Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
File: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft (raw, json)
Hash identifier: wZ0l/sx4yFb+rRgT4VvJSe4Oy7gUOPjSWgsVsMiq2uk=
Subject key identifier: B2:94:5D:7A:03:8D:27:BA:2B:38:E8:E7:9D:0B:A6:E4:96:C8:86:2B
Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
Certificate issuer: /CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Certificate serial: 019D37C0C6327D6FC0E9A2F2410763B9445B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
Manifest number: 0D94
Signing time: Sun 29 Mar 2026 04:01:13 +0000
Manifest this update: Sun 29 Mar 2026 04:01:13 +0000
Manifest next update: Mon 30 Mar 2026 04:01:13 +0000
Files and hashes: 1: 49PmNqo2ozi6foyeWngY9-dP7_8.roa (hash: FTUCcOfecgfUHEaYOHAMv32E85Y9HshWNlhJWT3H1nQ=)
2: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl (hash: HOmoGBgjJJEfksqRkBtfN+dR8a5IOIRgKaeQ01/7gGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c6:32:7d:6f:c0:e9:a2:f2:41:07:63:b9:44:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Validity
Not Before: Mar 29 04:01:13 2026 GMT
Not After : Mar 30 04:01:13 2026 GMT
Subject: CN=b2945d7a038d27ba2b38e8e79d0ba6e496c8862b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:b6:92:58:92:af:6e:65:03:73:d4:26:7d:
d5:50:d0:48:ab:47:0c:d5:23:a1:d8:ba:f9:a6:4f:
a7:39:c7:b9:ff:54:8b:63:7b:46:ee:fe:8b:94:08:
db:51:15:1b:b7:67:49:26:16:26:05:03:c2:28:d4:
6b:20:53:2d:a5:09:c8:96:30:fc:f1:cb:db:0c:ce:
a0:25:39:f9:13:2c:89:48:6c:90:6a:fc:7c:44:87:
98:40:39:ff:ba:90:48:14:cc:44:63:b3:f8:f2:35:
7b:38:8f:0f:ae:7e:cc:16:4b:91:50:7e:e4:0f:77:
7f:45:83:aa:c4:65:4e:db:3d:9f:e4:08:12:3a:d9:
cb:10:56:99:8d:1b:a9:52:85:9f:a1:2e:5a:92:fe:
0f:64:c7:c8:b8:ae:cb:e0:33:01:03:55:67:75:4a:
ec:cc:76:98:cc:60:50:5a:dd:0a:5f:37:e6:b4:12:
53:4f:e2:8a:ac:42:9f:c4:ee:2a:31:26:1f:e5:31:
33:49:91:d5:cb:86:90:aa:23:9a:ec:f2:ba:bf:77:
67:bc:9b:29:e9:df:c3:bb:82:91:49:c7:f7:cf:e6:
b9:85:2a:85:dd:05:f0:34:73:eb:9d:4b:9e:8f:8e:
3d:c6:32:be:f2:91:3c:0c:5c:01:24:9d:f8:3b:f2:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:94:5D:7A:03:8D:27:BA:2B:38:E8:E7:9D:0B:A6:E4:96:C8:86:2B
X509v3 Authority Key Identifier:
keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:37:78:9e:61:3a:94:bf:94:3e:f3:5f:34:9f:5c:e5:8b:86:
c9:39:7b:44:73:f3:a8:8a:40:ae:3b:97:f9:99:48:72:ee:49:
ec:5b:98:ed:6f:1a:b8:27:64:48:16:2d:4e:91:8b:bf:e9:f4:
36:6d:fe:91:1a:63:66:4d:ef:b3:41:a6:51:44:f5:9e:cd:0b:
68:cf:f3:81:31:9c:e1:32:91:e9:82:56:63:16:bd:f0:d4:43:
7d:cc:02:f1:d7:29:90:20:45:48:3e:5b:89:c1:24:ed:68:3c:
d4:d0:8b:bd:6c:e8:e2:84:a8:4c:e0:93:91:63:b9:78:63:30:
37:43:71:bf:1f:42:7a:48:ff:8a:f5:d5:20:ce:8c:26:a7:23:
83:b6:ff:89:a2:eb:bc:b1:65:93:a0:57:7e:68:53:67:8b:b5:
02:69:b8:ad:94:00:c5:a1:4b:14:f3:a2:e7:20:82:08:2b:ad:
1f:9f:ed:c6:b2:cd:f1:fb:e6:87:db:53:4f:9f:c6:71:14:60:
3b:49:2d:1b:cf:96:ac:5f:b5:91:68:32:8f:05:78:06:17:61:
33:f0:5f:d1:7a:af:d5:8a:74:e8:3f:32:90:7b:33:75:1c:ed:
66:2e:b0:f3:99:ff:fb:80:18:8f:b1:46:e6:cf:9b:43:08:42:
03:02:54:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:55 2026 by rpki-client