Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: v1QAPdACGHb1b8IuGW8HB1Euk/BNCzKI7YjmAC+g2oQ=
Subject key identifier: F1:7C:CE:5F:B9:61:28:77:B2:23:62:45:CD:15:5E:F7:D7:8E:C9:92
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 019D382DCD026D7913085C1322D356079A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 11A4
Signing time: Sun 29 Mar 2026 06:00:18 +0000
Manifest this update: Sun 29 Mar 2026 06:00:18 +0000
Manifest next update: Mon 30 Mar 2026 06:00:18 +0000
Files and hashes: 1: 2-wV63-kJnEb6lIWdAkjLbifdYs.roa (hash: VLWBTHr0EzH/3xH/vK+1IGsHE6wqxsKYJ6Bzof/M4JU=)
2: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: sBhomVpSqqFFajcfTscAHkceEeAr9FxgtmkudS7vJLs=)
3: ZU9seCnxefzljVm0zuNsOk7GIDQ.roa (hash: /DOENfB26ckd4WqAOCfSHmslCQF/eXd4V7OPNLLt9Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:cd:02:6d:79:13:08:5c:13:22:d3:56:07:9a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Mar 29 06:00:18 2026 GMT
Not After : Mar 30 06:00:18 2026 GMT
Subject: CN=f17cce5fb9612877b2236245cd155ef7d78ec992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ba:7e:45:34:52:ab:bf:58:73:e6:9a:32:bd:
8d:2d:18:8e:ea:5a:30:99:5a:d2:58:0b:89:3f:65:
ec:5a:88:32:ea:16:65:a1:f4:e3:72:11:7f:b7:49:
eb:04:8b:1e:93:24:77:66:f6:06:a6:83:5d:9c:61:
4b:60:55:5e:a3:bd:05:da:d8:74:a4:00:a4:93:e3:
7d:7f:f4:aa:40:14:f4:93:48:84:96:48:53:40:0c:
ca:bb:e6:fe:32:56:1b:19:51:ec:7f:26:50:c6:fa:
34:40:ec:fa:d1:48:41:60:28:bd:d8:fa:a3:d8:1b:
c8:3a:fa:09:53:b8:2c:2d:1f:c2:6f:48:4e:31:bb:
40:9a:ee:37:83:45:fd:dc:1f:8b:fd:8b:9e:26:c8:
e8:93:65:ae:dc:84:6b:3f:5c:2a:a3:30:b9:24:7b:
5d:20:e4:be:69:80:b3:e4:52:af:4f:52:48:c7:12:
bb:a7:2f:cd:07:a0:64:6f:7e:22:ec:38:41:9c:27:
df:b2:b2:e9:69:48:40:aa:62:fc:32:b5:03:c8:40:
3c:8f:2a:7d:e3:ea:8b:9e:9f:6f:4f:b8:07:06:2f:
b5:93:b1:a0:40:39:54:9e:15:9d:3d:48:fd:c0:dc:
fd:99:a9:a8:5c:a9:31:4e:2c:3b:41:f9:81:4b:cd:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:CE:5F:B9:61:28:77:B2:23:62:45:CD:15:5E:F7:D7:8E:C9:92
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ea:e3:6a:4b:40:9b:8e:1e:21:f5:2b:23:9b:1f:a9:e6:09:
0c:50:3d:e5:ba:b8:56:c0:55:ea:0f:a2:90:86:5b:e1:23:79:
5c:91:36:df:2a:cc:10:5d:82:9c:7c:88:75:6a:d6:33:1b:54:
fb:90:50:fc:1e:2b:6e:e8:d7:57:d2:4b:6f:37:63:5c:1e:c1:
b5:e3:75:af:a2:89:69:2f:66:70:33:c4:cb:f6:6f:1c:f4:47:
a5:2f:57:da:0a:33:9b:ae:60:17:d8:15:7c:35:94:7f:b9:ed:
c4:4f:0b:c1:c3:8e:cb:ed:21:df:c8:2b:e0:59:99:c0:65:82:
59:e9:ea:78:25:a2:25:46:86:7f:9d:16:b5:3e:ae:8d:19:06:
4d:c0:75:c5:de:7e:7d:f7:39:45:69:a0:45:68:ad:a8:83:c3:
8f:98:f1:0b:3c:4f:62:5e:91:3f:21:cd:8f:20:82:0c:50:92:
0c:8d:b4:2f:e9:43:2a:b0:42:f9:cc:e8:ed:4d:cd:cb:92:5c:
e9:48:5f:4b:9d:34:c0:0e:56:a7:87:b2:a0:17:c5:91:90:99:
9d:7e:30:b8:8a:dc:a8:e4:f7:81:49:16:27:6e:a7:fd:09:cc:
8d:a7:69:42:04:be:48:fa:fa:ba:f5:0c:5c:df:8f:6d:25:09:
33:27:a0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:06 2026 by rpki-client