
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier: OD9iIihwB9qXaS9xJbSfsCZOyjpdIkvX8cHT9UV6ff4=
Subject key identifier: D8:88:9A:5E:E2:8D:7F:E5:ED:DF:D8:BB:12:08:5B:75:CC:48:CD:5C
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer: /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial: 019DEDB68EBBD309110CA096D8DF717E0037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number: 03F8
Signing time: Sun 03 May 2026 12:00:57 +0000
Manifest this update: Sun 03 May 2026 12:00:57 +0000
Manifest next update: Mon 04 May 2026 12:00:57 +0000
Files and hashes: 1: BWVL9f-KpOOHJHITcd_zmQga4BM.roa (hash: 16slF0zkT/3GuOWybhDOTweAZ519QDUn0ORtD9/qMi4=)
2: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: 4OJRjHeGLp7j/gS9twny6y6KwWzOj6uofdpksQaIY4g=)
3: wFIGK-hJfwnzYHOy-0zpMlYIwX8.roa (hash: ijX/47c/1yaEzAjtMYS0nchNRSTG2HHJG2gdZxBcrMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:b6:8e:bb:d3:09:11:0c:a0:96:d8:df:71:7e:00:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Validity
Not Before: May 3 12:00:57 2026 GMT
Not After : May 4 12:00:57 2026 GMT
Subject: CN=d8889a5ee28d7fe5eddfd8bb12085b75cc48cd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:79:6b:88:70:f8:68:31:2b:94:f8:71:b9:f1:
e5:2c:5e:d5:9e:54:99:f2:96:de:4c:38:a1:27:19:
ad:b1:60:44:f2:b8:75:f4:9f:6c:ba:7d:23:02:9a:
af:d7:06:84:b5:8f:2a:1b:95:c0:c7:f1:10:35:60:
48:f3:92:8e:b4:1c:90:f9:eb:78:6c:5c:2b:dc:d5:
da:fe:00:bf:98:44:b7:09:dc:de:69:d2:67:c2:10:
04:41:3c:91:25:c3:e8:15:7e:04:df:8d:f3:c0:6b:
71:b5:46:eb:7a:a3:d1:f0:3e:1e:31:5d:4e:f5:cc:
f9:9d:d2:2f:50:38:51:d9:81:43:0d:bc:d4:90:e0:
60:95:81:c9:5a:e9:99:65:7d:8b:74:21:ea:9a:00:
37:e8:d3:13:a0:0f:64:0c:a4:69:95:2e:55:9b:4f:
02:70:2d:72:de:9e:6d:b8:f7:65:9b:60:64:7c:45:
59:15:3d:b3:0a:23:28:e5:4c:29:59:f8:6d:2e:a7:
83:32:62:2d:62:3c:b6:e0:99:84:c6:11:b6:51:34:
44:7c:12:b2:26:c4:0f:27:84:ae:80:33:54:37:98:
0c:25:c9:a7:fc:2b:44:f5:09:c9:ae:8a:01:dd:2f:
6d:d4:dc:11:aa:cf:c5:db:7c:96:4e:76:24:03:a1:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:9A:5E:E2:8D:7F:E5:ED:DF:D8:BB:12:08:5B:75:CC:48:CD:5C
X509v3 Authority Key Identifier:
keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5c:09:e0:8e:35:c0:01:63:d9:7f:9a:8b:4a:95:ad:fe:14:
17:47:eb:e2:a9:95:cd:27:63:e7:34:65:05:d4:5a:a7:24:da:
98:bb:77:e2:8b:7f:24:ac:15:31:ae:e8:9b:0e:c7:d7:2b:97:
c1:00:19:a5:ed:7f:46:7b:c3:d6:69:8a:0b:6b:e8:3c:ca:2a:
26:1e:ae:d6:8b:67:41:f4:69:48:1d:3f:65:05:6a:0e:b0:44:
0b:0c:f4:2e:84:f3:7f:fb:f7:59:26:e1:32:3b:2d:ce:89:40:
e3:70:f8:19:ba:1e:c0:2d:64:d7:79:3e:dd:d5:86:28:ab:b7:
9a:5f:a0:7c:23:58:28:a6:ca:8b:a9:41:b7:98:af:1c:35:aa:
2c:80:97:24:95:4d:1f:9a:a9:54:9a:45:e1:02:5e:b9:91:61:
0d:63:66:c1:35:8f:f6:49:97:07:dc:e7:3b:43:ca:d1:bd:77:
ac:23:92:77:33:d7:01:a2:4d:f1:5c:67:5b:33:b8:a6:b2:e0:
a2:da:e9:bd:41:a9:4c:7e:b0:55:41:09:df:d1:e3:15:82:cc:
6c:29:af:3f:ee:46:33:d3:6c:9a:e0:9b:7b:77:0b:d1:0c:0f:
66:67:7a:ad:2b:14:41:e4:92:69:9e:99:71:5a:26:0e:73:3d:
32:4d:e9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:07:21 2026 by rpki-client