Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
File: rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft (raw, json)
Hash identifier: 7eeZ0Dt4pKcVcYIyRNWHwthvJRohhK8xPnGfKQ1eC6o=
Subject key identifier: D0:3F:0C:26:BD:BC:BC:20:F9:68:62:1F:C4:E8:73:46:C9:A9:8C:40
Authority key identifier: AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
Certificate issuer: /CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Certificate serial: 019D38D3655B034EBF3D0B4E0ADA88ECB654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
Manifest number: 1255
Signing time: Sun 29 Mar 2026 09:01:11 +0000
Manifest this update: Sun 29 Mar 2026 09:01:11 +0000
Manifest next update: Mon 30 Mar 2026 09:01:11 +0000
Files and hashes: 1: rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl (hash: rYkF8vL4GMNbrYpXsgg7wNgvIcEqoe2FcxzTkpWUqgI=)
2: vKOYOseCMmqNIjMxRhwMUDEk7WQ.roa (hash: pJtwgYaoF3xi2Mwr73dINom7FFrcw02MnipnSTRfmM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:65:5b:03:4e:bf:3d:0b:4e:0a:da:88:ec:b6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Validity
Not Before: Mar 29 09:01:11 2026 GMT
Not After : Mar 30 09:01:11 2026 GMT
Subject: CN=d03f0c26bdbcbc20f968621fc4e87346c9a98c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:3c:15:88:f9:39:fc:f6:05:57:b8:a6:f8:
c8:85:3e:1c:20:f3:cc:be:41:4a:7d:10:f1:01:f1:
b4:40:67:9d:93:17:b5:bf:c9:8e:16:0f:4c:53:b6:
40:f0:47:40:03:e2:a9:11:19:4e:ad:d9:62:8a:a2:
65:b5:41:d1:91:9d:a1:89:a4:28:1b:d5:7e:f7:13:
33:93:bd:6e:83:42:ed:b6:3c:3e:52:41:b2:36:3d:
ed:9b:96:83:a7:25:18:12:07:51:54:a5:77:e1:3d:
df:bb:b0:f2:3c:4c:4d:aa:a7:b2:c5:f1:e5:1e:22:
58:d6:87:94:e4:5a:de:15:3d:7c:77:c3:db:5c:c8:
be:ef:05:ca:9c:0d:30:48:95:b6:d5:d8:79:da:7c:
d7:d9:a8:18:8c:bc:60:a2:97:df:80:c5:b6:28:c7:
ef:46:73:27:15:6b:64:91:e0:ca:c0:9f:97:6b:cb:
fa:c4:b7:de:a3:42:9c:11:2d:b0:c1:32:f7:b2:4e:
d5:90:6c:21:ca:21:c2:63:c6:78:f5:02:9d:e9:88:
00:04:08:4f:17:d5:4f:70:60:88:88:0b:be:1a:a5:
ee:16:43:38:fa:49:95:91:cf:d9:f6:f1:5a:32:67:
2e:b3:05:02:79:26:53:2d:47:3d:ee:26:e6:bd:20:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3F:0C:26:BD:BC:BC:20:F9:68:62:1F:C4:E8:73:46:C9:A9:8C:40
X509v3 Authority Key Identifier:
keyid:AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5b:48:52:cc:fc:27:08:3f:74:ef:a1:8f:66:4f:50:22:8d:
57:a5:7c:3b:07:d7:e3:73:0f:d2:e8:c0:1c:68:94:87:dd:74:
1f:32:10:60:4c:91:6f:be:ce:4f:96:d2:9c:03:98:09:6d:16:
1f:2d:9c:e2:d4:1f:0b:9d:e8:d6:79:b8:fb:7e:67:de:bc:83:
b8:4d:20:4d:62:67:29:36:e9:f2:6b:c5:ce:5b:4a:03:16:4b:
ce:66:6b:68:af:5d:93:b2:80:6e:24:b3:00:a6:7b:d2:cf:85:
e2:95:86:91:36:8a:b8:6d:23:f7:29:e5:32:2d:98:ef:42:12:
51:f4:2b:a5:8b:8e:71:e1:ff:b7:2a:e7:3d:3b:34:91:94:17:
cc:bb:56:bd:ca:49:26:84:26:9b:cd:6b:e0:8c:af:c6:9f:bc:
56:6b:0d:18:05:d5:34:33:28:fb:a0:5c:c8:c7:dc:92:45:ca:
8c:2f:4f:2b:5e:3f:45:39:e3:24:ed:f0:35:76:7b:04:ce:ed:
cc:64:48:14:5c:54:24:48:ac:88:18:8f:97:0d:2a:4f:9e:0f:
6c:21:99:7f:7b:50:af:db:40:60:49:e3:c7:8f:df:64:00:96:
51:be:3a:6f:a2:01:a7:c0:79:96:3b:24:74:f0:b5:e9:27:26:
c8:aa:f9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:14 2026 by rpki-client