Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
File: Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft (raw, json)
Hash identifier: Ps8A6GdPegtqijWx6yIU04iMSh6CGm7kZ8uQQSH9g2U=
Subject key identifier: AE:D6:02:04:D7:C8:7E:B9:8E:26:EA:4A:E1:5D:3E:F7:D8:BC:D6:11
Authority key identifier: 45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
Certificate issuer: /CN=45ed111630e05297795dddd298ea1fb29e695c53
Certificate serial: 019D39AF3436105CC2BB01F19D6AE3842C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
Manifest number: 0F74
Signing time: Sun 29 Mar 2026 13:01:16 +0000
Manifest this update: Sun 29 Mar 2026 13:01:16 +0000
Manifest next update: Mon 30 Mar 2026 13:01:16 +0000
Files and hashes: 1: 8pNTjqniMFk_l88aCl3q4gxjvCw.roa (hash: NhOt3V4pCHJS3ioRSgsTAxEcfjN40UAKQmrhzy1cBHI=)
2: Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl (hash: CU65hieqC2ZQCSU9KNdx2SNH1vc90QR/Tzh7s/gXKbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:34:36:10:5c:c2:bb:01:f1:9d:6a:e3:84:2c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ed111630e05297795dddd298ea1fb29e695c53
Validity
Not Before: Mar 29 13:01:16 2026 GMT
Not After : Mar 30 13:01:16 2026 GMT
Subject: CN=aed60204d7c87eb98e26ea4ae15d3ef7d8bcd611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:d8:0e:9d:5f:3d:1c:4c:0c:e2:48:9f:e2:
da:02:06:18:f1:e4:96:a7:fb:f2:af:20:34:94:71:
b0:2b:20:a3:80:1e:bb:6e:37:eb:5f:8a:38:8d:f2:
1b:d8:08:72:d7:05:e6:28:80:b5:87:3e:d7:ae:fa:
46:74:ce:85:2f:fb:54:7f:68:a8:ed:aa:9c:87:d1:
9d:0e:b6:7e:15:13:45:28:e9:09:a1:70:1d:4f:4f:
3e:ab:17:95:f1:1c:3f:03:b0:ae:8a:e7:45:85:71:
9c:a9:69:bc:ac:7d:c2:08:e2:dc:68:66:96:0e:83:
20:89:22:d6:5f:90:ea:c0:39:0a:3a:b5:6f:d2:7d:
2e:a2:9d:65:1c:b9:89:66:c9:10:79:14:ef:14:35:
09:e1:25:01:a1:30:ea:31:f1:3d:b8:97:27:7c:c8:
ea:f2:54:ad:b8:50:6d:72:e9:a0:2c:5b:e6:69:de:
fc:71:d9:02:f3:25:f3:b7:4d:42:cd:7d:ca:42:02:
c7:f0:24:94:89:3b:44:2a:28:19:ed:50:9f:68:52:
4a:3d:1e:91:0d:bd:83:43:42:dc:77:d8:ec:06:15:
64:f4:59:89:85:f9:9e:1e:c5:dc:9e:e6:b1:df:21:
4b:19:15:12:1c:29:cb:bb:f3:eb:50:4f:22:f7:e6:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D6:02:04:D7:C8:7E:B9:8E:26:EA:4A:E1:5D:3E:F7:D8:BC:D6:11
X509v3 Authority Key Identifier:
keyid:45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cd:ab:4e:96:cd:a5:03:48:eb:9a:44:22:dc:2c:60:e1:28:
4e:99:7d:a4:4b:99:0e:7d:cd:5f:e3:e1:d5:64:a3:0f:f0:3c:
78:fe:e4:f9:06:e2:ff:81:76:bc:d4:c7:97:12:ed:3e:eb:22:
71:56:aa:ba:a7:7c:37:99:24:03:64:34:b2:13:2d:3f:6f:68:
9f:6d:90:f2:59:c7:80:9e:bd:76:b3:b2:96:2b:c3:04:f0:9b:
d7:4f:42:79:9e:e3:69:05:f7:5f:d2:6f:a9:3d:8c:57:89:4a:
52:3a:a8:fd:45:40:96:98:8c:69:f9:87:4d:ab:28:3c:d9:18:
84:b3:05:8f:7c:8f:61:47:b3:ce:aa:6b:a8:d2:0b:2c:df:89:
b4:cc:db:06:f9:86:c2:43:fc:8f:d2:96:ef:d5:58:fa:cb:94:
07:fe:bf:41:59:53:86:ce:1a:59:5e:48:26:e5:07:78:b6:b7:
db:17:21:8e:80:3f:df:2e:1b:4a:a5:f0:ac:3a:2f:e5:f0:4a:
27:f3:66:8e:66:8e:8e:2a:10:93:a9:f2:cc:2c:60:be:37:ca:
e8:84:37:a4:3c:22:a7:ce:07:a4:f3:cb:68:1e:dd:4e:c3:91:
22:2f:6f:27:5d:c8:5c:40:ec:42:2b:88:8c:98:6e:25:c7:94:
51:63:21:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rzQ2EFzCuwHxnWrjhCwiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZWQxMTE2MzBlMDUyOTc3OTVkZGRkMjk4ZWExZmIyOWU2
OTVjNTMwHhcNMjYwMzI5MTMwMTE2WhcNMjYwMzMwMTMwMTE2WjAzMTEwLwYDVQQD
EyhhZWQ2MDIwNGQ3Yzg3ZWI5OGUyNmVhNGFlMTVkM2VmN2Q4YmNkNjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh7YDp1fPRxMDOJIn+LaAgYY8eSW
p/vyryA0lHGwKyCjgB67bjfrX4o4jfIb2Ahy1wXmKIC1hz7XrvpGdM6FL/tUf2io
7aqch9GdDrZ+FRNFKOkJoXAdT08+qxeV8Rw/A7CuiudFhXGcqWm8rH3CCOLcaGaW
DoMgiSLWX5DqwDkKOrVv0n0uop1lHLmJZskQeRTvFDUJ4SUBoTDqMfE9uJcnfMjq
8lStuFBtcumgLFvmad78cdkC8yXzt01CzX3KQgLH8CSUiTtEKigZ7VCfaFJKPR6R
Db2DQ0Lcd9jsBhVk9FmJhfmeHsXcnuax3yFLGRUSHCnLu/PrUE8i9+awAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7WAgTXyH65jibqSuFdPvfYvNYRMB8GA1UdIwQY
MBaAFEXtERYw4FKXeV3d0pjqH7KeaVxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80NTQ0MTItYzA2Mi00YjQ1LWE2NDQt
YTAzOGVmMWVmZjM5LzEvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80NTQ0MTItYzA2Mi00YjQ1LWE2NDQtYTAzOGVmMWVmZjM5
LzEvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIc2rTpbN
pQNI65pEItwsYOEoTpl9pEuZDn3NX+Ph1WSjD/A8eP7k+Qbi/4F2vNTHlxLtPusi
cVaquqd8N5kkA2Q0shMtP29on22Q8lnHgJ69drOylivDBPCb109CeZ7jaQX3X9Jv
qT2MV4lKUjqo/UVAlpiMafmHTasoPNkYhLMFj3yPYUezzqprqNILLN+JtMzbBvmG
wkP8j9KW79VY+suUB/6/QVlThs4aWV5IJuUHeLa32xchjoA/3y4bSqXwrDov5fBK
J/NmjmaOjioQk6nyzCxgvjfK6IQ3pDwip84HpPPLaB7dTsORIi9vJ13IXEDsQiuI
jJhuJceUUWMhXA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:05 2026 by rpki-client