Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
File: R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft (raw, json)
Hash identifier: 6O1ryClHSq+9Tz+30/ro6bPFQnsh1KlzBqUef11Grsk=
Subject key identifier: A1:E3:29:C2:D4:5F:9B:8B:3B:F4:F8:1D:23:CA:E2:3B:65:BF:25:AD
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Certificate issuer: /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial: 019D3941268E6E94DC949E1B3D329A860CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
Manifest number: 12DC
Signing time: Sun 29 Mar 2026 11:01:04 +0000
Manifest this update: Sun 29 Mar 2026 11:01:04 +0000
Manifest next update: Mon 30 Mar 2026 11:01:04 +0000
Files and hashes: 1: DpOMCYeoEFCfPd4BCOC7ze9jGAQ.roa (hash: OOgXzfysjVkL+7heZlt7KwaUVEvk1p9KU0fRwZotWCk=)
2: R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl (hash: DpOXRNdCNRkI45zqdrhq71zwc7mMWlyBcU0Nc43vcz0=)
3: X_ToRWHY2cWSKfb50-DFaa8o0oM.roa (hash: SzgSGTl4m6DpdjK/TPbLIKkkCLRq126cbU6uLGRTydk=)
4: XuSlumrwrkZbRH5BoN1dVcCYWOY.roa (hash: VIFbEGJSRhE0l9Itky/zbl7aHo5M6a4eOekzZMGZzxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:26:8e:6e:94:dc:94:9e:1b:3d:32:9a:86:0c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Validity
Not Before: Mar 29 11:01:04 2026 GMT
Not After : Mar 30 11:01:04 2026 GMT
Subject: CN=a1e329c2d45f9b8b3bf4f81d23cae23b65bf25ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:24:e4:81:73:5d:83:5b:0c:6a:19:44:88:
a2:fd:dc:b2:26:13:1e:84:1b:29:98:53:88:ca:a6:
ad:15:83:5d:c1:15:4b:31:b4:5d:15:15:56:b9:34:
a4:00:d6:12:54:67:49:10:ce:fd:ff:82:fa:a7:a6:
cf:40:0a:31:76:bc:01:ca:12:31:8c:22:81:7f:e4:
cc:74:6e:42:9a:30:98:a6:80:83:75:b0:8a:b7:49:
03:67:de:68:0f:ba:aa:23:09:b3:d2:c3:76:25:3e:
d2:9c:ff:51:9a:24:90:b7:05:9a:1a:e4:92:29:6f:
75:00:1f:b5:59:49:a3:98:f5:9c:e6:c0:4d:ad:91:
1e:83:9c:1f:72:d8:35:88:67:bd:b4:8d:7d:7c:29:
7e:94:d2:6f:f5:42:2d:53:e7:d4:68:25:8b:67:12:
89:63:63:c4:38:fc:26:e1:27:cb:46:bd:b1:67:59:
e5:21:a6:c3:fb:17:22:42:54:05:1c:f3:89:55:e3:
9d:d6:b0:69:0f:c4:67:76:8d:1d:06:c5:2a:8c:d1:
9f:ae:1c:63:4f:af:c9:96:cb:55:68:c0:4c:0a:b6:
15:8b:4e:d8:10:54:8a:95:4e:ef:77:c1:e5:39:ae:
7d:36:e8:f0:50:94:f8:34:d9:12:fc:2f:11:ce:21:
80:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E3:29:C2:D4:5F:9B:8B:3B:F4:F8:1D:23:CA:E2:3B:65:BF:25:AD
X509v3 Authority Key Identifier:
keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:be:cd:7e:66:dd:5f:a1:89:a9:e1:34:7b:b8:e5:47:9a:40:
50:0a:91:51:5e:b6:40:40:2f:8f:63:d3:53:64:a5:3a:10:d4:
a6:6e:1d:9f:14:ca:64:ee:d9:e9:80:38:17:2d:45:e1:db:60:
24:6d:38:89:7b:a4:8c:af:0a:20:79:8e:e4:fc:84:2e:8f:79:
5d:6b:29:53:4e:d2:69:f2:64:62:11:a7:26:64:41:80:c3:b7:
47:df:fe:5e:fd:bf:75:cc:0a:a4:8e:2b:66:14:2d:24:3c:14:
94:67:9a:3c:af:85:00:fd:d7:85:0c:4d:83:9f:58:fa:c4:af:
b6:51:8e:bb:bd:ea:38:93:0c:48:76:6b:25:ea:04:89:c7:b1:
d4:13:20:28:09:76:99:6d:03:5f:fa:13:eb:50:23:d9:5f:aa:
7c:21:de:76:7f:8a:0f:af:25:52:90:66:ce:22:20:ce:d4:d7:
19:4b:0d:86:e0:c6:ac:50:d4:c7:3c:b8:cc:9f:f5:11:8a:53:
a8:f9:e4:e0:92:c7:9a:a8:41:09:fb:52:f1:ed:9e:76:f1:98:
a1:ea:f7:cf:61:4b:e3:3b:e6:e4:d8:05:02:d5:d3:1e:e1:3a:
f8:9d:74:f9:59:af:00:76:d0:d2:40:20:7e:69:4b:fb:94:1f:
10:11:8a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:10 2026 by rpki-client