Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
File: RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json)
Hash identifier: XQ8FEVZM5oG5NEvOEGDRN6ViDCG4uIdeyICIURJAym8=
Subject key identifier: 4A:08:5E:0C:6C:3F:F2:F2:66:9B:9E:AB:D2:41:70:7B:B4:EE:BB:E8
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial: 019D39416EFB2C4DC518978120931F3F09AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
Manifest number: 1057
Signing time: Sun 29 Mar 2026 11:01:22 +0000
Manifest this update: Sun 29 Mar 2026 11:01:22 +0000
Manifest next update: Mon 30 Mar 2026 11:01:22 +0000
Files and hashes: 1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: dGAl0wtcTXX+jZ8LYEPbO8hu+h9KbxOyX8GYTBww3KQ=)
2: c4pt8vUVaeXjMXnofvH8CstQg9I.roa (hash: JquKoOYBsn6huX/IMn7g4cc/ok8BfYvy/bpSr/C0iVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:6e:fb:2c:4d:c5:18:97:81:20:93:1f:3f:09:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Validity
Not Before: Mar 29 11:01:22 2026 GMT
Not After : Mar 30 11:01:22 2026 GMT
Subject: CN=4a085e0c6c3ff2f2669b9eabd241707bb4eebbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:2f:a4:f8:ec:9b:79:b6:4f:01:5e:13:9e:
30:12:52:93:67:1b:d4:24:3c:a3:db:56:98:8f:17:
31:12:d7:23:73:17:eb:3b:3d:3c:40:58:79:69:ed:
96:60:7b:4b:79:59:7b:52:f9:96:73:98:1f:8d:57:
ff:87:c6:a1:6b:25:05:36:8f:fd:e7:98:91:f5:69:
db:05:2a:fc:6c:c2:d6:40:2c:7b:32:04:cb:a3:7b:
57:3e:0d:0e:8c:22:fd:03:3f:c4:c4:9f:3f:cc:45:
6a:b5:b0:04:4f:2d:f0:8a:04:2f:a7:86:bc:f3:54:
53:cc:89:95:89:e1:46:b0:4b:0b:3a:d7:f9:c6:e6:
88:0c:c6:a7:1f:d0:96:69:26:06:ad:b6:60:0e:c3:
06:f8:37:6b:cd:5e:94:a5:da:41:4c:48:dd:24:19:
85:20:ff:8e:33:37:5c:1e:ae:d5:78:89:6c:59:d2:
4d:bf:82:aa:c3:44:72:f7:a2:c7:12:14:a6:5e:de:
2a:12:3e:a9:3a:03:f2:1d:0b:1e:cf:a8:44:82:13:
7d:12:96:d9:4c:9e:bd:f5:d0:5f:05:20:77:dd:c5:
3f:55:f4:af:8f:4d:ca:63:8f:94:4c:4f:32:9d:98:
af:1f:73:cc:b3:1c:42:8a:57:69:aa:c2:fa:01:f1:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:08:5E:0C:6C:3F:F2:F2:66:9B:9E:AB:D2:41:70:7B:B4:EE:BB:E8
X509v3 Authority Key Identifier:
keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c3:38:ae:c0:62:fa:25:13:1e:03:63:91:08:59:57:ac:ef:
be:2b:e5:5a:c6:ca:06:d4:17:7b:dd:46:ff:56:6a:44:09:c4:
77:b1:df:10:65:10:95:d6:7b:4f:7d:68:61:9b:7c:bf:5e:0d:
93:ab:fb:1d:f4:1c:bf:44:c7:7c:3f:40:0e:43:4c:d0:85:35:
d7:17:fb:83:80:c8:fa:d2:8e:99:20:f9:6c:37:53:00:3c:18:
af:8d:f3:9e:1c:11:a1:dd:dc:7e:a4:5c:a5:c4:c0:17:12:cd:
6b:16:ad:00:95:a0:21:1d:98:d4:93:b9:f5:3f:c9:fd:ff:70:
68:a0:ea:1f:f5:8e:14:67:13:28:79:a0:d9:75:36:b3:60:e4:
8f:a9:d7:af:f9:51:c1:28:61:f2:8f:90:c7:f9:29:7a:8f:a4:
5a:7e:e4:bb:01:b8:76:08:f8:84:bf:57:33:aa:08:b5:1d:e0:
48:27:36:97:59:c2:b4:f0:f1:0f:80:26:96:d7:9d:bc:a8:04:
95:b1:10:ca:2d:cb:23:02:f9:70:83:21:f5:5e:c0:70:f6:d8:
c8:43:17:72:96:f1:44:7f:a9:11:71:f1:a1:2a:34:45:2e:ed:
ce:57:97:57:3d:a1:70:81:d1:82:db:72:b5:af:a0:02:17:1d:
d5:fc:36:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:35 2026 by rpki-client