Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
File: d0972iMD4D6ANP52MfUEi5mF9n4.mft (raw, json)
Hash identifier: VDiO4TS7Tu0iZQKlga3m1rPCzVESZQ21MZNh/z9kkJs=
Subject key identifier: B6:06:DF:50:7A:9B:6C:F4:40:FC:86:28:E1:BF:44:8B:8A:FB:F8:C0
Authority key identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
Certificate issuer: /CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Certificate serial: 019D27DF74FACD5B74C4944E244532207979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
Manifest number: 01E1
Signing time: Thu 26 Mar 2026 02:00:48 +0000
Manifest this update: Thu 26 Mar 2026 02:00:48 +0000
Manifest next update: Fri 27 Mar 2026 02:00:48 +0000
Files and hashes: 1: d0972iMD4D6ANP52MfUEi5mF9n4.crl (hash: N0PyJUCBzEoLQmDDKzq7MYPXoHuGKL6XcSg7mSVMf9w=)
2: vr-KcEvzFupIdELOEs6eVsczP7A.roa (hash: sVJX8b77ReEC5s9osN7ZZ4vvNkbfeOM17MUXGpuCdfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:74:fa:cd:5b:74:c4:94:4e:24:45:32:20:79:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Validity
Not Before: Mar 26 02:00:48 2026 GMT
Not After : Mar 27 02:00:48 2026 GMT
Subject: CN=b606df507a9b6cf440fc8628e1bf448b8afbf8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:b8:1c:c5:a7:2f:ef:25:30:44:1e:2d:c4:
30:11:8a:c0:bc:b0:7f:fc:76:d1:80:44:06:aa:76:
71:39:51:a2:e2:5b:ea:7a:72:03:1b:3a:50:79:ac:
32:de:df:49:aa:62:32:63:7a:e1:9a:d8:02:3b:70:
32:3d:f5:78:d8:10:fc:83:6b:30:5d:7f:93:a0:11:
25:9e:92:75:2a:cd:20:18:0b:af:80:f8:32:5a:fe:
2a:d4:10:10:7b:ff:78:a3:4e:e6:88:ef:eb:68:a3:
8e:be:09:a2:08:9d:9b:4c:0e:0d:e5:63:33:f2:e2:
0c:b1:40:4d:04:85:54:0c:e9:8f:2c:60:55:34:82:
ce:26:a4:e8:99:a5:73:f9:92:32:58:b3:38:2a:00:
9b:b4:cd:84:26:97:0a:1b:71:15:46:ee:e1:80:6a:
01:4e:47:17:cd:b2:b3:bc:4e:60:78:89:d5:84:8b:
45:8f:53:7c:eb:46:95:64:8b:55:53:34:8c:01:e9:
1a:9c:af:ba:32:d8:ea:a0:0d:46:6b:f7:47:08:9e:
69:6a:d0:b7:04:2c:6f:30:6e:f3:83:f8:20:a2:ce:
55:17:b1:e8:91:4a:50:0e:88:cb:6c:a7:fa:59:d1:
7e:6a:32:88:32:db:67:b5:cb:40:fc:c7:5b:fa:fe:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:06:DF:50:7A:9B:6C:F4:40:FC:86:28:E1:BF:44:8B:8A:FB:F8:C0
X509v3 Authority Key Identifier:
keyid:77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7c:38:32:78:c3:02:83:52:63:83:3e:ba:bc:42:74:95:95:
96:52:40:50:96:4c:da:77:58:ca:be:c4:9b:16:08:7a:df:4a:
f6:79:73:87:c6:5c:36:f8:39:9f:0d:bf:8e:26:4a:3c:85:af:
77:df:89:30:0f:ce:01:76:28:06:5f:38:12:65:f6:5a:02:f7:
5a:83:31:2e:c0:40:3a:62:24:10:28:ea:48:71:f7:ce:54:7d:
12:c8:47:15:bf:a3:12:e2:d2:42:80:57:f4:97:32:02:72:fd:
b3:9a:d8:ce:22:30:4d:a7:6d:46:08:9f:37:ab:73:83:54:15:
fd:ad:8e:fc:d3:0d:94:1b:76:ae:4d:c3:ef:a9:46:19:49:2f:
3c:0c:d7:62:3e:d7:3a:44:6f:bb:d4:45:41:75:ac:fc:10:87:
53:02:51:2f:8f:ba:8f:c4:6b:b4:f2:30:19:d1:04:6f:11:6a:
f5:c6:ee:49:72:f3:da:c9:26:10:d8:1d:a4:ec:89:0d:d6:59:
94:b1:45:af:53:10:ee:9b:be:2b:db:2c:27:11:6f:77:c3:ad:
74:15:90:a3:47:82:6d:1d:cf:c4:ba:52:ac:51:71:cb:1d:33:
26:10:e7:e5:48:05:a8:c7:a9:b7:73:bd:ff:67:60:2a:52:11:
36:d8:61:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:01 2026 by rpki-client