Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: 1baHbGZF1EEwhhvrJyG3Q4X9YVJHvKfS11nbI6YS1fg=
Subject key identifier: D7:E4:B8:10:9E:21:FD:7E:7E:6A:FC:D6:23:3B:4C:1E:31:4A:B7:C4
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 019D2A3B76D5A905FA082FEF21F94E6AC298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 0FFF
Signing time: Thu 26 Mar 2026 13:00:33 +0000
Manifest this update: Thu 26 Mar 2026 13:00:33 +0000
Manifest next update: Fri 27 Mar 2026 13:00:33 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: Zpa0IMlH88m8gUuoynhxd5aItqPYY2R/Haf+UVajFQc=)
2: mssfFR-jvVEjXWitmlgUfKmk1ic.roa (hash: w30uwAMWbY93oGllAg088gC96/ylOV2F4klPStV+KUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:76:d5:a9:05:fa:08:2f:ef:21:f9:4e:6a:c2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Mar 26 13:00:33 2026 GMT
Not After : Mar 27 13:00:33 2026 GMT
Subject: CN=d7e4b8109e21fd7e7e6afcd6233b4c1e314ab7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:a8:16:b5:4f:e5:98:f4:4e:32:b4:68:83:
59:61:73:e1:90:7d:f9:17:a3:74:b6:ed:d4:cb:c4:
2b:c3:27:8a:d0:45:11:ad:ad:6f:7f:b4:b7:6d:c8:
35:7e:d7:7c:c6:c7:ff:54:a9:23:4b:5a:49:13:2b:
20:c8:1c:bb:61:e2:9f:84:f0:67:2f:ea:06:d3:d3:
63:d2:9e:01:ef:eb:e0:0c:63:18:2b:65:33:1d:ad:
24:76:4f:9d:a7:fb:20:88:da:ba:1a:c5:e1:50:6b:
90:88:30:15:8e:ea:58:19:92:cf:26:70:73:77:25:
70:0e:ad:e3:a2:44:78:ad:70:c3:2c:2a:0b:f0:6b:
de:4a:c5:97:36:6c:6b:35:f0:c9:81:8e:7d:5c:53:
4c:54:8c:8d:c2:f5:98:39:47:40:6d:07:3b:a3:9b:
bd:e7:c4:dc:06:09:96:c3:11:01:34:88:08:e2:ce:
f9:64:4a:2a:a8:f6:bb:24:e7:f9:fe:46:ad:92:9b:
a1:88:8a:d9:cf:c3:61:d4:5b:82:4f:8c:df:e0:18:
78:e8:7c:11:d4:cb:f8:bc:df:59:ea:d2:72:b3:46:
5d:d6:3b:7e:59:ab:02:72:e5:2f:b9:be:a1:a8:20:
3d:4c:f5:8e:c0:22:91:03:f3:b9:3f:17:38:19:38:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E4:B8:10:9E:21:FD:7E:7E:6A:FC:D6:23:3B:4C:1E:31:4A:B7:C4
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d7:9e:e1:9a:61:1d:9f:e2:73:11:e3:3a:1b:be:e2:1d:5f:
77:44:8c:27:db:8f:77:c0:ee:ef:a4:1e:d5:dd:a8:a1:0d:2d:
75:f3:15:ea:b2:18:84:e5:65:03:b5:c5:2a:49:84:0f:5d:ba:
87:e3:fd:0f:6d:dc:03:7d:97:c2:4c:5c:40:af:b6:0f:d1:62:
b3:4b:89:b3:82:91:63:60:46:21:e8:f3:1e:56:43:a5:26:a7:
28:1e:4c:a5:54:1d:48:d4:61:9b:86:6e:5a:77:72:8e:23:bb:
70:a6:f5:ac:6a:06:b7:44:de:17:4b:f0:79:0d:72:93:c3:d2:
40:82:aa:c7:b1:76:5a:34:c1:11:88:c7:e7:8d:0b:22:ed:45:
55:1b:ee:9b:65:5d:7c:7c:14:d2:79:23:a0:35:bd:d7:7e:9b:
f1:31:ac:ac:2c:3b:6b:0c:8a:44:58:e7:97:82:1c:9c:41:3e:
61:66:92:f4:72:87:22:00:a3:34:34:5f:cb:51:5a:9d:5f:0e:
1f:b2:f0:c0:44:30:8b:da:a4:0b:e7:76:9b:d6:32:59:2e:71:
d0:71:f8:b7:a9:e6:6f:29:86:63:24:63:c0:9b:00:8e:0e:e9:
9d:19:0b:41:e7:e9:e1:48:ae:62:ca:88:75:90:d9:a9:0e:b7:
11:16:d3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:03 2026 by rpki-client