Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft
File: a49xoY3OxDR8x7TQK8h4TorCewA.mft (raw, json)
Hash identifier: +9bcAxwaJ7Rb0/Xdtrmq9j+N6/v+tC3Dn1LN1qKUGTU=
Subject key identifier: 81:A5:4D:8A:FF:DA:4C:8B:CB:D6:C6:CE:B4:02:30:58:D6:9F:0E:D1
Authority key identifier: 6B:8F:71:A1:8D:CE:C4:34:7C:C7:B4:D0:2B:C8:78:4E:8A:C2:7B:00
Certificate issuer: /CN=6b8f71a18dcec4347cc7b4d02bc8784e8ac27b00
Certificate serial: 019D389C55B036B2DB413CE1C4A829BA0362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft
Manifest number: 0195
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: LpNRmtsCoRjao-6dvwj2HPVgG4s.roa (hash: kvWzFrGBwO1uv+vNoO53LU8Aj/p6EPQlI2j6iM0S5QI=)
2: a49xoY3OxDR8x7TQK8h4TorCewA.crl (hash: xDro50g9eCg8NLd/5UgZjkZYraspWZUtZxaRambpeQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft
rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:55:b0:36:b2:db:41:3c:e1:c4:a8:29:ba:03:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8f71a18dcec4347cc7b4d02bc8784e8ac27b00
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=81a54d8affda4c8bcbd6c6ceb4023058d69f0ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:09:b0:d3:1f:1f:66:2b:c7:27:c5:b4:99:3f:
93:4e:d4:9d:b3:2f:bc:6e:ec:c4:aa:95:33:10:63:
76:a9:dd:59:86:4d:bd:68:d9:3b:fc:17:31:ff:64:
7f:fd:a1:88:8c:fe:b8:c8:7a:7e:37:0a:46:42:32:
0f:31:bc:fd:04:34:54:a4:16:45:7c:b9:4c:3c:2b:
6a:99:a2:10:eb:74:2b:a8:65:f7:cc:f8:b2:e3:75:
7c:3f:f7:c9:c5:21:e0:ec:24:a2:37:37:47:f5:b0:
66:69:8c:03:59:a6:49:28:dd:f6:be:4e:83:f7:68:
a2:af:f8:3a:11:61:f3:47:f2:07:76:d8:c3:d3:bb:
87:86:0a:5f:c2:a8:22:6b:33:b7:a5:f7:ad:31:c4:
99:38:95:51:f1:5b:70:c6:11:38:e8:ca:bd:19:23:
4e:52:fa:4b:f6:c7:4d:78:59:21:75:54:db:79:41:
5a:bc:f7:02:7e:8a:0b:46:91:02:40:68:fa:8a:3f:
51:32:b7:cd:69:83:cc:58:f8:f4:cb:d9:08:79:56:
b9:a4:3f:f5:2d:af:76:99:cd:51:23:f0:da:2a:f0:
8c:fb:29:57:cf:95:24:77:28:86:1a:57:b0:56:f5:
6a:37:bc:47:0c:cf:de:6d:11:84:d2:d3:cd:7e:14:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A5:4D:8A:FF:DA:4C:8B:CB:D6:C6:CE:B4:02:30:58:D6:9F:0E:D1
X509v3 Authority Key Identifier:
keyid:6B:8F:71:A1:8D:CE:C4:34:7C:C7:B4:D0:2B:C8:78:4E:8A:C2:7B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a1:11:a9:74:1e:03:36:24:89:9f:25:30:26:3e:10:0f:eb:
02:3a:3d:17:93:80:7a:cf:4b:e9:fd:86:f5:23:98:de:bb:ae:
f5:71:e4:93:34:ad:a2:b0:ba:93:1c:b0:46:bb:06:9d:98:71:
cb:57:cf:60:11:45:56:84:ef:36:14:03:e4:b9:24:ab:b3:f8:
80:22:48:ec:a9:bd:a4:b4:d2:e1:64:47:b3:31:b8:c9:7f:3b:
da:72:03:10:52:30:69:db:36:58:61:57:28:4e:65:62:76:da:
7f:55:ae:c5:77:75:fc:ff:1a:37:c0:72:9e:fe:0b:9e:19:40:
87:89:37:96:21:5b:1e:3f:dc:95:bb:28:3c:1d:b0:fb:d3:71:
61:a1:8b:b1:d1:65:37:10:24:5a:c7:f5:0c:4f:ed:a8:e9:f5:
12:9e:05:c1:0c:4c:98:4f:67:e5:20:67:1c:bd:0d:2b:79:63:
95:d9:c7:75:41:51:05:8d:57:b1:4a:15:57:b3:f7:f7:af:3a:
cc:9b:19:b6:f8:f6:66:b6:b3:95:ad:a0:04:b4:78:56:06:58:
ea:36:16:b0:c3:ce:6b:0d:5e:e4:d5:d9:d2:9b:3e:e0:f8:a5:
d4:bd:78:d9:4b:d8:4a:2b:06:d8:18:77:9d:bd:b1:25:cb:24:
e5:60:80:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:52 2026 by rpki-client