Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json)
Hash identifier: 3MtqjahE/PSSEdclepgGVJxcMUvMRdYRIF/GPRTB8Hc=
Subject key identifier: 10:F4:3A:D5:90:59:C4:58:4F:8C:45:A5:D6:73:F9:E5:84:96:AF:E9
Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Certificate serial: 019D37894CFC29205E4BFB320BEDB5F0781E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
Manifest number: 1486
Signing time: Sun 29 Mar 2026 03:00:38 +0000
Manifest this update: Sun 29 Mar 2026 03:00:38 +0000
Manifest next update: Mon 30 Mar 2026 03:00:38 +0000
Files and hashes: 1: iECZqjEQaP4vYPdGbi8_2UCo3kQ.roa (hash: bwkxeGL5KMOQda9sUnHQc+cPiNjhbKFYbhK5Z8/KX+0=)
2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: kuGQlaLwZmbbK1s214lq+v9+ez9W30YdecDe6F24aBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:4c:fc:29:20:5e:4b:fb:32:0b:ed:b5:f0:78:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Validity
Not Before: Mar 29 03:00:38 2026 GMT
Not After : Mar 30 03:00:38 2026 GMT
Subject: CN=10f43ad59059c4584f8c45a5d673f9e58496afe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:c9:8c:57:5e:99:9c:41:bd:31:3e:f4:fb:
a0:5c:b3:9f:12:48:00:5c:87:90:43:28:e2:f9:e0:
d9:89:51:67:42:97:a5:f7:ea:ca:28:ee:05:d7:3f:
a0:fb:f7:82:de:db:54:3c:52:12:ba:6b:e0:81:9f:
8a:0d:19:e6:07:49:bc:fa:66:02:72:2d:40:07:8e:
fd:33:c1:6f:9b:92:b6:73:e6:24:72:31:cd:a9:28:
dd:b6:48:b2:7a:99:71:81:e2:85:20:ac:15:ef:74:
e8:26:90:ec:d8:d2:fc:20:da:00:63:8e:d1:85:64:
ea:18:43:07:95:6e:bf:02:e7:f9:c5:1c:98:bd:bc:
79:b2:10:03:e3:c3:86:e7:be:6f:96:29:98:7d:b3:
ff:7a:1e:1a:dc:32:2f:b1:6b:cf:2f:8b:97:37:9c:
74:ee:6e:56:ab:4b:82:34:9d:84:05:3b:d7:5f:51:
56:a1:7c:15:62:bf:82:88:8b:d9:bb:9b:02:f5:8d:
46:ec:73:77:75:ef:d9:90:23:4a:9b:75:33:14:e4:
81:4d:fe:70:6b:40:c6:ed:b8:9e:ba:63:50:73:a7:
84:15:ac:f8:0b:83:c7:04:90:53:43:c8:e4:79:bc:
2a:92:67:b2:90:fe:f4:66:b6:17:c0:eb:30:24:9b:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F4:3A:D5:90:59:C4:58:4F:8C:45:A5:D6:73:F9:E5:84:96:AF:E9
X509v3 Authority Key Identifier:
keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:20:39:79:0c:4b:01:89:f1:1c:ff:20:79:a8:ee:f9:bf:9b:
6e:02:d0:30:83:aa:c3:b1:8c:47:64:57:0a:d6:21:64:3d:54:
d9:bf:00:4a:0f:b7:e2:0c:0a:08:7d:1c:51:e4:49:ed:a5:27:
e9:88:6d:68:ac:fd:26:93:84:45:38:c7:e4:7e:c5:0f:77:af:
68:98:b4:bd:21:25:b8:03:a3:7a:bc:18:d3:ed:72:26:df:74:
de:51:5a:1f:b9:1c:68:33:be:ef:3f:90:08:3d:dc:38:10:51:
e7:c7:64:8c:75:98:ad:c3:bd:57:87:31:8f:5d:62:c4:ef:8b:
8f:eb:c8:37:ee:34:9a:76:1f:35:bb:81:49:07:13:ed:04:dd:
a3:44:ac:58:c6:c6:cd:4a:90:71:b6:31:aa:ea:5e:ed:3e:d1:
4b:b2:de:a6:19:67:70:21:a9:3a:be:da:40:90:6c:09:2d:7e:
9a:99:16:6f:a2:70:df:72:59:6c:be:72:f4:cb:99:1f:c5:4e:
57:aa:4b:71:06:6f:f9:ce:2a:95:be:7c:d6:3c:18:a6:42:71:
09:22:1e:05:e3:04:1e:61:0e:29:55:2a:d6:c8:04:d5:31:be:
35:ab:da:b6:0d:f5:32:8f:28:7c:63:88:f8:a7:3a:c1:32:35:
02:8d:b5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:09 2026 by rpki-client