Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File: 0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier: bua4ruhkS1RWhbc1xdvcwv//YrsDfJZG7J4t1olyufw=
Subject key identifier: E6:D6:13:14:BB:C9:B1:FF:D6:C7:CC:AE:C9:8A:A0:4F:1A:BB:F2:9D
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial: 019CDFC5F5D97CCC34C984F526CEF4105A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number: 056A
Signing time: Thu 12 Mar 2026 02:00:18 +0000
Manifest this update: Thu 12 Mar 2026 02:00:18 +0000
Manifest next update: Fri 13 Mar 2026 02:00:18 +0000
Files and hashes: 1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: 6+9i/yLqcqw/Mooesgj2ByIX2NQd7GrcOVgHa3G/U8g=)
2: qTWraqPBRkXUgfYW4gfB3AS-jm0.roa (hash: Rbt0ZTsq9hRwXO+cnDLn20WShDhAg5xFObZyVKiajFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:df:c5:f5:d9:7c:cc:34:c9:84:f5:26:ce:f4:10:5a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Validity
Not Before: Mar 12 02:00:18 2026 GMT
Not After : Mar 13 02:00:18 2026 GMT
Subject: CN=e6d61314bbc9b1ffd6c7ccaec98aa04f1abbf29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:9a:e0:3f:22:85:03:c9:9b:58:65:b3:00:
6c:e8:7d:9f:bc:44:13:16:d6:95:f4:e4:03:b0:16:
a6:3c:96:4a:0d:12:ec:e6:56:bf:1c:6c:b9:fa:21:
5c:1f:af:77:27:e0:c3:d3:79:e3:0d:5e:91:7e:8a:
1d:7e:6e:bf:e3:3d:e2:50:0b:f4:4a:4f:6b:2a:84:
23:f1:7b:13:81:29:67:13:cc:7d:6f:90:88:11:54:
ed:02:00:7d:e0:41:42:7f:69:46:37:5d:5b:f5:ad:
31:fe:1c:88:df:31:43:df:c1:00:1c:5c:91:a1:42:
78:63:53:81:37:2f:83:01:94:d0:0f:80:2d:06:17:
89:f3:29:d9:87:a1:cd:13:74:c4:68:7d:64:80:9f:
74:eb:33:95:c6:18:6f:56:1c:f4:de:b0:11:08:0d:
d0:d1:d1:02:f0:d5:01:df:b6:e7:01:6c:1a:56:d0:
ae:7d:99:fb:41:67:3e:be:6d:8d:e0:54:6e:8a:f3:
9b:25:2e:e0:38:af:b0:69:ec:32:86:44:44:44:b3:
f1:e7:9f:67:dc:1e:72:fd:af:be:84:6a:16:f9:2c:
2e:a2:32:3f:a9:ae:d3:dc:76:91:bb:6b:d9:b1:64:
a1:9b:b9:b8:57:98:4a:d4:01:04:02:6f:a5:1e:31:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D6:13:14:BB:C9:B1:FF:D6:C7:CC:AE:C9:8A:A0:4F:1A:BB:F2:9D
X509v3 Authority Key Identifier:
keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:45:cf:b6:6b:27:20:a0:f5:05:16:98:d7:74:c0:2a:d4:a3:
02:76:b5:77:04:1d:0d:09:11:52:f2:29:0e:f3:8f:8a:0d:d0:
4f:b1:64:56:a7:94:20:e6:17:55:3c:1a:50:b1:a7:1d:e7:72:
7d:51:9e:45:e8:42:f7:5d:4a:78:8e:6e:d2:5f:de:46:09:62:
83:54:99:c7:01:b0:50:ea:03:74:e2:55:75:29:94:dd:2c:02:
f4:b1:bd:e5:62:a5:86:b8:3e:37:33:05:d2:70:13:50:5d:19:
2b:6f:9a:41:ce:dc:76:a4:b0:91:dc:33:d1:72:90:07:bd:a4:
f9:22:14:29:a9:f0:87:71:7c:37:3b:ba:c2:f4:53:66:db:7e:
d5:f1:a6:87:48:ea:7c:51:23:27:3d:b4:3b:d6:1b:f4:51:28:
ec:bf:dc:8e:a9:21:9a:be:97:28:c6:13:96:b8:d4:d7:16:7b:
91:cb:56:d4:bb:fd:65:66:6b:87:f7:8f:ff:01:17:88:11:09:
6c:86:92:44:6b:f7:ee:9f:68:e7:d6:25:9e:83:a7:0a:6c:42:
79:c7:82:72:0c:51:2e:c4:a6:27:3b:68:2f:40:ed:89:24:13:
42:2d:59:45:cb:21:d2:b4:bb:24:86:d4:46:49:a4:2d:dd:d2:
12:63:d5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 12:32:24 2026 by rpki-client