Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: T5jg0IzrhDrN2/bkbzoSaif8ng4FLaa3Vq+iKk4Rlkg=
Subject key identifier: C0:53:35:46:9B:EA:84:D8:3D:EC:90:18:66:A8:13:69:08:EA:07:AB
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 019CE410D1099262BED321CC10BD2EC70E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0CCE
Signing time: Thu 12 Mar 2026 22:00:33 +0000
Manifest this update: Thu 12 Mar 2026 22:00:33 +0000
Manifest next update: Fri 13 Mar 2026 22:00:33 +0000
Files and hashes: 1: OTZcNe4faH1uSoNvCZiXYbKK1ds.roa (hash: uIfg5U+1EbmCjtFgcikAr/bmU9dQajvTUZ3MYk7/2xU=)
2: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: PEw+geZlmXtqLTEWYHMh9n/ICYmPSnZgZZrEszRoqOg=)
3: zRiHFdGjFdtLfm7gsvy2-5E0CpI.roa (hash: LIfEP9SyJvvx/mP2z1DtCTkpaRU2RlrQg1/zTilnakw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:d1:09:92:62:be:d3:21:cc:10:bd:2e:c7:0e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Mar 12 22:00:33 2026 GMT
Not After : Mar 13 22:00:33 2026 GMT
Subject: CN=c05335469bea84d83dec901866a8136908ea07ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:fe:89:3e:cf:df:45:c5:bf:05:7e:29:b8:
1f:e9:26:77:d7:7b:ad:00:f5:da:87:71:da:f4:11:
25:be:46:c5:17:63:1c:1a:9c:3c:dc:84:66:b3:24:
72:df:bd:41:e7:88:6a:40:b7:38:d1:71:80:be:31:
92:cf:94:81:2a:db:d9:4d:dd:54:e0:94:ae:16:05:
c6:e9:53:1a:92:13:1a:c6:7f:b4:f4:88:5e:ba:26:
95:ec:ae:18:f4:46:c3:cb:00:73:1f:39:99:2e:b5:
6c:f3:fe:74:17:3c:44:c0:ca:d6:5f:00:48:eb:58:
91:96:68:65:a3:90:33:7d:d2:0c:2f:ce:f1:92:85:
de:20:56:55:3b:75:27:ec:db:61:45:53:3d:ef:56:
0b:3b:22:66:26:7c:a8:9c:7b:94:24:7f:0b:6e:ba:
86:67:3d:49:67:52:ad:98:c1:2c:3f:60:af:79:a7:
f0:22:70:a1:d7:8d:af:9e:99:b6:42:62:ea:47:b4:
5e:e0:ec:cf:f7:6a:e6:54:ff:04:0f:bf:36:55:61:
b3:f9:31:a3:9f:2b:c1:90:e4:cd:5d:ee:85:99:8f:
1f:9c:95:ff:21:cc:c1:c0:06:e1:a2:4c:c1:8b:cd:
dd:3a:75:85:a1:88:da:1c:a6:44:87:95:61:79:e7:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:53:35:46:9B:EA:84:D8:3D:EC:90:18:66:A8:13:69:08:EA:07:AB
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:98:00:83:f8:6e:2a:d6:20:cc:64:47:9c:ed:6b:d8:ee:66:
41:a8:42:51:b1:c8:8e:b0:de:e6:c1:9e:c9:a6:0c:83:6e:62:
39:5a:3a:4a:75:06:96:27:54:23:ee:92:04:60:97:eb:80:63:
b3:82:8a:da:45:a1:03:39:d4:2b:5d:16:1c:de:e1:eb:f9:bf:
6e:28:0f:8d:d8:e8:0f:a7:9d:54:e4:fd:20:50:f9:cc:3e:53:
ee:03:1b:9f:bc:3a:dc:7e:3c:b7:6f:11:1e:80:9c:0c:87:a3:
73:a6:e4:45:29:f8:56:61:b3:6f:09:ed:a7:4f:6d:ce:37:25:
fe:a9:a2:c0:28:8f:c4:6a:28:50:1c:cd:4a:6b:b3:49:5d:cb:
ce:0c:ba:08:65:55:d1:2a:80:8c:f2:3a:80:b3:05:5c:77:2a:
75:7e:3e:72:09:21:db:1e:a1:f1:b3:a0:b4:62:c1:e6:9f:9e:
e7:91:19:4d:0f:b7:3b:17:f9:c9:04:5d:c4:db:e0:31:c3:ab:
4c:71:06:b3:22:ac:ca:5a:c7:7c:f3:08:04:fe:0c:8b:d1:8b:
c3:23:58:58:58:32:22:db:69:f4:2e:dc:fc:e8:08:1f:bd:53:
a3:5b:6d:b1:c7:0b:ca:3e:ef:4c:c9:a9:3a:2b:a1:1f:60:7f:
ec:30:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:48:12 2026 by rpki-client