:97:03:3e:
e2:68:75:28:b3:e1:6f:c4:87:cb:f4:e7:ac:47:2f:
d9:d5:8e:49:5f:34:84:78:47:8e:d2:ce:b2:3e:4f:
5f:92:7a:52:e9:ac:8e:99:62:c1:62:42:60:1d:92:
3c:df:5d:1d:81:f5:1d:e8:2e:f3:e0:17:55:15:83:
df:28:10:e9:6b:88:e6:f9:24:4e:4d:7b:22:a5:05:
5f:e2:cd:67:86:32:56:89:f0:17:d7:13:c0:8b:20:
fa:d8:9a:36:fd:4b:9a:1d:72:1a:c2:15:cd:68:d8:
50:12:7b:17:53:89:f6:7e:8a:e3:f7:51:a7:29:2d:
01:92:d3:cb:ee:6f:c9:11:7d:cf:bf:40:0b:01:39:
cc:6e:df:82:9e:eb:0b:8e:40:a2:2a:d2:28:f3:3b:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:68:18:65:D7:C0:E5:B0:C5:05:4A:F0:16:9B:85:87:C5:38:6E:7F
X509v3 Authority Key Identifier:
keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:67:4e:b7:9c:3e:88:c3:fa:1d:05:9b:4a:70:24:d1:cc:08:
c7:c4:36:34:df:37:36:d0:1a:0a:f0:78:b3:95:20:f2:93:72:
5b:20:68:58:f7:9b:0a:bd:b8:08:cd:19:66:07:26:38:9d:f2:
61:e3:fe:85:cc:5d:50:bd:04:40:7b:a5:96:15:3b:af:fa:ca:
e2:7f:8b:1d:62:f6:bb:6a:cb:a2:c7:75:19:7d:ac:09:71:5e:
86:81:b6:a0:33:0d:db:db:d3:a0:ca:d9:8d:64:15:6c:93:1e:
d1:93:fe:3d:01:e7:a8:88:8c:93:43:d8:72:b5:90:b3:cb:d1:
02:5e:2b:29:a8:c7:86:10:cd:01:04:dd:1e:4d:26:28:5a:b0:
30:5e:46:5a:d3:a3:a0:13:ca:9f:cd:34:62:24:62:5a:84:61:
81:52:db:48:20:3a:47:c9:70:a7:c3:f6:f3:71:66:1a:26:68:
16:cb:b8:1e:a4:18:b1:d7:a3:33:d1:72:68:1a:c6:5d:18:df:
2f:ed:42:14:03:77:cf:7f:bb:89:53:65:32:67:16:9f:52:e1:
42:d4:e1:07:99:fc:26:15:c6:04:46:7f:bf:a0:ac:31:4a:5a:
12:d7:3f:fb:8e:06:7c:5d:58:96:51:b1:e9:4e:7b:aa:1d:0e:
66:56:95:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:27 2026 by rpki-client