Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier: aKSat/i72haKHu2tyIqSR+FqbY6qoCPsipV3NtkjT0w=
Subject key identifier: D4:37:1A:73:FB:7B:E8:36:35:7E:9F:39:E5:4F:06:5A:51:7C:CA:F0
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 019CE1EC433A0627A9112396227D0326A787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number: 0825
Signing time: Thu 12 Mar 2026 12:01:23 +0000
Manifest this update: Thu 12 Mar 2026 12:01:23 +0000
Manifest next update: Fri 13 Mar 2026 12:01:23 +0000
Files and hashes: 1: DWZ7HjSRCLESUgo7i9Znv3F8WPI.roa (hash: 8dYfzKxyh8S4a9rEf+ls3bA5hsUeQ004H6oQiSZHoVw=)
2: a3gSQ9IQVQweYEMK-gNDpqDeUyE.roa (hash: X9hTJQV75Af9HWfAGJL8jpedHMgdZakYiBqDBBKMiVQ=)
3: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: crrwjH+yQd4o8QO52uoE5r6nuk3EVKOyBdK0dhQV3VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:ec:43:3a:06:27:a9:11:23:96:22:7d:03:26:a7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Mar 12 12:01:23 2026 GMT
Not After : Mar 13 12:01:23 2026 GMT
Subject: CN=d4371a73fb7be836357e9f39e54f065a517ccaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:c5:c0:3a:51:e8:e3:25:00:01:1d:5d:03:
4c:45:a0:59:4e:23:21:b7:da:e9:a8:04:c6:36:7b:
ec:a0:d8:8f:20:0c:f0:08:4c:fc:7e:2e:3d:91:ad:
c8:e6:7f:9f:8d:1d:b4:b8:fc:cc:f4:18:47:13:cb:
96:3b:31:3a:46:ba:40:91:b7:be:35:5c:fa:d7:86:
8a:01:37:de:1b:8b:b6:c6:b7:9b:e6:7c:ac:ca:ef:
30:35:4f:3c:fc:f9:55:d2:6a:73:53:99:9e:6a:25:
87:8c:98:e9:55:dc:c3:64:c9:ca:ae:af:28:2a:1a:
28:33:23:4d:0a:8a:d8:8b:45:a1:50:9c:87:fd:32:
86:16:0b:02:04:89:b1:6f:91:17:e3:77:4a:88:dc:
87:9b:b1:65:f0:ce:60:f3:9c:8c:cc:09:88:fa:a8:
fc:79:ec:d1:98:55:18:6c:a8:1f:56:93:4f:6a:64:
db:8e:7a:7a:b4:55:3b:bf:81:c6:6b:05:57:3e:70:
f5:10:33:bf:f6:a8:7f:25:06:ef:e4:a8:d5:9e:1c:
cc:f5:4a:5e:02:4f:8e:d3:98:8e:91:09:66:ed:6c:
56:ef:61:ac:c4:aa:04:79:87:f7:1b:ac:03:91:06:
0b:22:c7:e6:a3:f1:f9:21:68:25:94:e2:99:53:e4:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:37:1A:73:FB:7B:E8:36:35:7E:9F:39:E5:4F:06:5A:51:7C:CA:F0
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c3:22:b8:7d:a5:5f:3c:3d:22:7f:23:a0:c5:a4:ce:b8:25:
5d:b4:72:0c:da:e2:fe:7f:83:96:c8:0c:b5:54:44:10:14:a9:
22:71:24:d0:43:99:ed:64:3d:92:33:69:ba:04:91:89:9e:c4:
8b:d0:7a:a0:7b:24:dc:80:b6:b3:09:4a:b2:5b:4b:74:dd:bd:
5e:bb:d0:5f:3c:eb:fd:b0:9c:37:56:fc:da:78:84:fa:2c:2e:
7f:e1:14:cf:12:fd:3d:04:19:42:b9:34:54:35:d7:e5:ea:00:
ee:d9:e9:b8:ef:5e:9e:ac:ab:bf:f1:d6:a9:59:58:ef:77:5c:
26:dc:3b:df:48:7d:bd:dd:3b:e2:81:97:b5:c9:92:df:4d:71:
e3:b5:10:2e:eb:6b:7a:65:ae:20:fd:3c:50:14:1d:7d:a2:07:
83:e9:87:cc:5f:90:03:6f:04:29:b1:d4:de:36:38:ce:a7:2f:
20:20:c9:24:dd:67:6a:f9:6d:71:f2:bf:f0:07:f3:2f:46:22:
a7:a2:9d:28:68:1d:67:fd:06:f2:5e:8a:36:ba:e1:a2:c6:df:
23:03:0e:9d:b3:3c:6e:28:e9:4a:6d:19:61:49:8b:2b:da:14:
c5:03:7a:9f:e2:d6:43:4e:9b:b7:ad:56:93:cd:f8:ed:c6:15:
af:d4:ee:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 14:22:53 2026 by rpki-client