Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File: ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier: JFMPGuLDTfzxUTp3q9ucNd+azkJzrw9sBFbV7b72uyM=
Subject key identifier: 67:38:62:78:56:E2:4F:07:CA:C5:47:8A:77:87:87:37:47:F3:4F:0B
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 019CEC38A13BBE2209976ED1C0FF0461644F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number: 0B09
Signing time: Sat 14 Mar 2026 12:01:00 +0000
Manifest this update: Sat 14 Mar 2026 12:01:00 +0000
Manifest next update: Sun 15 Mar 2026 12:01:00 +0000
Files and hashes: 1: 5frQX9750HL3NN8-MyZHPLOJTsI.roa (hash: pxj83AtJMZvXD4c0K+PkZXGVzhxJMxFhP3iPQm4dFuQ=)
2: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: SpzwjBj3IC2GLwrx1hl8F+RNYtSpzHmTNr4NAnx4i1w=)
3: yzlJwvPmp_FWuAYFJVX7D34LL5o.roa (hash: oyzk/Lk1+iN0NJFMafNwk7yqhxfs0bRUTnktsAxu4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:38:a1:3b:be:22:09:97:6e:d1:c0:ff:04:61:64:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Mar 14 12:01:00 2026 GMT
Not After : Mar 15 12:01:00 2026 GMT
Subject: CN=6738627856e24f07cac5478a7787873747f34f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:dd:e2:c9:f0:b6:5a:de:c3:e6:83:03:cf:
b2:42:d4:65:b0:bb:28:4f:ca:40:32:02:8d:af:5e:
b6:ef:65:20:76:29:fe:89:01:20:28:2f:02:e9:a9:
9c:21:8c:fe:d4:d5:fe:c2:01:0c:c7:d1:b4:e0:e6:
61:9f:a8:be:36:84:ac:49:1a:d9:95:cd:bb:6e:18:
58:a1:57:e4:c0:76:68:f3:d8:31:68:d2:63:90:33:
d5:67:47:27:92:e5:b5:aa:d4:ba:f2:47:08:13:06:
5b:f9:a0:82:f3:47:51:c0:f3:79:3a:58:ef:bc:4b:
47:03:73:28:5e:c1:b4:49:c4:16:f0:cd:1a:5d:f8:
7a:05:7f:02:45:a8:e7:53:9a:9d:cc:ed:aa:e1:c0:
fe:6e:9a:23:a0:d6:69:08:a8:50:fc:47:42:da:72:
72:ec:43:06:63:02:fb:25:fc:9d:63:a4:e3:25:9d:
20:25:31:b3:14:78:26:09:15:a8:fe:c0:cc:d5:d6:
e2:09:26:2f:b1:d4:9d:e9:86:f2:dd:e8:ab:87:2f:
fa:77:ed:f4:9b:1b:c0:52:5a:c8:8e:56:a6:ec:70:
c8:46:b0:a7:bc:6e:70:f3:f0:b6:2a:6a:c4:5b:fd:
fa:de:52:c8:4f:42:46:b1:e4:59:00:07:8a:73:1e:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:38:62:78:56:E2:4F:07:CA:C5:47:8A:77:87:87:37:47:F3:4F:0B
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:72:f1:54:0c:d7:25:d0:4a:21:00:26:ac:f3:75:80:cf:78:
8e:0e:e5:b6:0a:d0:54:24:77:f4:f4:9c:a5:79:23:15:a5:a5:
80:9e:b0:af:ee:87:c1:26:06:dc:6d:39:d9:a5:ee:cc:61:55:
43:02:4b:02:82:ea:df:56:85:ac:93:ea:bc:ed:98:c4:32:95:
dd:96:04:69:cf:b8:f8:2f:c8:98:53:cb:c4:45:b6:21:bb:fa:
54:27:56:85:c7:cc:ba:7e:c7:31:f7:ed:43:4b:71:da:b7:7e:
0b:89:50:f1:6a:2f:be:ff:e2:f6:be:47:b3:69:3f:71:20:9d:
13:0d:84:34:0c:40:82:6f:35:94:b8:b5:96:2b:07:08:60:2c:
60:18:4f:c3:61:9b:8f:9b:90:2b:33:81:c3:d2:7a:f2:43:29:
0e:7b:cc:9b:a0:74:5e:ce:29:fb:b4:ee:b4:f1:27:38:3b:6c:
63:d9:42:85:e8:c9:06:8e:83:38:c1:ea:dd:b0:db:3f:2c:2b:
17:54:91:6a:07:6d:d2:88:d6:b9:67:a0:a6:3a:20:17:01:02:
b3:1c:84:ac:57:6f:1a:91:38:c7:d2:ae:e5:b8:ae:0b:e8:a9:
6c:cc:11:79:c0:bf:a1:a7:17:83:4e:ce:05:62:7d:84:5c:10:
7b:7b:b9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:19:55 2026 by rpki-client