Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: H0UyqVvRaDfoOZdKWtXdExbu8aSgfVJcmsimSyT91GA=
Subject key identifier: 11:A1:C2:23:97:9E:FA:FE:32:BD:89:94:86:FF:CF:72:8C:8A:A8:B8
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 019D382E3387B18887F321B515CF02A933DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 10F7
Signing time: Sun 29 Mar 2026 06:00:45 +0000
Manifest this update: Sun 29 Mar 2026 06:00:45 +0000
Manifest next update: Mon 30 Mar 2026 06:00:45 +0000
Files and hashes: 1: 0NQU1ASarAJo1UIvicGr69EoQz8.roa (hash: WdkEuOIrig9vUDyn2CAOyE+4Fo/rEVr4Pv+Aia51hm8=)
2: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: bQoXn/XpbL0y/LStm5GdoU+XBm2yuIOVSmKrURgwKCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:33:87:b1:88:87:f3:21:b5:15:cf:02:a9:33:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Mar 29 06:00:45 2026 GMT
Not After : Mar 30 06:00:45 2026 GMT
Subject: CN=11a1c223979efafe32bd899486ffcf728c8aa8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:93:c7:62:69:25:4b:20:70:ea:ce:a2:a1:3e:
9a:da:48:eb:39:1c:b9:17:4b:ed:9b:38:6d:04:68:
05:b9:1c:79:29:f6:59:43:7f:5b:36:84:06:cd:bb:
4e:be:d6:9b:3a:c0:98:fa:5a:b7:e6:0b:45:86:dd:
00:a4:e7:8d:bb:65:74:05:46:29:c7:6e:4d:cd:f0:
69:e4:33:43:42:20:b1:a3:8e:50:df:68:8c:6f:6b:
d9:82:65:68:c4:00:7b:ce:26:2b:52:4f:e6:37:1f:
e8:0f:6a:79:85:28:0d:07:75:49:21:97:f4:64:60:
61:88:a4:70:85:3a:bf:4f:1d:5f:5d:83:60:77:77:
4a:49:ae:88:f1:0e:6d:b9:0d:9d:fe:cc:40:1a:75:
8d:19:a3:21:dc:c9:86:c7:68:b9:ef:62:c5:7d:07:
7e:d4:0a:d3:6f:39:bb:63:c0:5a:e7:58:ee:e1:49:
b2:c0:d3:93:d0:51:7f:1b:68:9e:26:c0:25:53:3b:
00:a2:75:4b:31:86:38:f0:e9:e4:67:52:14:64:b1:
8c:07:d4:4f:bf:f2:45:bf:03:65:cf:27:76:ed:1c:
38:9b:ae:a8:b8:55:ac:ba:93:f1:72:85:59:4b:a1:
36:97:41:9b:73:f2:b2:48:ff:3a:6c:4e:31:b0:c3:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A1:C2:23:97:9E:FA:FE:32:BD:89:94:86:FF:CF:72:8C:8A:A8:B8
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:38:db:94:9c:d6:2b:13:0a:18:01:88:02:b0:a3:8d:04:61:
2a:06:6a:a9:69:c0:a5:83:71:c9:b7:dc:ec:a6:24:54:47:d8:
cd:67:29:fb:49:0a:ee:8b:ea:00:44:bd:62:df:a1:3f:12:c0:
e7:ed:d2:1f:ab:45:41:ee:fc:f4:a8:72:b2:df:b4:c3:02:33:
01:61:94:92:b2:81:ac:7a:dc:61:f3:c3:07:a7:64:00:76:a4:
dd:0c:1e:80:94:cb:8e:1b:96:06:96:ee:2d:d3:c2:f9:77:73:
c7:c8:9c:e6:d4:c4:76:c6:11:69:c6:ad:79:05:bb:b2:73:30:
5e:fc:7c:2a:d0:81:ce:34:17:6f:f0:c8:05:40:18:ba:b8:5c:
ce:89:d5:81:2f:e8:a6:9c:c1:1d:95:43:d6:ea:ca:ae:79:e2:
96:f2:b4:bb:dd:39:e7:4e:19:2e:83:97:3f:a1:57:3d:ed:52:
c5:7b:23:69:05:c6:41:60:07:81:3a:d6:2f:ed:c2:c5:a4:90:
ad:27:d5:6c:7b:98:5b:e5:91:a7:4c:14:0f:1b:8f:f1:be:b1:
d8:cf:27:87:73:72:6d:27:b0:1a:b4:3a:1b:94:04:9b:d5:ad:
a5:b6:00:d9:01:bf:38:d7:86:dd:1a:bf:1c:4a:d1:e1:25:d4:
f6:04:3a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:53 2026 by rpki-client