Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
File: Rqyv5hND1xDfYM2R3giQH9u6b48.mft (raw, json)
Hash identifier: YCiSVdrDKp1wTmUt/hoYqnon8+MiJWuuBuwBUgFaZJo=
Subject key identifier: 5D:3A:67:9F:C3:38:64:A8:00:F8:72:62:C1:8E:F8:75:4F:9D:39:C4
Authority key identifier: 46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
Certificate issuer: /CN=46acafe61343d710df60cd91de08901fdbba6f8f
Certificate serial: 019D3909913BD15667398483732143924038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
Manifest number: 08D0
Signing time: Sun 29 Mar 2026 10:00:21 +0000
Manifest this update: Sun 29 Mar 2026 10:00:21 +0000
Manifest next update: Mon 30 Mar 2026 10:00:21 +0000
Files and hashes: 1: Ak9vOxGpJOtM5ZM2WAZaWA80hJ0.roa (hash: eWX9AMTey3Vg1fgVIDxnxj6ffwC52UU2QqjvGjmMTlQ=)
2: Rqyv5hND1xDfYM2R3giQH9u6b48.crl (hash: Fen2/eP6aCo63qWV3Qm1DrjLC3iD1KTucXzOUuPK59M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:91:3b:d1:56:67:39:84:83:73:21:43:92:40:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46acafe61343d710df60cd91de08901fdbba6f8f
Validity
Not Before: Mar 29 10:00:21 2026 GMT
Not After : Mar 30 10:00:21 2026 GMT
Subject: CN=5d3a679fc33864a800f87262c18ef8754f9d39c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0c:4d:c9:10:ec:f7:d5:5b:1a:e1:c8:8b:90:
80:83:4d:75:da:ac:6c:9d:c8:c1:38:ae:8b:bf:d1:
b0:2f:fd:75:04:92:e9:70:52:53:8d:e0:1b:b2:6c:
66:0a:52:e3:53:a5:d0:33:96:4f:b0:0f:ce:be:87:
f4:2d:08:63:ff:27:64:13:96:9f:31:53:3a:9f:dc:
71:6c:03:31:51:60:f8:87:26:87:63:e4:d3:83:a3:
37:f3:27:d1:25:6b:ba:8f:ce:c6:09:eb:9e:e1:db:
1f:ea:6a:db:14:73:de:60:fb:a5:77:18:e5:cb:c7:
19:4f:68:32:5f:5b:24:3d:6f:1d:df:2f:9b:bf:e9:
54:aa:fe:29:70:db:61:1a:e2:dc:1a:d9:dc:fb:38:
9d:e7:2d:35:b7:8b:97:29:2d:ae:e1:36:0b:20:56:
5c:d2:d4:eb:ea:98:87:e8:1a:ad:75:20:1e:85:d7:
0f:20:d3:62:26:fc:95:1b:f7:47:9d:91:ed:43:21:
8e:90:61:29:c9:eb:08:92:4f:0c:92:4e:40:de:26:
62:95:79:af:58:72:28:f2:a2:3d:69:e3:42:c1:2e:
8f:c1:43:0a:53:75:ef:ba:a9:dd:23:9d:5e:89:7c:
fc:d4:c9:6d:eb:ba:f8:67:a2:32:83:df:2e:c1:a6:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3A:67:9F:C3:38:64:A8:00:F8:72:62:C1:8E:F8:75:4F:9D:39:C4
X509v3 Authority Key Identifier:
keyid:46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e4:d9:41:a9:d3:75:7a:43:a7:ed:9d:8e:14:4f:14:15:9a:
76:1d:8f:34:67:73:cb:9f:9c:5e:f8:b6:24:3b:ca:72:e1:d5:
8b:bd:63:c4:7f:85:3b:98:a2:97:65:cf:3a:c7:15:8c:dd:d6:
15:45:7e:61:10:9c:b6:d1:e8:ab:6b:ff:aa:41:de:eb:13:dd:
cb:95:a5:05:82:f2:b4:91:c7:ca:4b:14:8d:69:d1:87:95:3d:
07:eb:10:0c:29:b7:e3:74:9d:14:72:66:ab:c6:f7:47:89:bc:
69:45:03:c3:18:ec:03:96:b7:d0:08:ce:35:74:9f:86:32:8d:
fd:5c:f3:92:a7:a9:18:60:51:c5:09:f8:7c:04:c0:84:c9:21:
e5:1e:f3:74:3b:5d:1e:57:c9:f9:b9:69:87:5e:44:5e:db:8a:
cb:e9:0b:b4:72:07:cd:0d:03:24:b7:30:20:0f:1a:71:19:0c:
5f:92:e6:47:a6:23:3c:a0:7f:9a:d1:d7:1d:15:bc:6f:b4:6c:
79:d9:a4:cc:9f:03:bc:23:8f:3e:7c:f8:91:86:e9:90:5d:b0:
dc:5a:39:8c:27:6b:17:5d:54:56:e5:0f:4f:a6:ed:b8:40:8d:
45:12:09:94:e0:9f:a6:f7:85:92:c8:42:54:30:84:dc:51:d2:
0e:ec:19:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:33 2026 by rpki-client