Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
File: RpNQgcd6h0XntiuTuC2iliN5suI.mft (raw, json)
Hash identifier: ObyPNENr6l6SbgFLEiI1SCOKlkylHA7aR/f6wohfonc=
Subject key identifier: F1:C2:A4:D1:5F:14:64:5C:73:F7:81:19:F2:13:1F:06:39:F0:17:3D
Authority key identifier: 46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
Certificate issuer: /CN=46935081c77a8745e7b62b93b82da2962379b2e2
Certificate serial: 019D37C0882A90CE9577A369409676174CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:57 +0000
Manifest this update: Sun 29 Mar 2026 04:00:57 +0000
Manifest next update: Mon 30 Mar 2026 04:00:57 +0000
Files and hashes: 1: RpNQgcd6h0XntiuTuC2iliN5suI.crl (hash: NrvGKMjCN60WY0WiLj18L1PlhJm+UBTCpANJvFMXQqc=)
2: xUDE19p7SjFfDj10MxGNe3_Ja54.roa (hash: vMVrflsThb97UBO8tlivD+a8vKYPaOtZZKiO7UktvfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:88:2a:90:ce:95:77:a3:69:40:96:76:17:4c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46935081c77a8745e7b62b93b82da2962379b2e2
Validity
Not Before: Mar 29 04:00:57 2026 GMT
Not After : Mar 30 04:00:57 2026 GMT
Subject: CN=f1c2a4d15f14645c73f78119f2131f0639f0173d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:d6:a6:36:de:d3:1d:bc:df:d4:bd:57:c7:
64:70:e6:35:d0:8c:0a:29:b2:a6:e7:0a:db:0d:e5:
7c:8d:ab:03:8b:7f:08:87:e8:8f:71:c6:75:3d:fb:
29:53:1e:a2:a7:f0:8f:7b:bf:a2:62:47:ad:0b:a7:
d9:20:4a:1a:6d:8f:0a:95:79:83:b1:54:75:0b:c2:
96:56:82:28:8d:e5:6a:39:8b:d4:58:f8:c3:5a:c3:
ce:85:8c:3b:63:46:d3:fb:5f:50:ec:39:9e:5b:ae:
ce:5c:09:fa:e5:34:f6:ad:55:f3:9e:fe:4d:9e:76:
f5:04:5f:6b:d1:70:ea:b9:c1:dd:b1:63:9e:2b:b4:
ad:8d:ec:3b:3e:29:f1:f6:3e:5e:0c:43:31:c3:c6:
4b:aa:5c:7e:f6:cd:ae:e7:e6:2c:f6:56:98:e4:0b:
50:f7:08:24:fe:d0:85:1f:d5:67:fe:4c:d2:02:b5:
42:01:c3:b4:43:8d:fa:ea:8f:64:55:5e:b0:0d:04:
98:95:b8:63:d1:ed:af:44:17:ff:56:de:cb:8a:42:
3e:e7:fb:4b:ff:c9:a4:83:de:a7:71:7b:5d:b4:97:
2e:06:45:3b:68:f1:8e:47:20:bd:4c:10:af:cd:bb:
e6:ee:9c:fa:0b:96:c2:a0:5e:38:82:80:d6:9d:a9:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C2:A4:D1:5F:14:64:5C:73:F7:81:19:F2:13:1F:06:39:F0:17:3D
X509v3 Authority Key Identifier:
keyid:46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:62:c0:53:62:4c:de:1e:a4:1c:06:fe:63:a9:0a:3d:19:dc:
21:11:3d:70:fb:6f:4a:2e:17:74:e1:55:7f:64:17:91:83:4e:
7d:75:ed:49:41:85:45:54:a9:b8:ec:99:03:a3:c5:fa:0c:0f:
f4:8a:95:ae:fb:98:ad:93:8f:18:65:3b:ec:7c:01:4d:8e:72:
82:9b:14:90:b8:e6:07:62:1a:68:60:f6:73:8f:71:5e:b3:b1:
c9:1a:4b:6f:f9:24:5e:9d:f1:6a:09:f9:1c:d6:fd:e2:35:62:
d8:7f:90:6b:16:e4:87:88:5e:5a:80:6e:7a:82:85:0b:78:42:
89:bb:6f:77:43:8d:ce:6e:25:fd:b6:05:d0:3e:3c:30:29:0a:
91:6e:b6:c2:32:c4:c5:b6:a2:b2:d6:e0:86:17:8b:ae:a1:b6:
de:ed:e7:2c:13:3e:a3:86:d2:e8:b9:11:cc:d7:ad:92:aa:3b:
30:e2:4e:06:1c:5b:d1:bd:e2:9b:14:c7:a7:f0:94:8f:b9:eb:
23:59:61:0d:18:80:4e:80:d2:cd:7b:fc:b7:b8:ce:d7:44:21:
92:ee:57:19:2f:b2:11:63:a5:70:88:61:c4:0a:39:d5:b8:e7:
aa:b0:8f:8a:3c:3c:b1:4c:77:f8:71:f5:45:7d:e2:85:c7:4e:
b8:25:05:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:38 2026 by rpki-client