Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
File: sE0XVlP7vejZidJ-OCe8AR4CCgE.mft (raw, json)
Hash identifier: r0U18lrVG8qknEfG3V+V+62tPPUHPRN+jdC8Hw2nkzo=
Subject key identifier: BC:C1:51:92:47:0E:7D:DB:D8:9B:AB:DD:53:28:3A:55:41:5F:CA:99
Authority key identifier: B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
Certificate issuer: /CN=b04d175653fbbde8d989d27e3827bc011e020a01
Certificate serial: 019D389BE1C8B69B860B11582FFA39457BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
Manifest number: 0953
Signing time: Sun 29 Mar 2026 08:00:33 +0000
Manifest this update: Sun 29 Mar 2026 08:00:33 +0000
Manifest next update: Mon 30 Mar 2026 08:00:33 +0000
Files and hashes: 1: C64-Jz9cM1Y02wj-eYPR8kiNDFM.roa (hash: pQ+PTe9eRZ2bMKuA8XKpNpYesialrqlyPz+/RShJ3Nw=)
2: sE0XVlP7vejZidJ-OCe8AR4CCgE.crl (hash: 35YDHKv3QEHxHKJwgdtoK98CHRXkasRfiR7jGz2ge90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e1:c8:b6:9b:86:0b:11:58:2f:fa:39:45:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04d175653fbbde8d989d27e3827bc011e020a01
Validity
Not Before: Mar 29 08:00:33 2026 GMT
Not After : Mar 30 08:00:33 2026 GMT
Subject: CN=bcc15192470e7ddbd89babdd53283a55415fca99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:1c:de:86:6a:3b:ef:a9:4f:ea:c1:4a:09:
ea:08:b6:c5:e9:58:34:b4:d8:02:02:bf:78:72:11:
33:af:95:28:89:98:c5:8b:6c:a2:db:e9:42:d2:79:
fe:3d:dc:e4:0a:03:09:69:f2:7c:47:0c:56:81:31:
36:0b:33:a7:b6:e1:58:72:20:22:ba:b7:c6:cd:f6:
2f:e7:7e:17:d0:38:65:9f:09:30:cd:68:1a:65:7d:
17:e6:5a:8f:31:4e:53:75:a7:71:75:84:a1:4d:be:
03:9e:3e:ba:10:ac:3a:d4:e6:c5:86:e4:ac:32:26:
26:4e:7a:a6:46:b2:31:c7:e9:02:e7:f8:a2:fb:d2:
c3:92:10:7f:ef:76:45:65:a7:05:9e:f8:fc:34:90:
40:95:2b:96:0a:0a:8d:94:e1:21:91:5a:d1:aa:25:
46:44:1f:a8:4c:aa:b1:eb:87:97:7f:00:9d:96:e4:
65:b7:fe:e1:ed:66:b3:d7:7e:44:25:6f:79:3e:53:
80:72:84:99:84:11:a4:58:ee:89:a8:18:55:48:9e:
80:8a:bc:7e:60:be:3d:1a:a4:90:81:6b:24:8d:50:
f3:3f:99:8e:75:7d:fa:d2:14:a9:27:33:9d:e6:e1:
48:60:5a:08:27:d4:93:84:d0:55:20:f0:38:9f:89:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C1:51:92:47:0E:7D:DB:D8:9B:AB:DD:53:28:3A:55:41:5F:CA:99
X509v3 Authority Key Identifier:
keyid:B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:09:2b:7e:21:81:8d:89:d5:33:18:3f:c9:60:4a:b1:12:fa:
96:32:74:87:c0:70:65:61:86:e5:c8:1c:e3:eb:cf:e5:0f:02:
4a:f8:dd:8a:63:48:e5:8d:4f:de:59:fd:94:fb:c6:0d:de:03:
a7:b2:40:2c:9d:74:ce:97:50:64:9c:86:71:6b:b6:7f:61:e8:
0a:d3:f5:a6:44:9c:93:7b:e3:4a:2c:e0:20:00:2d:82:73:b5:
88:d1:b8:f8:b8:69:51:ea:58:70:ed:07:0a:4d:2e:de:fa:7d:
8e:aa:4f:84:bf:93:60:81:2e:69:5a:59:1f:05:23:f6:80:08:
cf:c2:8c:95:5b:e1:e3:f9:8e:83:fb:2a:8c:21:c5:0d:b4:ad:
01:90:d6:45:b1:06:89:46:60:a9:21:af:9b:9b:77:8a:a2:64:
ac:5b:e8:29:99:63:1b:77:62:91:d6:a4:ef:08:99:3f:4b:7c:
03:be:98:c7:69:d6:29:bd:f1:10:bd:fa:5c:9b:d2:da:11:cd:
4c:38:3a:ee:bb:66:c9:4d:90:d8:b6:ea:96:5e:0e:f7:96:ea:
e1:d4:e1:2d:d6:e7:c1:42:df:02:4f:ea:25:e5:5d:e5:8a:91:
2d:79:1c:25:ac:65:27:48:85:bd:69:1b:ba:b1:d8:a5:ee:7a:
30:97:ef:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:46 2026 by rpki-client