Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft
File: i70nOhRTYWFVEmDYSNdvomRGzUY.mft (raw, json)
Hash identifier: C80oCzUOabufPt6128v06Z0o0jc5/oZexHuCcZ0lpk0=
Subject key identifier: 37:9B:CF:7F:5F:7E:A6:18:B2:45:A2:0D:4C:CB:BC:65:FB:5C:E7:41
Authority key identifier: 8B:BD:27:3A:14:53:61:61:55:12:60:D8:48:D7:6F:A2:64:46:CD:46
Certificate issuer: /CN=8bbd273a14536161551260d848d76fa26446cd46
Certificate serial: 019D38D3BAE0A6A9C09F143F643406556196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft
Manifest number: 0468
Signing time: Sun 29 Mar 2026 09:01:33 +0000
Manifest this update: Sun 29 Mar 2026 09:01:33 +0000
Manifest next update: Mon 30 Mar 2026 09:01:33 +0000
Files and hashes: 1: Psndu95QZf6tgKNvQkbaDhxNkYg.roa (hash: d9f4EyfJsmR2vvAcSDXuO/gBDmodHHefWdbiiIbdVEk=)
2: i70nOhRTYWFVEmDYSNdvomRGzUY.crl (hash: 0XT3DuJ1eSkELmx8zwNgeXcUksgttPlaTj/LHw5bb20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ba:e0:a6:a9:c0:9f:14:3f:64:34:06:55:61:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bbd273a14536161551260d848d76fa26446cd46
Validity
Not Before: Mar 29 09:01:33 2026 GMT
Not After : Mar 30 09:01:33 2026 GMT
Subject: CN=379bcf7f5f7ea618b245a20d4ccbbc65fb5ce741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:ab:da:f5:24:44:27:57:af:d8:b2:8b:93:
60:04:e1:9b:b0:9e:ad:55:eb:15:f9:46:d7:23:68:
49:88:a7:ce:5e:6d:4c:f9:04:ea:6a:73:b6:a3:3e:
03:88:00:56:b6:70:75:fb:f9:a4:2c:3e:3b:14:47:
91:8b:33:8e:e1:c2:72:c5:d7:c6:be:d6:5b:5c:da:
7c:9d:fb:d3:eb:7b:f5:ee:b1:c3:d9:07:09:11:21:
c8:14:e7:b1:29:59:b8:91:c1:d5:fd:e3:c5:6d:ad:
df:49:6c:da:80:4d:57:04:6f:d3:7a:4e:63:15:17:
a0:10:4e:e0:48:98:c7:b1:75:c1:59:a4:32:8c:37:
db:5c:f8:ab:1d:b9:aa:c1:c3:c9:9a:58:24:bf:e6:
8f:34:d1:fc:13:7d:e0:0e:15:b7:f7:27:b6:67:11:
a6:4f:30:92:08:48:14:b4:c4:b7:d1:15:73:28:a4:
1f:92:80:58:a4:b7:b0:c2:ee:11:a5:57:fc:d8:08:
5f:a6:1e:63:7c:3d:c2:e6:c3:50:fd:f4:40:43:98:
c0:44:34:88:07:f0:0d:2f:a0:75:b3:65:10:55:56:
5b:7f:f5:28:4a:f5:af:f5:63:8e:2d:99:11:96:aa:
7b:c8:d0:12:c0:e8:c1:15:fc:cf:9a:2a:79:cd:64:
60:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9B:CF:7F:5F:7E:A6:18:B2:45:A2:0D:4C:CB:BC:65:FB:5C:E7:41
X509v3 Authority Key Identifier:
keyid:8B:BD:27:3A:14:53:61:61:55:12:60:D8:48:D7:6F:A2:64:46:CD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d5:cc:95:4c:71:b4:46:17:0c:93:17:5e:43:5c:0a:c7:97:
e5:40:4d:97:43:b8:c8:75:bd:fd:fe:83:8c:9a:80:69:ea:ad:
b1:fb:81:2f:13:1c:65:24:7e:e7:87:d0:6f:90:67:13:81:7a:
59:ca:8b:1e:a6:f6:c8:4b:64:8c:25:02:7a:4f:75:74:d9:7c:
fd:63:f2:de:dc:b1:2f:16:5c:92:47:83:b8:2e:10:30:f0:a7:
a7:2e:0e:c5:49:bc:c6:10:93:f8:60:a2:3b:7e:64:bc:15:a0:
c2:fe:c1:53:2a:c8:8f:60:f6:14:2b:6f:86:e6:c9:7b:6c:b3:
1a:6f:6d:bd:63:46:d3:68:fe:91:c7:20:a6:2e:89:99:9f:eb:
b3:03:7c:e0:27:9a:ec:f2:68:85:d6:9d:46:4e:c0:0a:0e:35:
77:81:41:c8:6c:f5:ba:05:7a:4f:f2:f9:21:fe:e8:24:76:48:
db:de:e2:e7:04:bd:61:c1:f2:a6:42:74:cf:a6:c5:55:8b:80:
e1:23:9c:b5:66:0b:c4:6a:b5:f0:b6:b0:06:e0:21:db:5e:a6:
2f:b2:c2:a6:e8:1b:e3:fd:e9:f0:92:91:85:f0:70:31:bc:76:
b2:92:3e:d7:36:ce:f9:83:88:b0:86:6d:e3:87:be:c0:19:51:
31:7b:cc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:13 2026 by rpki-client