Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
File: RI63RgCeGCwI7YT4F30ACKZIWD0.mft (raw, json)
Hash identifier: D3RtE6RDx21vVxQgcukQZDpk5BlUucAPnGmuMR0XpsI=
Subject key identifier: F9:0D:EE:B3:79:D0:F7:67:59:81:66:9F:9B:B4:93:A1:4C:D7:A8:01
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Certificate issuer: /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial: 019CE222F09202ED40773ACE1FE04BC2E943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
Manifest number: 0F
Signing time: Thu 12 Mar 2026 13:01:06 +0000
Manifest this update: Thu 12 Mar 2026 13:01:06 +0000
Manifest next update: Fri 13 Mar 2026 13:01:06 +0000
Files and hashes: 1: 8MEW4LhZnlTnZHpLLOu2i3k4f70.asa (hash: xNoCB9vHOWlyJDRMNvsd28N7c1284wMKE2GDeG1Uj6c=)
2: RI63RgCeGCwI7YT4F30ACKZIWD0.crl (hash: /A/Gn35qrIZFcBvLpuBjpbywRFhqaSPbJkQEL+JiKx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:f0:92:02:ed:40:77:3a:ce:1f:e0:4b:c2:e9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
Validity
Not Before: Mar 12 13:01:06 2026 GMT
Not After : Mar 13 13:01:06 2026 GMT
Subject: CN=f90deeb379d0f7675981669f9bb493a14cd7a801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:ea:9b:ac:88:c5:94:83:be:61:20:f0:08:
ee:1d:42:05:37:cb:66:b2:0e:bc:0a:64:cd:67:c9:
97:39:8b:9c:08:ae:5d:35:44:1e:e0:3a:de:09:e5:
6d:9a:00:1a:5a:c0:f0:b6:eb:13:59:18:13:11:7e:
98:31:66:f3:63:a5:4f:4c:91:2a:4a:11:d1:bc:91:
ea:06:e7:8d:90:7d:39:2e:bc:f4:3e:e1:22:0c:aa:
3b:6d:11:2c:5c:9f:f1:46:14:a5:a0:d5:32:69:31:
87:e1:ab:3e:9b:61:82:ab:9e:49:47:3c:77:24:4f:
a6:65:1a:bd:f4:0b:63:16:aa:33:38:5d:dd:d3:5e:
27:70:c1:df:1d:e7:f5:6e:c5:be:b2:08:3c:4f:84:
00:17:04:d4:66:98:37:93:8c:0b:d3:78:00:b9:e4:
12:29:3e:87:ff:b8:18:cb:7d:49:f5:cd:6d:91:d7:
39:66:2f:d0:de:a8:1f:71:d3:d0:89:4c:00:60:63:
2e:f1:51:6e:88:ca:d3:b7:f0:1e:24:39:50:92:90:
d3:46:2e:99:b3:df:0b:9a:c9:4e:34:0c:12:2d:3a:
9f:ee:5d:2e:4e:d8:0c:32:16:70:c0:80:e8:10:9f:
7b:12:eb:c7:3a:50:3d:fc:76:bc:ea:87:65:1c:dd:
a8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0D:EE:B3:79:D0:F7:67:59:81:66:9F:9B:B4:93:A1:4C:D7:A8:01
X509v3 Authority Key Identifier:
keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e1:8b:38:f5:93:42:eb:4c:c5:d2:b9:c5:e2:3d:ec:e0:4d:
35:a2:5e:fa:d4:3f:c2:5e:32:a1:ef:cf:e1:33:36:88:58:ba:
d2:f3:1c:0f:97:6e:1d:b0:b1:3e:76:5c:a8:f9:28:a7:f9:d8:
08:b6:7f:87:d6:2e:ec:8a:7d:03:da:14:ee:c6:71:5d:e7:6d:
d7:e9:57:af:80:1f:0c:ac:7b:22:cd:d7:fb:9b:64:db:b1:89:
c6:98:4c:3a:8c:de:a4:a3:c4:49:e2:7d:d2:45:5c:df:f7:2e:
c7:ea:b9:56:5d:29:e6:13:98:fa:77:e9:71:1c:e5:b7:ba:82:
c2:03:a1:c9:e6:53:c4:63:a5:c6:96:09:2d:c1:ca:49:64:3f:
52:db:68:65:bf:0f:09:3a:f9:d5:6a:b2:59:aa:b1:67:6b:39:
b1:2c:c1:5b:73:20:22:5e:13:38:6c:17:7a:26:57:a0:ea:5c:
9b:ae:1c:4c:3c:93:15:da:c7:27:d5:27:d4:39:85:cd:fd:3a:
75:3a:b2:60:5d:18:35:e9:f2:46:c6:ed:8f:47:32:dd:56:a9:
71:66:7b:ec:ac:55:86:b7:88:ab:9f:51:5b:25:d4:cc:ec:a1:
29:b7:0b:42:8f:23:e6:4e:2d:f9:fb:c9:0a:73:0d:79:5c:ca:
02:35:a4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:36:21 2026 by rpki-client