Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File: d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier: FcVkdkIXSgKUTRaarj0rasPE7Ke/rgey610S0VFdP5E=
Subject key identifier: D2:05:FB:7C:18:A7:D6:82:C4:2A:85:2F:52:D6:1C:65:8A:B0:FE:17
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer: /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial: 019D27E007FD17241D6C9B5421732BF12F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number: 0F6C
Signing time: Thu 26 Mar 2026 02:01:26 +0000
Manifest this update: Thu 26 Mar 2026 02:01:26 +0000
Manifest next update: Fri 27 Mar 2026 02:01:26 +0000
Files and hashes: 1: 1-x1SQoCge1oAxdF8NH1g432c8v4.roa (hash: gGNG1VzQDUnu5gmTgkEbwFhdDKx8kxbSdmHR7f+ftE8=)
2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: jKtDAwcbN+78mnd3Sa2G4e/eE9xwZ2MnC5puWMggx+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:07:fd:17:24:1d:6c:9b:54:21:73:2b:f1:2f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Validity
Not Before: Mar 26 02:01:26 2026 GMT
Not After : Mar 27 02:01:26 2026 GMT
Subject: CN=d205fb7c18a7d682c42a852f52d61c658ab0fe17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f4:2d:07:5d:c9:27:af:79:3d:1d:b6:f6:94:
a5:9e:6a:7c:f7:6f:0b:81:65:bf:f6:1b:4c:08:a9:
ec:54:91:09:a5:75:08:9d:6d:02:75:89:69:07:c9:
7e:f9:fb:ea:c5:03:59:73:4e:ec:92:49:20:d1:fb:
68:df:3f:2e:c0:c3:b6:c1:b1:7f:a1:19:91:dd:06:
98:f9:19:17:37:3b:f9:73:ac:89:48:74:bf:bb:7b:
2d:2e:df:68:2a:d2:19:15:44:6b:3e:f8:24:ec:9f:
58:5e:30:4e:bc:c3:79:6d:ef:ea:d6:f7:50:b0:54:
03:1f:80:e4:62:84:83:a7:ec:a1:51:61:0d:66:d8:
e9:05:da:ae:e3:89:f8:24:b6:2d:40:59:e8:9b:a8:
80:39:a5:ce:1d:a8:bd:3d:69:ed:c2:3d:a1:34:7e:
67:7b:8e:d2:67:ba:0d:aa:4c:f8:97:31:85:3d:8b:
73:c7:b5:6e:ef:96:a8:83:9c:43:7a:d4:c4:37:e8:
15:40:8f:27:30:f4:5d:d9:9d:3b:a5:4d:26:cf:f2:
5d:7c:13:93:a5:d2:15:52:05:a4:6d:4a:d9:23:3c:
15:42:a3:45:01:7d:cd:c8:ed:b1:4c:32:2b:7c:5a:
04:3a:ce:a0:92:80:f0:48:fa:75:5d:fe:ed:2d:6a:
ea:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:05:FB:7C:18:A7:D6:82:C4:2A:85:2F:52:D6:1C:65:8A:B0:FE:17
X509v3 Authority Key Identifier:
keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5d:5d:31:e5:5d:e1:36:49:c2:f4:f3:11:76:e7:7f:7c:bc:
be:60:b3:79:76:15:ae:33:64:f0:cd:cb:e2:ee:0c:bc:a7:b5:
cd:ce:fe:12:5b:b4:a7:47:07:c6:24:2f:17:f2:7c:f7:06:db:
20:10:80:2e:a8:49:f3:00:ef:c0:00:50:67:9e:d6:cd:f6:44:
3b:9c:63:4e:3c:4f:fd:dc:0f:69:fc:ad:70:66:38:25:b3:47:
90:67:2a:b6:3b:31:47:e7:96:f1:35:03:ff:31:fb:c6:73:33:
cf:da:bf:8f:0a:62:79:eb:74:e9:e7:7a:d6:16:8b:c5:9b:36:
8c:27:90:40:2c:6f:3b:c3:23:e4:15:ca:7b:d3:a9:98:c2:5e:
d6:61:5d:b6:18:c3:99:5b:14:b0:1b:51:a8:37:1c:fa:c8:19:
41:ba:7e:6d:b8:93:4a:26:56:49:d4:ff:df:68:fa:34:ee:77:
bb:f5:be:c5:ab:aa:69:44:b9:73:b1:0e:9d:ac:2b:51:c5:53:
24:8f:12:c0:b6:e0:9d:7c:9a:bd:f7:fd:0e:26:4f:19:72:b5:
3d:c9:98:fd:19:7d:db:4b:71:e1:bf:01:14:a5:6b:50:bc:94:
c4:77:49:b0:22:7d:7d:36:18:63:1d:80:cc:b4:28:c3:af:83:
3a:f2:44:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:42 2026 by rpki-client