Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File: v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier: BALLxFU5jpPKA142dGFDyU09m/jDoEkkRaMLZxqXG8w=
Subject key identifier: C9:17:A5:21:D5:73:3E:B3:20:D8:90:16:54:5C:B1:0F:32:69:E8:D2
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 019D3977AAC7E5EE5269C1C8420A490F1280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number: 12CB
Signing time: Sun 29 Mar 2026 12:00:36 +0000
Manifest this update: Sun 29 Mar 2026 12:00:36 +0000
Manifest next update: Mon 30 Mar 2026 12:00:36 +0000
Files and hashes: 1: 2Wp3YnKolCKlk8ttOD4thTqnK8s.roa (hash: AqwDEsgdXjCQtmMemZbnyoQLvLWRfHb/l/ITgYIXcT0=)
2: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: PAssvVcxrwk071A6+PLZ4bN6ptIxqcJpL8Ys9f7eAtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:aa:c7:e5:ee:52:69:c1:c8:42:0a:49:0f:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Mar 29 12:00:36 2026 GMT
Not After : Mar 30 12:00:36 2026 GMT
Subject: CN=c917a521d5733eb320d89016545cb10f3269e8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:b9:94:bb:60:f2:b9:17:eb:cb:2e:bc:ee:
df:9e:89:3f:63:6a:70:e9:e5:f9:78:59:e9:4d:de:
16:c5:3d:37:3b:e4:dd:1c:1e:8f:92:00:dc:12:c1:
94:2e:29:85:6f:59:de:f0:72:63:c3:2f:81:3c:4d:
bf:8f:1f:59:d6:e7:99:f8:2a:55:6b:25:03:46:37:
7f:e6:8f:be:11:2f:b4:df:96:34:4e:e0:fb:14:99:
36:5c:a5:c8:4e:e6:96:a4:51:75:39:1b:c7:75:3a:
a7:d4:58:78:55:b0:32:7b:bd:98:8f:fd:4a:a8:ef:
df:cf:d5:24:d7:02:65:11:ae:0e:00:d9:fc:68:c0:
5f:20:7e:7a:e5:94:98:0a:fb:4f:a7:7c:74:b5:b7:
3f:ed:0b:80:dc:c7:ae:81:db:58:23:55:f2:a7:de:
1b:8f:bb:8b:c8:81:71:14:49:09:bc:bb:97:49:d6:
c0:57:2e:6c:37:d1:3d:0e:68:b5:b3:0e:0e:ce:5c:
db:66:dc:f6:bd:d0:52:15:03:49:59:a5:40:7b:d4:
0f:4c:ab:8e:5c:8d:0b:b7:3d:01:08:a3:a5:66:13:
1e:b1:42:09:8e:ba:dd:b9:55:99:b3:60:d6:8a:9a:
5a:c9:17:f2:f5:ec:67:7c:1c:87:79:aa:b7:22:a9:
25:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:17:A5:21:D5:73:3E:B3:20:D8:90:16:54:5C:B1:0F:32:69:E8:D2
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:84:d9:01:57:d1:2c:01:43:35:f9:94:c3:50:6c:da:11:67:
af:06:30:c3:93:7d:a5:2d:92:d5:ce:f1:a4:01:3f:61:3f:36:
c7:52:6f:62:38:c8:53:70:f6:a1:80:13:ba:1b:0b:ff:b2:d8:
22:61:12:35:62:02:91:ad:d9:99:54:c2:e5:23:30:ff:8e:af:
44:33:e7:a1:5b:49:e1:59:3d:8c:8b:df:45:c1:fc:e9:c9:f1:
81:dc:7c:6d:e3:53:04:95:30:3c:6f:f9:44:e5:2e:fc:2b:ca:
bd:5f:59:46:e2:47:52:67:74:d1:72:8c:40:3c:a2:27:16:b0:
56:cd:83:61:ba:fc:f4:b7:4d:19:99:c0:2d:73:69:33:89:15:
72:c7:d3:0c:3c:b5:44:bd:14:19:3d:eb:9f:21:9d:fb:ae:6b:
35:09:ba:9c:5e:f2:b2:9c:56:c4:5c:34:c3:af:11:38:4b:4d:
24:55:be:7b:ea:98:95:6f:e3:4e:df:ac:d7:43:a9:0a:5e:b7:
a6:26:32:e8:9d:11:1e:d3:44:c1:08:01:29:4f:ec:63:b7:c9:
42:be:fb:e4:7f:89:88:3d:18:43:3d:b6:9c:3c:1b:25:9d:8f:
18:7c:33:fd:d0:a6:d3:d1:e0:a3:01:dc:ff:8b:59:7a:ef:6d:
ee:90:76:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:43 2026 by rpki-client