Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: 8hQv8yqNXosSL459HORycElM4yVxeQ96peR0XdgD1lo=
Subject key identifier: AE:A1:A4:EF:36:A6:FC:53:D5:48:1A:73:94:28:D5:89:33:53:87:8C
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 019D3A53E83A815C7940FDF9B1CBC4EAC0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 0AF3
Signing time: Sun 29 Mar 2026 16:01:10 +0000
Manifest this update: Sun 29 Mar 2026 16:01:10 +0000
Manifest next update: Mon 30 Mar 2026 16:01:10 +0000
Files and hashes: 1: 7hkN41FQK4rNVtwj2BraoZnJuqg.roa (hash: 5m1MRTp35SIueLauNwTAW0LsW5mYAj38kHx8oT3d5Os=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: dBlcyRAi812l4S75doUVtzgVyO1JGWIn2KqQ1XWniMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:e8:3a:81:5c:79:40:fd:f9:b1:cb:c4:ea:c0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Mar 29 16:01:10 2026 GMT
Not After : Mar 30 16:01:10 2026 GMT
Subject: CN=aea1a4ef36a6fc53d5481a739428d5893353878c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:2a:95:3a:f6:f3:fd:07:c3:72:8c:78:10:
7d:ad:b6:4c:2f:36:ea:e8:b5:02:72:85:d2:fd:5c:
54:8c:ac:d7:1c:e8:77:92:14:56:0c:30:22:ca:1c:
e0:b9:07:a1:b2:ca:75:e4:aa:95:18:41:f4:c3:6c:
0b:94:aa:41:7a:f0:62:b2:9c:b9:53:ec:db:4a:e1:
c9:05:4b:4e:b3:04:d7:4b:08:11:e1:d1:81:67:df:
93:99:6a:0a:89:78:c0:df:58:79:fe:7f:88:aa:b1:
06:23:2a:86:12:77:22:82:79:7b:4c:80:a1:39:42:
21:52:32:e9:97:62:85:e2:82:86:cb:aa:0b:c2:69:
88:14:2e:f2:5b:9f:37:18:f2:7c:b3:d9:8d:37:9e:
05:40:98:b5:d3:8d:7c:f1:7f:65:3c:fc:bb:ce:fd:
44:5d:01:7f:ab:8b:a6:16:58:12:e3:0c:6b:2a:8e:
00:e0:5d:68:5c:0a:ed:70:b7:e3:dc:92:79:ae:9f:
7e:be:9b:3d:56:b8:dd:19:54:41:98:9e:a0:b8:b2:
e3:58:a3:59:c7:b9:a2:fe:5a:fb:d0:1c:5c:67:b8:
4d:c9:ee:43:36:aa:8c:39:09:bf:6a:f9:67:bb:e4:
5e:99:29:6b:37:79:8e:16:f3:7d:37:25:19:b6:1c:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A1:A4:EF:36:A6:FC:53:D5:48:1A:73:94:28:D5:89:33:53:87:8C
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8f:9f:cb:fc:0e:cc:6f:d4:78:89:ae:61:24:4d:66:35:46:
05:c0:7d:71:a1:0b:a6:fd:90:fe:03:a6:a7:cf:70:87:04:1b:
09:4f:2a:77:48:96:88:72:bc:f9:4f:18:6d:8b:7d:7d:54:59:
e2:d8:35:07:86:a7:4c:4a:0a:58:d2:de:95:5c:67:25:57:79:
d9:cd:86:78:0e:aa:60:b8:d6:80:46:cd:cc:a0:d3:5a:de:bb:
4b:a6:37:30:63:70:e1:db:e2:ac:73:81:c5:bc:9e:89:73:7f:
07:ff:ca:92:9d:ce:30:5b:5f:0f:6a:96:e6:45:66:38:55:39:
f0:88:b7:0d:62:f8:79:b7:03:86:e7:4b:3a:4b:24:04:d2:e5:
2b:91:2c:91:81:37:48:0a:8b:1a:4f:8c:4a:05:e5:2a:57:32:
d1:4c:b8:6d:fe:48:c3:e2:19:1d:72:6b:8e:78:b6:7c:eb:3f:
05:f7:db:18:3f:5f:96:4c:12:c3:9a:ac:15:37:37:4c:85:f3:
e4:b0:34:01:30:55:bc:27:84:29:7f:20:a0:52:27:6c:37:5f:
37:1f:e7:7a:90:89:87:e9:75:cc:84:8b:2e:48:0b:ef:84:ea:
3e:67:28:60:6e:c4:fe:48:a6:49:0a:44:49:4e:1b:d4:39:24:
be:78:c4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:58 2026 by rpki-client