Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
File: To25ZDiURsq8r3lBzRmDQsIzbdA.mft (raw, json)
Hash identifier: 0pIMzBybDdeTUTpmJ/xiz3etLqjabqWFTCFtIdevi9c=
Subject key identifier: CE:83:55:62:89:37:65:8F:AC:89:13:89:D3:D5:89:5A:53:F4:00:96
Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0
Certificate serial: 019D3AC23B44D1B3A4050EC944AD97BA5711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
Manifest number: 0A42
Signing time: Sun 29 Mar 2026 18:01:40 +0000
Manifest this update: Sun 29 Mar 2026 18:01:40 +0000
Manifest next update: Mon 30 Mar 2026 18:01:40 +0000
Files and hashes: 1: COE1l5AcJpUIj8VESfwwNIX_aqE.roa (hash: Xk4fQMZM2kqvaeEiNYmxxopzI51Y0bhYgcMl+wQt2Ak=)
2: To25ZDiURsq8r3lBzRmDQsIzbdA.crl (hash: zWe/zTsTOeoFH86s1ZOPoPS04skCiPynrPHHY+qXo90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c2:3b:44:d1:b3:a4:05:0e:c9:44:ad:97:ba:57:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0
Validity
Not Before: Mar 29 18:01:40 2026 GMT
Not After : Mar 30 18:01:40 2026 GMT
Subject: CN=ce8355628937658fac891389d3d5895a53f40096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:11:a8:b9:bd:0d:00:ec:8c:f3:46:8d:b2:
5d:45:c7:31:76:a5:20:9b:06:c5:4c:c7:63:ba:b4:
5b:bd:dd:c3:63:0a:06:c3:36:a1:41:69:21:10:60:
0d:70:7c:e3:36:f2:96:1d:e4:cc:c5:00:be:37:c8:
f9:56:22:92:19:c0:c8:1b:25:06:45:78:30:51:f4:
ac:50:96:04:23:01:85:27:39:37:aa:bd:da:b0:04:
f9:73:f2:03:9e:56:6e:df:8e:92:39:1c:22:88:ba:
ea:1c:20:81:65:61:6c:3c:da:85:3b:6a:9e:84:33:
9c:5a:99:d4:84:06:0c:d4:1d:a6:af:81:e7:a5:96:
67:5f:42:13:b9:40:30:74:17:ac:0f:17:4a:3c:d1:
8e:1c:d6:f8:a8:0e:f4:9f:e5:91:35:e0:9b:af:dc:
2b:74:5e:64:79:51:7d:79:56:48:f1:db:fc:59:f6:
c7:a1:5f:da:3f:d4:20:66:45:76:37:c5:c6:31:23:
a1:52:ef:80:e7:e5:8a:0a:b5:4f:a0:5f:4a:76:6b:
c5:1d:4a:0f:57:db:fa:ab:b8:f7:6a:50:01:6c:e4:
4e:22:83:a6:91:fe:e9:f0:d0:58:c7:42:10:f0:bd:
90:83:01:2d:11:23:2d:f2:72:5a:0c:fa:34:40:e2:
c1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:83:55:62:89:37:65:8F:AC:89:13:89:D3:D5:89:5A:53:F4:00:96
X509v3 Authority Key Identifier:
keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d7:66:3f:b9:9a:f8:67:06:72:bc:75:ed:b7:94:f2:5e:9d:
06:2d:94:27:93:f2:d7:07:59:0a:45:0b:66:88:4d:05:26:cf:
ac:a9:48:b0:95:15:4a:43:a7:b1:fb:c4:5d:28:4b:52:c8:5a:
8c:b8:b1:2b:dc:f5:8d:31:a2:e0:4c:4e:45:ce:16:ca:30:ed:
09:73:62:2d:0a:84:19:8b:4d:a6:73:e9:4d:50:dd:8e:c7:2a:
7a:1c:a7:3b:f2:4a:ea:c9:2c:94:89:0f:46:29:91:09:65:24:
75:2f:c0:f6:73:46:57:75:77:c5:70:46:e7:f4:7e:3d:63:ee:
9b:ab:25:2b:0c:6a:70:9a:11:e1:7c:f4:ae:ca:20:21:26:51:
f9:be:94:a1:08:44:4d:ca:02:fe:84:52:68:41:e9:98:c0:f7:
ee:8d:4f:3c:b9:f3:58:c5:b7:ba:57:1c:dc:83:1b:df:31:b2:
35:34:f0:f3:fd:e6:2f:38:25:d6:db:2d:78:aa:2d:3b:e3:2c:
87:c4:96:17:25:be:e2:fb:f0:6c:40:42:94:bd:7d:1b:c1:a9:
6d:08:9f:7a:6e:3b:7a:74:4b:b8:53:4b:f7:a7:26:4b:49:59:
ef:e9:01:91:96:f5:f2:9c:0e:2c:24:54:05:0a:ec:ee:15:4f:
60:32:b7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:08 2026 by rpki-client