Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.mft
File: 1PDpygJ6-SWAVKdz1981haJ7Q60.mft (raw, json)
Hash identifier: XJJX8p2xZv+Pc7pmS8af9+FBoHaSZt7vbHCuhMk5Pd0=
Subject key identifier: 0F:FF:06:7A:F3:6A:B7:6B:EF:16:BC:C4:8D:2C:E0:EE:5F:EA:4B:80
Authority key identifier: D4:F0:E9:CA:02:7A:F9:25:80:54:A7:73:D7:DF:35:85:A2:7B:43:AD
Certificate issuer: /CN=d4f0e9ca027af9258054a773d7df3585a27b43ad
Certificate serial: 019D322C380B2D479C6EEEBC70949A6E2463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PDpygJ6-SWAVKdz1981haJ7Q60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.mft
Manifest number: 69
Signing time: Sat 28 Mar 2026 02:00:51 +0000
Manifest this update: Sat 28 Mar 2026 02:00:51 +0000
Manifest next update: Sun 29 Mar 2026 02:00:51 +0000
Files and hashes: 1: 1PDpygJ6-SWAVKdz1981haJ7Q60.crl (hash: w34nO4On09yYh/h/vO5xjAVxUUv2CGIebo9HgKvuQs0=)
2: tPh9q4Es1lUOr4Bxk22S2XZXPck.roa (hash: Dt+BHwi/gVmE8Y3zSl5BpcPA/QBKnLsdcWn+hxuageo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PDpygJ6-SWAVKdz1981haJ7Q60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:38:0b:2d:47:9c:6e:ee:bc:70:94:9a:6e:24:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f0e9ca027af9258054a773d7df3585a27b43ad
Validity
Not Before: Mar 28 02:00:51 2026 GMT
Not After : Mar 29 02:00:51 2026 GMT
Subject: CN=0fff067af36ab76bef16bcc48d2ce0ee5fea4b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:95:c9:ef:88:81:f8:5d:a6:f0:b1:58:38:
92:30:0c:e8:08:13:0a:d0:c3:d1:d5:a3:8f:23:49:
e7:a7:90:82:f0:b1:87:44:9b:f4:05:95:26:cf:f6:
2c:7a:b5:bf:fe:13:98:29:14:9a:a6:9a:15:d9:ee:
89:5c:8c:45:62:42:b3:e1:e9:87:26:75:ef:ef:22:
32:36:9e:45:87:db:08:70:a9:eb:34:f5:33:df:1a:
6c:94:a8:49:7b:f3:19:9a:c8:8e:b9:3f:ef:24:23:
9c:ef:c5:f7:f2:f0:ef:a2:04:60:62:be:50:8f:b2:
48:5c:54:09:84:f5:8a:37:8a:5c:a4:6b:b2:77:1e:
38:04:5a:72:7f:2e:0f:6e:5b:e9:34:94:da:ac:c3:
63:aa:f2:60:e6:bd:dc:b5:32:a9:c2:08:5b:0e:4e:
9b:cc:ab:f0:b2:b2:68:37:78:24:d2:36:9f:bd:6d:
8c:f6:89:8d:4b:b0:72:7b:a4:23:9c:e9:60:bb:e5:
43:79:63:da:68:1c:9f:e8:98:3e:8a:d0:44:3a:b9:
18:60:e7:2f:bc:99:a9:3b:1e:28:3b:af:a2:36:d8:
79:52:d0:f2:16:ed:e6:e5:4d:8d:84:da:e4:75:89:
b2:49:96:f8:65:30:e0:e9:92:90:30:99:22:d2:41:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FF:06:7A:F3:6A:B7:6B:EF:16:BC:C4:8D:2C:E0:EE:5F:EA:4B:80
X509v3 Authority Key Identifier:
keyid:D4:F0:E9:CA:02:7A:F9:25:80:54:A7:73:D7:DF:35:85:A2:7B:43:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PDpygJ6-SWAVKdz1981haJ7Q60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:55:46:a2:61:7f:ad:c8:23:a5:f0:17:51:02:83:4b:ba:2b:
bb:4c:78:66:38:f6:4f:51:3f:e4:8d:c6:7c:84:5b:5b:0d:9d:
2e:76:77:96:7b:c6:74:89:9a:ef:25:cc:54:37:32:2b:4b:70:
0b:5c:65:b5:f1:aa:cc:24:79:f4:f6:7d:18:63:e2:f8:c6:16:
d4:d0:23:a4:53:1b:28:5d:9f:e4:4f:a6:c1:da:79:96:b7:57:
15:44:7c:24:59:1b:01:2d:23:d7:ff:d8:06:f4:e6:7a:8b:f6:
8f:67:95:94:5b:69:9d:fb:f6:b6:39:49:f0:bc:1f:5b:bd:20:
cf:24:2a:dd:cf:4e:15:83:e8:71:7d:71:68:d4:44:d3:84:97:
0c:b4:ae:d9:3c:44:ba:05:fc:d6:9a:15:67:e6:92:8d:fd:49:
2b:f3:c4:17:c6:68:38:19:2d:f9:89:cc:7d:d0:19:cf:9e:38:
b5:ca:65:34:53:2d:be:5e:54:b1:48:e9:24:f9:6d:94:65:f4:
4e:8f:ea:cc:2c:df:76:90:f9:c6:54:88:cd:72:f7:eb:9c:6c:
72:20:3b:28:55:bd:06:f1:38:a9:8c:93:28:c6:a7:84:5d:7e:
d9:78:64:3e:77:6a:0c:15:9a:a5:94:cf:0a:c1:11:04:66:91:
fc:6d:37:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:37:03 2026 by rpki-client