Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
File: R1Ng86GS3KodPRlNtkwCVMN0vUY.mft (raw, json)
Hash identifier: UQQpcWYr6wQsCd/tK3LzpvH2ZnlP4cNGQduFBZwLykc=
Subject key identifier: BD:EF:6E:EF:B8:FA:22:53:2E:18:F9:72:7B:5E:79:6E:43:2C:C2:88
Authority key identifier: 47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
Certificate issuer: /CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Certificate serial: 019D382DF29116B60F14CC8AF8C5C687C9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
Manifest number: 0260
Signing time: Sun 29 Mar 2026 06:00:28 +0000
Manifest this update: Sun 29 Mar 2026 06:00:28 +0000
Manifest next update: Mon 30 Mar 2026 06:00:28 +0000
Files and hashes: 1: R1Ng86GS3KodPRlNtkwCVMN0vUY.crl (hash: fMmxLUEg91ZF/SvUcUL92o5JQgfReVZwNprRE1zSxk4=)
2: qMO76GFUq-hY40YmP_a09TsI33Y.roa (hash: Qi8hHlIjIYV89eN37DhURxMC9pA+eWxI7cGfJgzjw+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f2:91:16:b6:0f:14:cc:8a:f8:c5:c6:87:c9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Validity
Not Before: Mar 29 06:00:28 2026 GMT
Not After : Mar 30 06:00:28 2026 GMT
Subject: CN=bdef6eefb8fa22532e18f9727b5e796e432cc288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:af:c9:4e:58:15:04:0a:78:42:ad:fc:b6:99:
7f:79:4e:5a:de:bd:24:09:15:bd:d0:f1:72:ea:b1:
af:01:ec:26:54:02:1d:b2:5c:e5:20:a7:17:9d:9b:
c5:e7:cb:30:00:94:a6:1b:43:55:07:6c:c6:d7:18:
bc:19:96:a5:86:fd:08:12:37:c5:f4:f6:b5:58:a3:
b1:83:6f:e2:fd:0b:a5:53:16:e7:a3:ef:1f:40:11:
31:9a:3e:5a:dc:e2:9e:26:6f:1e:4c:f0:86:df:c7:
e7:13:a7:ad:e7:43:cf:9b:0a:8d:25:0d:6a:e8:26:
64:62:b2:4e:de:d2:0a:7f:c7:45:55:c5:2b:68:ef:
a0:4d:d6:40:ee:88:60:ff:a1:cf:af:f7:7a:59:b1:
74:cf:f7:65:26:9e:ba:f1:f3:a9:5f:98:a3:13:2b:
04:b1:89:60:c9:3b:70:44:81:4f:ef:9a:ee:c3:59:
ad:51:d2:5c:63:de:7b:05:1d:2b:a5:72:85:55:c8:
0e:fb:3d:4d:e3:6b:04:23:38:c4:0b:34:27:6f:a0:
c6:72:96:86:41:e0:30:d0:2d:2d:61:0f:7e:75:87:
bc:d7:bd:dc:d6:26:62:79:8f:3a:21:16:30:0d:5b:
87:18:79:31:ad:5f:84:bf:53:68:fc:0e:4c:ae:c1:
19:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EF:6E:EF:B8:FA:22:53:2E:18:F9:72:7B:5E:79:6E:43:2C:C2:88
X509v3 Authority Key Identifier:
keyid:47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b4:8b:12:37:5c:ae:e4:59:0f:da:b7:63:7c:89:93:64:05:
fc:af:97:ed:8d:8a:32:a1:50:95:55:ea:1d:4b:c9:20:99:62:
c8:c8:2f:a1:28:ab:8a:3e:3c:0f:10:9c:57:f5:5d:9a:b6:d3:
d5:c7:73:60:ac:da:ba:a6:7f:cc:5c:94:b8:28:15:4a:2c:7b:
92:91:fe:e0:2c:89:81:a2:d4:f4:57:60:c9:30:b5:92:b4:78:
29:49:a0:35:dc:0f:54:90:7c:2d:e2:b7:4e:d9:fe:1a:e9:fe:
4e:ae:b9:5b:01:44:bc:fd:3e:d0:b6:4b:9e:bd:cd:ef:cd:a2:
d2:21:1d:1b:e7:87:7c:9f:bd:1d:ba:48:0a:e9:10:b3:6d:d9:
3f:3a:6b:3f:7e:4f:ec:d6:93:84:91:c9:be:8b:34:13:0b:d9:
65:ec:00:dd:79:f3:5e:e1:78:fb:0d:da:91:a3:44:e9:be:d1:
80:f3:f5:c6:55:31:b0:50:be:4c:b4:17:7d:29:23:37:60:b0:
d2:dc:b8:ef:64:73:c5:a8:a6:e0:7c:1b:e0:2b:0d:aa:a7:93:
67:2d:66:53:be:a9:a7:71:b5:fb:3e:86:98:c7:4b:c5:c4:78:
6c:03:13:26:3e:46:0f:c5:40:04:ae:a2:0c:d2:24:95:a5:7a:
d0:e4:b5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:37 2026 by rpki-client