Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
File: RUv1gRnP6Z8XSbzZvRJHArqctxM.mft (raw, json)
Hash identifier: 11+q2t352Ih1nJ6zf3HTP0NlzrR0/rugxP03zcUyKSM=
Subject key identifier: 24:02:0C:02:80:FC:35:F3:52:AC:BA:F5:BE:B7:F5:8D:B1:76:5A:F4
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial: 019CE6367A4E8077FFEB241914F57C14C703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
Manifest number: 12EC
Signing time: Fri 13 Mar 2026 08:00:55 +0000
Manifest this update: Fri 13 Mar 2026 08:00:55 +0000
Manifest next update: Sat 14 Mar 2026 08:00:55 +0000
Files and hashes: 1: RUv1gRnP6Z8XSbzZvRJHArqctxM.crl (hash: W368IQlie4NWEoImlEQc67TOxuV18d+qNQx+ppdh/4c=)
2: UxsbNkBxV5Z06pGcubFBR8uKdLw.roa (hash: tbWLve0j2n3BjQjOZ6pgmALHAdTE4wxSO/sJbmSQFxs=)
3: tTQT4HsHlUWlBxRkYb49ZrBAWtY.roa (hash: +00YrVjwsl/7FXL7Et4Om6euiIMwhs1ab+9m+Zkr+NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:7a:4e:80:77:ff:eb:24:19:14:f5:7c:14:c7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Validity
Not Before: Mar 13 08:00:55 2026 GMT
Not After : Mar 14 08:00:55 2026 GMT
Subject: CN=24020c0280fc35f352acbaf5beb7f58db1765af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:9b:6b:5a:be:04:a6:e0:0a:6c:74:21:87:
95:8b:1d:bd:e9:ad:e2:81:58:f4:64:bb:a1:1e:98:
8f:4b:e9:3a:3f:cc:6a:bc:f8:a9:99:c5:be:ff:71:
9b:eb:57:d9:88:65:4e:bb:7c:e6:be:d3:f9:d4:50:
81:72:a4:e1:1a:4a:88:be:ab:a8:20:8c:b2:66:56:
da:91:45:af:86:3c:15:47:a1:fd:86:d0:2e:b9:eb:
20:07:31:b7:5c:c0:b8:c5:d3:5d:c6:c8:97:de:7d:
93:ed:c4:dc:29:d0:34:b4:5e:b2:08:48:13:b5:5b:
61:43:33:02:11:5d:3f:9a:a7:c1:eb:85:77:59:e3:
9e:67:3d:33:ac:70:ba:a1:84:3c:2a:34:c4:de:90:
02:d8:df:87:c2:8a:7a:2a:2c:b0:0c:e1:3a:1a:a2:
1f:78:28:c3:63:6d:0a:b4:50:92:56:9b:4f:c5:c1:
10:ff:7c:af:20:ab:c1:cc:87:a4:6f:36:d6:27:df:
ba:36:f1:8f:1f:65:15:22:07:18:6b:10:a3:ba:76:
17:99:27:c1:db:8c:f2:3e:28:c4:e9:a5:19:a4:ef:
9a:ca:f0:c8:f2:b1:64:7f:2c:a1:ea:45:cf:d5:8c:
2c:fd:b6:f2:4d:e4:d9:4e:4d:91:1e:7d:e1:b8:95:
fb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:02:0C:02:80:FC:35:F3:52:AC:BA:F5:BE:B7:F5:8D:B1:76:5A:F4
X509v3 Authority Key Identifier:
keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5a:b2:a4:cf:5a:63:79:4c:f9:d9:b9:30:b8:43:13:ff:46:
37:62:88:32:f5:82:29:a5:08:e8:33:6c:2f:37:45:9a:65:7d:
16:38:28:53:1f:97:52:64:32:8a:04:7d:04:03:bc:17:ce:76:
7a:bb:f9:14:da:d0:cd:df:d6:0e:79:93:69:00:2e:a2:93:37:
77:8f:53:4e:90:a1:c9:4a:ac:27:7c:c6:a0:6c:3b:e7:c5:72:
ec:df:c6:4e:b8:93:a3:eb:a5:8f:03:ba:bf:7b:a3:5e:a8:79:
4f:4e:2f:57:92:12:6f:15:6f:f9:b6:d4:76:06:57:b3:56:76:
a6:26:96:39:a3:c1:9d:56:30:02:0e:b5:df:af:d2:e1:87:08:
3c:d4:c8:0c:d9:ea:f3:99:94:3a:67:2c:b0:77:cc:06:eb:36:
8a:36:cd:6c:64:fd:c5:12:32:ed:08:aa:f5:de:d8:17:6c:76:
d1:21:3a:8f:fe:2f:53:c7:d2:71:67:da:ff:d0:7b:a7:81:51:
75:5d:4a:99:53:ef:13:96:5e:33:c2:84:14:52:a0:76:e3:9f:
f0:9b:dc:50:e8:c3:44:9a:e3:03:cc:24:2c:9a:dc:f1:ad:5e:
1b:42:3c:4d:79:6e:16:73:e8:14:b9:e4:48:a5:bb:db:d0:c5:
77:a6:75:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:14:17 2026 by rpki-client