Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
File: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft (raw, json)
Hash identifier: iNsdh3Y2OyYev3XNeF4/0HnEMs1uXeTlMISnNRdS4h4=
Subject key identifier: 68:C0:E4:1A:72:A0:21:F8:CA:D2:5C:8E:F6:CB:C3:DD:A1:52:AE:B7
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Certificate issuer: /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial: 019D382E95B712E5468EABA18A11791F6097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
Manifest number: 14C2
Signing time: Sun 29 Mar 2026 06:01:10 +0000
Manifest this update: Sun 29 Mar 2026 06:01:10 +0000
Manifest next update: Mon 30 Mar 2026 06:01:10 +0000
Files and hashes: 1: EPMtahwabHgPl-W83_5vNZdf4gw.roa (hash: 0H56HrlbNZtyDi9oYIVx2+vNE4jYkmDivR3ycZsjoTk=)
2: R1nUUzzOw929lhAIpfJDOOJ-S-A.roa (hash: Tp1cYDsUeKBDmtrgetF5KzqUAJ8NNp9SsVUJU5MzEDg=)
3: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl (hash: gIvAKu61KioNUYTj2Y1gE47qxcjNcQb43eNDvLQ3gEQ=)
4: les8ej1VpPxKoITRniTQx3Kf-wE.roa (hash: tEw4ct/fRvtKjfw/ec52txtnKNrt4GJfraUVLHoBE0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:95:b7:12:e5:46:8e:ab:a1:8a:11:79:1f:60:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Validity
Not Before: Mar 29 06:01:10 2026 GMT
Not After : Mar 30 06:01:10 2026 GMT
Subject: CN=68c0e41a72a021f8cad25c8ef6cbc3dda152aeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:4d:ac:5d:fe:59:4a:75:7c:1b:78:b5:cf:
35:62:ea:11:8e:24:ae:8c:9d:95:34:49:74:d1:dc:
33:9f:66:2e:15:a5:37:22:73:8d:5c:c4:8e:ba:de:
b0:a8:1f:28:92:ed:86:9c:d3:f1:67:be:1d:2f:1e:
1a:80:cd:b8:d5:96:7e:c8:f4:99:a4:ed:54:90:05:
9e:1b:31:89:7c:26:5b:04:b8:08:ef:6d:fa:f0:4c:
12:8f:45:43:04:ad:bf:64:53:c6:8a:64:df:bf:6c:
2c:8a:83:c9:c5:27:e5:a9:d8:4f:81:52:80:54:0a:
d0:f1:5d:5f:be:e0:4f:8d:d5:5b:df:86:55:f9:62:
a4:90:e3:38:bb:26:38:fb:5e:48:23:f6:1b:4b:d9:
58:c3:86:dd:f3:a6:05:53:44:54:4f:c8:31:07:e6:
e4:55:3e:dc:87:14:5f:eb:e3:02:01:96:cc:6f:fb:
17:be:d0:7f:f1:b8:73:20:a2:6f:62:c8:72:72:ad:
01:85:14:a3:29:a1:82:52:49:7b:b5:5c:80:32:f0:
96:6f:b4:ce:6e:d0:30:45:d4:3c:de:f4:a8:6f:99:
0f:8e:77:26:f2:11:51:3e:f3:67:19:11:1d:c0:8c:
6e:98:da:ca:49:af:ea:5a:a3:6c:a7:ca:49:4c:2a:
c4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C0:E4:1A:72:A0:21:F8:CA:D2:5C:8E:F6:CB:C3:DD:A1:52:AE:B7
X509v3 Authority Key Identifier:
keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:42:10:32:44:c0:4f:61:4d:24:56:f2:af:c4:63:2b:ac:a0:
4c:50:df:b6:a4:74:fc:74:61:eb:3b:ce:39:3d:69:ff:7a:85:
96:5b:dc:27:07:20:36:a1:5a:0e:6f:b0:38:0f:9e:b4:80:f8:
e9:c2:e7:68:12:63:b8:82:12:11:69:d9:be:d2:2b:13:eb:0b:
ff:61:9c:34:79:c0:35:6b:b9:6b:be:53:45:41:05:f6:1e:de:
d8:35:7c:81:8b:3a:5f:b7:22:04:62:b2:ca:83:53:d4:c5:6d:
d5:ec:e9:a2:0d:7a:ee:99:e4:ae:a1:32:bd:de:97:1f:13:0e:
6a:f5:0d:7e:2f:38:71:ab:ec:41:13:15:68:38:ed:f5:1e:36:
c2:bf:3f:06:f4:7b:59:f8:b7:42:6f:57:62:af:4d:dc:44:ba:
15:9e:d6:a1:9b:5b:11:60:fe:26:ee:4a:91:94:0a:18:59:60:
ee:19:97:1d:e9:52:53:83:6f:ab:b4:b1:2f:fd:5f:c5:39:ce:
24:ec:fb:be:40:12:06:98:34:dd:b0:38:31:fd:d8:59:27:2e:
2d:75:a5:90:51:fa:46:a0:cf:d2:82:7a:7d:85:50:c4:57:8d:
e4:87:df:3a:57:4d:e9:06:64:e6:1f:3a:27:32:da:e4:fd:dc:
60:66:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:55 2026 by rpki-client