Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File: RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier: KRl1nh14FNfUfImF/nPHjASE+6Lm1T+jK4HVX+lPsJA=
Subject key identifier: 3C:40:B0:A2:77:9A:BE:F2:E4:D1:47:A1:7E:B1:D6:D2:48:03:98:8E
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 019D3977A19E6858A44BEF7C50076847BDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number: 06E8
Signing time: Sun 29 Mar 2026 12:00:34 +0000
Manifest this update: Sun 29 Mar 2026 12:00:34 +0000
Manifest next update: Mon 30 Mar 2026 12:00:34 +0000
Files and hashes: 1: Apg6THL6nNSCI_zX9N0HioO5_FI.roa (hash: xOzp8DMGrF7dA8wIkMVpYr0krnXQI+toAtngHnKO/CA=)
2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: V/YkAWi08QHl+O227yNhiH6BtAFCBOo+T89NI8gjHPE=)
3: xYoe99GmkL23ZMa2Tozkl_bKIqU.roa (hash: 405SceDsf9th40a7ckeVXHxvuDkWg8V20/2TYadqbnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a1:9e:68:58:a4:4b:ef:7c:50:07:68:47:bd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Mar 29 12:00:34 2026 GMT
Not After : Mar 30 12:00:34 2026 GMT
Subject: CN=3c40b0a2779abef2e4d147a17eb1d6d24803988e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:ed:d8:f0:76:40:b0:52:70:89:b1:46:86:
4e:bd:b3:dc:a7:61:56:1e:7c:95:57:46:c5:64:ff:
f2:d6:46:63:37:1f:9f:6b:aa:30:48:e6:4a:84:16:
30:37:5a:27:f8:f4:fc:d6:03:38:21:ec:71:52:79:
53:84:aa:0f:ab:06:35:a0:e1:9c:b5:b3:bb:2a:8f:
59:aa:ea:7c:34:85:32:5a:e4:93:e1:21:73:87:23:
8d:20:fd:0f:7f:d9:53:47:82:cf:6e:32:ae:4d:0c:
df:92:bf:5a:49:81:cb:1f:cb:a3:59:1e:b4:f9:65:
ba:8f:54:5a:7a:65:01:8a:ee:99:65:56:b9:68:63:
74:2a:bc:78:82:c1:78:fb:47:60:e5:a0:94:a5:1c:
93:48:18:4f:9f:38:da:d1:38:a2:49:62:1d:b0:e7:
a2:b9:55:1c:60:74:87:05:1b:f6:c7:b3:85:9f:a0:
47:26:e2:b8:76:9a:fa:d2:7f:d0:9d:9f:19:8c:8e:
f1:bd:fe:eb:18:79:6b:49:1a:5c:33:fc:1d:c7:98:
1a:a7:46:47:a1:0e:7a:6e:fb:6d:e1:2d:f3:bb:15:
6d:c9:6f:c6:71:8e:31:7a:a9:ff:fa:19:88:8c:04:
0d:02:58:60:76:30:43:af:b6:d3:72:75:e9:cc:96:
20:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:40:B0:A2:77:9A:BE:F2:E4:D1:47:A1:7E:B1:D6:D2:48:03:98:8E
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:bc:bb:e0:d4:9f:c2:f9:49:71:78:26:d9:25:02:99:6d:a2:
d6:5f:42:7b:09:55:75:f8:ed:b4:42:aa:c9:e6:75:f4:ff:44:
7a:69:33:70:b4:ad:93:31:66:ea:bb:ca:71:b7:b4:a2:78:c4:
8b:a7:b3:ad:1a:99:65:ff:45:18:2a:8d:5a:d8:c8:5a:e9:a7:
1c:e6:f6:91:04:b4:3b:f9:6e:84:41:68:a5:ec:c6:7e:89:51:
e4:b0:52:59:fb:e9:cf:ec:8e:ad:c8:b4:9f:fa:c1:43:90:9f:
03:24:4b:ec:45:a9:50:62:ae:66:09:d8:68:75:5f:32:a5:ed:
1a:13:83:60:6e:d3:76:c1:40:2c:cc:5d:2b:c7:7c:28:ec:42:
e5:79:ca:36:79:5d:2e:11:c3:cf:f6:79:04:67:58:56:d5:f0:
00:5d:ff:69:ac:a6:51:33:65:06:81:a6:b1:d5:1d:0d:c5:34:
de:2c:0a:bf:79:d4:6b:c1:4f:de:06:cf:a7:e3:44:25:16:02:
66:e0:02:59:64:84:a1:36:11:16:d2:74:a7:f2:5b:6f:a9:30:
ab:d1:3e:45:ac:fd:7c:e7:c7:b0:53:af:cf:11:15:99:2a:95:
f6:29:47:ce:02:c2:c6:f1:88:a0:15:00:ff:47:48:ea:1b:e2:
04:4d:b2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:50 2026 by rpki-client