Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
File: sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json)
Hash identifier: CFzE9q/c9PYTx22vHBVFSnd/2ESwncXmml3QT3hKSYc=
Subject key identifier: 43:77:5A:DE:72:D9:CB:E4:EF:3B:3D:57:50:C1:39:71:A8:B9:2B:7D
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Certificate issuer: /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial: 019D3909EFE0D75914776D10ECE7B897FE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:45 +0000
Manifest this update: Sun 29 Mar 2026 10:00:45 +0000
Manifest next update: Mon 30 Mar 2026 10:00:45 +0000
Files and hashes: 1: cJdPxb0RSH0QMcbmsxnfVVZLI9o.roa (hash: 7Mc+8VOQ2R5S9UUsL5A35++MoKrgCRu3M3X3wsPiNFQ=)
2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: LdsP//2VC+mEHOLGKrRkYTiIkAC9cvtOOX+np6Jbq2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ef:e0:d7:59:14:77:6d:10:ec:e7:b8:97:fe:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Validity
Not Before: Mar 29 10:00:45 2026 GMT
Not After : Mar 30 10:00:45 2026 GMT
Subject: CN=43775ade72d9cbe4ef3b3d5750c13971a8b92b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:5c:d4:be:02:6a:a1:19:12:8d:13:d3:f9:
98:19:7b:a1:cb:9d:5c:f8:14:f1:c8:c8:8f:68:2d:
6e:6e:a7:65:f0:88:65:a8:14:b9:17:d4:0d:81:38:
18:9f:56:64:78:5e:05:9a:99:ce:9d:6e:56:58:93:
2c:27:5c:cd:5b:d7:b8:c8:e7:b3:0a:1d:93:84:d3:
00:87:3f:01:76:c6:fb:6e:bf:85:78:b0:ec:e5:b1:
f3:3f:e1:f6:83:81:12:62:09:bf:88:53:ef:d4:4b:
47:69:65:9e:2e:6e:17:5f:ed:9c:94:20:8a:6e:c8:
bd:e5:27:2e:ad:f9:b8:81:62:80:2b:8f:a7:2c:ed:
eb:7c:0d:cb:32:f8:68:b3:ad:17:e2:ac:d1:95:08:
c2:ae:56:b0:c6:86:93:55:35:37:df:9d:d6:66:22:
a5:e7:c7:6b:d7:4b:5d:c8:9c:89:56:cf:f5:0f:a7:
f5:a8:a8:99:5f:7c:28:89:9d:6b:30:5f:bc:a4:24:
7f:64:d1:6a:12:d0:5c:95:12:14:a5:b9:1f:53:80:
c0:68:ac:7c:e2:ee:19:df:8b:f8:15:00:c1:2c:f0:
d6:7d:97:c4:37:04:58:69:5a:e9:73:f1:3c:a1:99:
76:11:66:62:aa:64:80:1b:a7:f7:0e:7f:f1:21:9e:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:77:5A:DE:72:D9:CB:E4:EF:3B:3D:57:50:C1:39:71:A8:B9:2B:7D
X509v3 Authority Key Identifier:
keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fb:8b:db:0e:e2:f4:07:bf:b4:65:a1:d3:a8:be:56:07:eb:
bc:60:8b:cb:24:fd:c4:1e:1c:c8:26:33:ed:bb:a8:61:d6:ee:
67:69:48:d1:ec:d2:b4:45:90:00:fe:b2:53:75:3e:9f:90:05:
c5:0b:d4:4c:27:6a:e6:ff:66:57:41:85:98:2a:77:26:8a:fc:
1c:68:c9:bc:52:41:db:51:81:df:79:9e:bc:53:ee:5e:ba:76:
b4:3a:3c:1c:ab:fc:ba:c4:60:d8:81:a5:d8:c0:97:0c:98:ec:
15:01:1a:c0:9a:3e:d4:b4:a7:ec:ff:51:73:a1:a7:f2:c7:75:
bc:67:54:cc:5d:0e:3e:17:36:3e:08:40:40:c3:f2:88:66:83:
b0:33:05:87:31:cf:4b:2b:5c:f6:2d:4a:86:b8:b1:2b:be:ac:
74:8a:71:48:66:28:9d:90:0c:7a:e2:bf:a4:07:0b:cb:d7:ac:
a8:c4:d4:f0:c5:02:1f:26:17:70:72:a1:25:9f:ce:bb:07:86:
e8:64:b2:94:11:69:e3:13:e2:23:65:d3:75:f1:c1:bf:90:95:
29:91:79:8f:59:bc:36:77:9b:0c:6c:2c:ba:c9:9a:08:aa:73:
26:c1:14:be:9e:6e:04:5f:dd:1e:50:51:ed:b6:06:64:40:5f:
c3:6a:b8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:37 2026 by rpki-client