Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: 0yifYf4d3tA5LZSStWYL/BJSYz+CN9APgCqVZujsFUM=
Subject key identifier: 0B:EF:0D:5C:45:E3:6B:95:C5:04:2E:51:56:F9:A3:7B:D0:42:8D:A6
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 019CEF395BC95D1CF82339C745E16010AC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 15AF
Signing time: Sun 15 Mar 2026 02:00:39 +0000
Manifest this update: Sun 15 Mar 2026 02:00:39 +0000
Manifest next update: Mon 16 Mar 2026 02:00:39 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: eCyk225OpAp3q3xyQinN8BXAnIH58W4ytiYOD37o7ug=)
2: HXOFYv-072FsOVg35mkckEgbyio.roa (hash: rr27UIRFNz1qEQQUakpKnuloBOEhVERRXmaajk2GDbc=)
3: iCcCouY1S-nB4LsSEbuN21LdER8.roa (hash: b4tzlX7SLxO9i1S2FBRMsymp/F3ncDEjzvJear130vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ef:39:5b:c9:5d:1c:f8:23:39:c7:45:e1:60:10:ac:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Mar 15 02:00:39 2026 GMT
Not After : Mar 16 02:00:39 2026 GMT
Subject: CN=0bef0d5c45e36b95c5042e5156f9a37bd0428da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:25:69:58:d8:fb:1d:74:46:33:1f:ff:f5:79:
f4:b4:11:33:15:44:f9:93:87:a6:0d:03:d3:c8:3b:
46:fc:19:fd:a8:3e:68:c1:bb:cd:a2:8c:e2:c3:a0:
a7:e1:93:8d:3d:73:d3:7d:7c:86:a2:c9:b4:9d:e5:
ee:40:7e:a3:c8:6b:8a:44:02:0c:26:b0:b5:6a:4d:
c0:94:a7:4b:95:18:f6:71:b4:50:2b:74:d6:c5:4d:
f3:fd:20:a0:16:53:f4:5f:8e:d5:12:1b:e9:b8:db:
ad:33:81:21:eb:cc:db:19:e1:03:6a:48:d4:f1:54:
20:83:fb:42:8a:1f:59:f7:d5:d3:cd:a8:f8:e3:2c:
b7:e3:ef:9a:5d:63:ba:12:7b:7f:b7:20:ad:86:e6:
ae:ab:a0:9f:b8:00:bf:d3:0f:9a:ea:2c:dd:61:b8:
b8:c3:bf:94:10:7c:99:22:59:4e:38:18:bd:72:09:
e1:0a:70:7d:d2:52:4c:95:e5:a0:dd:05:a3:ad:dc:
c1:63:23:25:a3:b8:31:32:c1:70:d3:55:47:82:af:
06:26:28:fb:ef:65:8a:24:10:a5:a5:03:bc:aa:f7:
ef:9b:29:a3:45:9a:0b:e9:5b:e1:b0:2b:c5:7f:c6:
b6:1e:3a:dc:94:df:d5:d2:fb:15:d3:47:48:9e:38:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EF:0D:5C:45:E3:6B:95:C5:04:2E:51:56:F9:A3:7B:D0:42:8D:A6
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:99:a2:2a:72:8e:6a:ea:09:cf:e2:01:c8:21:5e:ce:dc:46:
32:6d:7b:15:01:50:3d:b6:e9:33:ec:71:19:77:48:a6:9d:2c:
f9:de:1d:53:2b:c8:42:cc:6e:44:b3:c9:ba:d2:24:8d:a5:06:
be:d1:d1:4b:e8:12:01:0c:68:ce:de:26:67:87:b6:c5:f9:a6:
01:f0:64:0f:bc:19:63:25:5c:95:0e:80:ac:65:9d:3d:7d:4b:
79:d0:de:16:4c:4f:f5:8a:1d:a2:5a:7b:ad:e2:6f:2d:a9:df:
95:75:c9:cf:75:1e:06:6c:b0:b2:9d:3e:a1:54:b4:8d:1b:b7:
48:70:cd:ac:9b:c7:16:e7:6d:28:48:5d:36:0a:e1:45:3c:7b:
b2:30:db:63:34:3f:45:e4:fa:fe:55:ab:57:29:75:08:a0:f0:
0d:48:14:94:b5:00:4f:90:d3:22:06:09:7d:83:3c:70:e6:25:
35:28:63:b2:92:1e:f2:8d:a0:ca:d0:a4:c6:1e:74:88:7a:8f:
83:15:3a:c5:6c:87:ef:63:10:10:4b:1b:c3:61:48:f6:16:66:
d8:f1:4a:e4:8b:19:34:c2:32:23:a7:4c:fd:fb:9c:e6:e2:8f:
25:52:c0:77:e5:ec:d1:aa:6f:8f:de:ee:4c:b7:90:0c:c4:70:
0d:56:32:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 03:21:00 2026 by rpki-client