Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json)
Hash identifier: 6unqhjLIm/ez1Wqx+/+szoGcYW1MY9/a9ADfL/MUF3o=
Subject key identifier: CD:D8:64:73:61:A4:DC:6C:3F:C7:D7:19:55:8D:C0:9C:60:73:3C:65
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial: 019D3940926DD5386D32F29911D79DA2936E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 11:00:26 +0000
Manifest this update: Sun 29 Mar 2026 11:00:26 +0000
Manifest next update: Mon 30 Mar 2026 11:00:26 +0000
Files and hashes: 1: 40MEQ_c5MiDjeIZ7q43bI9wM90k.roa (hash: ELdX8WZ/ccLW8SSZjkL2cwPjtp0f+jq2mrorQX0hzwQ=)
2: 71hLP2iLb16Ja7jTFMHRm2jnG4s.roa (hash: uX7PtYBV/V7p3RQFDa+MhX5C5sTxOsiUcDeuAHVj/vk=)
3: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: Kgkf6XKOlm3KpIdsaCw0Hg6j3PFtwW2GkC5h6XpHQRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:92:6d:d5:38:6d:32:f2:99:11:d7:9d:a2:93:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Validity
Not Before: Mar 29 11:00:26 2026 GMT
Not After : Mar 30 11:00:26 2026 GMT
Subject: CN=cdd8647361a4dc6c3fc7d719558dc09c60733c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:25:00:39:a7:dc:3e:30:e4:d7:bd:cd:77:
c4:1e:42:88:14:92:c1:45:ce:a0:4b:5d:95:64:ca:
c4:ed:32:66:f1:7a:46:c1:70:d7:67:bd:9a:35:53:
ec:7e:3e:3c:f0:72:36:c3:ce:de:e7:48:5e:ca:b3:
fa:52:23:c5:39:9a:81:be:88:20:12:e3:1e:19:45:
f0:c1:6c:f7:1c:e4:ef:ba:78:ac:80:29:23:2e:e5:
84:b0:71:bd:d0:32:a2:77:95:68:af:11:b0:92:33:
58:33:2f:94:15:66:0b:27:c2:22:ca:ac:30:bf:a4:
84:fd:79:8f:6e:49:55:43:ce:b9:3a:07:a7:68:a5:
38:b7:66:80:83:c8:17:99:64:aa:52:20:c0:9c:34:
5b:b2:74:95:ec:2a:0e:b5:c4:4a:65:69:df:f6:ae:
41:c2:92:bd:ac:f6:dc:56:b3:ae:c4:6f:00:5f:76:
4e:f9:8c:54:15:d1:f4:3a:c4:ad:36:b0:60:24:9d:
91:c5:c3:48:70:f6:18:ce:6c:23:b1:db:15:2c:e5:
e9:10:ca:8e:f9:c0:b3:94:0a:01:e7:d7:6f:d8:a2:
af:4c:5e:07:35:b8:ba:be:73:7c:97:69:41:e6:b8:
84:d3:3e:86:59:b7:d0:9f:6b:2c:ac:de:a7:5f:d3:
2b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D8:64:73:61:A4:DC:6C:3F:C7:D7:19:55:8D:C0:9C:60:73:3C:65
X509v3 Authority Key Identifier:
keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d2:b4:a7:03:35:18:12:0e:29:04:8d:46:20:3f:d0:89:58:
95:40:7c:11:8f:a9:1b:d8:9b:66:46:27:bd:8e:9a:03:b3:7c:
8b:83:73:35:45:eb:ac:af:ea:21:13:6a:60:81:3b:e6:ad:df:
4e:59:88:c7:14:73:c3:e8:f3:57:f5:60:f7:ef:e4:6d:17:a1:
94:68:b6:ee:1d:f7:57:ff:b1:ba:c2:6e:89:af:4c:80:2c:8b:
b7:cc:e6:87:34:15:e8:04:68:90:b0:0a:b2:52:a0:11:ca:d2:
da:8f:b8:ae:d4:9b:24:9a:2c:64:c6:db:bc:f6:11:dc:2f:8c:
bd:2f:8d:44:76:9a:bf:fc:35:85:52:ed:0c:3e:2d:84:de:b3:
5f:b8:c5:3a:80:2a:01:4b:41:a7:05:38:0e:7d:eb:e0:8f:35:
8a:24:a6:74:c2:51:8a:4c:8f:74:3e:03:d9:03:67:e8:c8:b5:
a8:0a:97:02:25:f5:cc:90:a8:98:8e:78:c5:82:62:3d:38:00:
70:2e:92:88:5f:7e:71:4a:a5:33:f5:53:3f:6b:61:ef:24:c4:
ae:cd:a5:5c:51:a0:34:ec:a5:21:f9:5d:ae:fe:d5:04:4d:57:
dc:fc:e1:42:84:49:9c:fb:0d:45:7d:0a:13:5a:d5:0c:84:f5:
72:00:0e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:29 2026 by rpki-client