Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier: 4hFr2BeIhW1aYMhyO+DMsZHb2dT/OSl4UIwPAYcV0mU=
Subject key identifier: D0:ED:27:E9:35:6D:EA:79:8F:0A:2B:D7:6B:A3:19:B6:25:7F:40:5A
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 019CE5FF8174AB2AFDF5A26B44645E5EEDC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 07:00:52 +0000
Manifest this update: Fri 13 Mar 2026 07:00:52 +0000
Manifest next update: Sat 14 Mar 2026 07:00:52 +0000
Files and hashes: 1: 1qB4lHdQE3G5BgpU7cFdF6FWfBk.roa (hash: Xb0xuBfRe7FwO8H+eAMIQNLLlYRIEueyRhLbYCR1L9E=)
2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: iXmm5sQyxbfwLPKj5RXyFFZKZfAvo90rJBk6KDA9X1E=)
3: WthtcWvJR0bnXyUYIIyDtU_Ijpw.roa (hash: W4V4VKeFsQZDXA2GLDkXPjJ+JE3asR1EB7QgnFmVGmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:81:74:ab:2a:fd:f5:a2:6b:44:64:5e:5e:ed:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Mar 13 07:00:52 2026 GMT
Not After : Mar 14 07:00:52 2026 GMT
Subject: CN=d0ed27e9356dea798f0a2bd76ba319b6257f405a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:37:a2:40:59:3f:66:4f:2e:ca:00:15:20:
97:06:3d:1f:3a:05:3a:f5:21:0f:5d:be:7d:f5:23:
90:26:a1:e1:8e:d2:d4:73:db:86:a3:d5:30:9d:2c:
70:5f:54:e2:6a:70:70:4a:36:c8:36:9e:2a:2f:b8:
d5:22:8e:a4:0a:7a:c4:b8:36:89:4c:16:7d:ad:00:
03:e9:43:b7:cb:1b:c7:f1:df:14:f3:dc:14:dd:36:
56:cd:90:a7:ac:38:61:f4:b9:ec:c1:71:29:10:7f:
21:11:0c:e5:18:84:37:70:22:c3:cc:a1:f7:1d:9c:
a0:b5:51:82:fd:8c:bd:62:4e:96:d2:f2:e3:b0:52:
31:05:47:c8:e5:83:30:8b:af:e3:cd:c7:1b:ea:6a:
86:5b:97:bb:ac:78:3f:82:96:ae:5d:33:bf:7b:65:
0d:96:74:69:79:1f:12:d3:3b:02:ec:74:7e:16:14:
5b:bf:ab:8c:b7:a9:d8:76:1a:8d:d6:5e:91:a1:2e:
73:ce:b4:1e:80:77:8d:fb:06:62:23:d9:ce:d3:20:
1a:9c:6d:4d:e2:b9:f9:a8:34:7f:98:f1:59:a8:10:
82:47:87:b7:f1:38:d0:05:c8:a4:70:01:b7:28:93:
da:20:81:03:68:56:75:5d:78:5e:ad:ae:f2:9c:1c:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:ED:27:E9:35:6D:EA:79:8F:0A:2B:D7:6B:A3:19:B6:25:7F:40:5A
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1d:06:24:eb:d1:e0:d2:75:32:42:b5:02:6d:08:7f:bb:b4:
56:7e:ef:c8:bf:31:9d:8d:42:af:fe:30:3d:1d:96:20:7a:97:
18:70:c3:a7:82:93:f5:28:d4:d8:48:b8:dc:c6:29:80:f9:dc:
77:38:9a:87:54:07:7e:35:c8:b8:23:de:a5:91:1f:64:3b:e5:
77:e7:dd:49:70:83:ac:42:6f:28:88:51:fd:5f:ee:5e:77:b9:
01:f2:89:95:f1:25:18:47:ea:ef:45:db:c6:96:27:01:1b:cb:
50:67:82:51:9a:e8:7f:c3:ba:50:b2:46:e1:24:08:da:c0:36:
05:db:3d:ac:84:2b:1f:24:0e:1e:4e:7d:e7:92:78:94:28:e1:
97:b6:fc:5a:ad:a9:d8:1f:c6:47:e6:6c:d6:d9:de:84:41:f2:
b1:a2:ca:4d:f2:ab:cd:02:8d:03:b2:28:bb:5a:c1:d2:c4:dd:
98:c0:86:ef:15:ba:76:9f:1e:0e:3a:d9:af:f4:80:34:f9:80:
43:84:78:15:dc:05:2f:95:67:b7:ca:98:b0:33:1c:06:d1:8a:
0f:35:67:89:0f:fc:99:e7:04:40:40:8d:9d:80:2f:8b:f9:f9:
31:0c:5b:44:93:9d:d6:1e:4a:b5:8e:6c:bb:46:44:74:21:5c:
1c:83:70:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:34:11 2026 by rpki-client