Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json)
Hash identifier: oCeIOvags2j05OlVBygzng5exs1ZeWXgs0jh+y3L6EY=
Subject key identifier: D9:FA:18:D7:79:F7:87:EF:B4:0A:39:B4:57:2A:45:D9:3A:DD:A1:A9
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 019D31F5E676432E6DA22F55AB096E40BD2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
Manifest number: 18A6
Signing time: Sat 28 Mar 2026 01:01:31 +0000
Manifest this update: Sat 28 Mar 2026 01:01:31 +0000
Manifest next update: Sun 29 Mar 2026 01:01:31 +0000
Files and hashes: 1: 6GLB9mtHtQ9igAugr-nU-NnOL5I.roa (hash: v+rAB5v9d/a3phjEOAxXcev6bMkZhENGNBYWynOBKZs=)
2: A0jJG1saLwhFpwXvphN5KLkIp7E.roa (hash: zfUzOQxZDjIQpzcBLbTZxhWmdADgguB1bEK9a5hzld0=)
3: BHJrH90HA7e2j36fHZGtluntvoI.roa (hash: Y13mf0+6dWn2wsiZuzG7gygvh4nWO0T3oCMxSoXnKls=)
4: IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa (hash: LzcrEnLFMAnlZ+5zqbHv6+pvv/Iv59lNp1OzlwME3F8=)
5: Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa (hash: MOGwB7iZKu1QkN/hiCIWIk9cs+bF15Y23HgeypcVdhw=)
6: _4I_-jCH3XR23JxHVWzlSOPi3_M.roa (hash: tqFTpY9AJoIMPhinhdWGv8n5l6XDT7XH/JbG8DY2pa4=)
7: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: t3KmvkLnzpTfTAP9qIlOi1tQWNLhiqKDqY+1E1RJT98=)
8: sqmM075pYoIhRN4MwnW9o487rF8.roa (hash: I1CZglIvCm1ewemqOSJLikUmJGVYj4wQzxEvNc+9woA=)
9: vCq8VVeEIofiFQLrkv4khGyN3iM.roa (hash: +sZQ4wGcyHE3djaR6nEoYJEVQLBZat/sIPQiTRwtVBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:e6:76:43:2e:6d:a2:2f:55:ab:09:6e:40:bd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Mar 28 01:01:31 2026 GMT
Not After : Mar 29 01:01:31 2026 GMT
Subject: CN=d9fa18d779f787efb40a39b4572a45d93adda1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:87:84:c3:16:17:84:ea:e4:3b:d7:1a:27:
61:ea:db:e9:ca:33:6b:bd:2d:53:ec:30:7c:ad:40:
d3:98:bd:8f:a9:bc:db:bd:2c:7e:e8:62:3e:54:78:
99:f7:9b:bb:54:2d:e7:28:43:d3:63:75:5c:35:ae:
0c:95:c0:f4:b5:f2:cb:a1:27:25:0a:df:02:fb:af:
53:ba:b9:9e:0f:0c:e0:ec:d6:b2:b0:c0:91:a5:72:
7e:ef:55:3b:b6:88:9b:44:e1:c1:9b:c2:71:70:97:
31:af:78:93:9e:ef:da:e0:96:bd:9f:e1:a5:81:c5:
0e:3b:d7:df:f9:a3:f8:1b:a8:00:b9:ad:59:85:26:
39:12:f5:e0:ae:82:fc:c6:bc:42:0c:db:75:9c:d8:
61:9a:73:0c:c1:bd:81:5e:fe:e1:86:5b:b0:cd:36:
f3:54:7d:53:97:4c:5c:c9:f3:bd:f5:31:54:6e:90:
06:c7:94:9d:00:2e:d7:5e:7e:8e:37:fe:34:ce:84:
c0:94:cd:1c:10:71:06:63:b4:a5:16:17:f8:9d:d3:
69:ae:00:24:22:60:d7:fc:15:83:a0:15:bc:0f:fb:
4d:3b:37:a1:bb:e7:f3:b3:d5:89:02:e2:2a:0b:5e:
dc:14:a2:a6:01:e4:31:0c:e7:10:93:be:43:0c:52:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FA:18:D7:79:F7:87:EF:B4:0A:39:B4:57:2A:45:D9:3A:DD:A1:A9
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2f:da:38:13:4a:7a:df:c5:43:88:28:eb:02:30:31:07:cc:
8c:04:56:6b:f6:80:78:a8:b5:62:a3:37:c6:71:ca:ec:e4:37:
e8:54:b5:bb:f0:a1:25:aa:6d:20:81:f1:7f:3d:92:52:f9:0a:
6b:55:af:ef:48:10:ba:94:b4:9f:ba:6f:a5:9e:32:b5:a0:fb:
b1:10:28:79:57:b3:73:a2:db:cb:8a:be:e6:45:34:af:ec:42:
1e:51:2e:17:81:eb:9a:61:fa:4d:2c:21:69:53:25:40:e7:d8:
79:ad:34:69:94:92:2f:c5:20:c5:63:dc:dc:9f:cb:87:9b:92:
d6:62:7b:eb:fc:6f:8f:f8:a5:33:ae:9a:4d:75:c9:f7:b6:11:
5d:b9:1b:cd:05:d8:c8:1d:d3:e4:ee:d3:6a:1e:d5:89:db:75:
c8:49:a7:34:c5:bf:b7:4f:b6:0a:70:0e:2c:ed:65:4e:60:05:
d0:fb:6b:11:53:9d:ea:cb:5c:2b:b9:66:55:df:84:e8:d3:92:
f8:ff:be:60:4c:af:1b:4c:1b:2b:13:e0:58:99:e8:17:0e:9e:
b6:ba:e0:0d:2b:d8:b8:2d:a8:df:5c:73:51:9e:63:e0:0b:8e:
4e:83:08:ea:25:39:07:98:da:d3:d3:98:c5:61:50:80:44:99:
f9:91:2b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:49:53 2026 by rpki-client