Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: GBdVN+NPBqSzg7Mf6cIziGGtKxLzBwlFJSnJ42YkPyg=
Subject key identifier: 2E:7F:39:5E:53:95:57:87:32:26:F8:0B:99:B4:FF:65:01:D7:84:89
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019D2816A1FEF17BACADB1CD9669647AC125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 0FE0
Signing time: Thu 26 Mar 2026 03:01:04 +0000
Manifest this update: Thu 26 Mar 2026 03:01:04 +0000
Manifest next update: Fri 27 Mar 2026 03:01:04 +0000
Files and hashes: 1: L8Slli334eo6YprtoGz3opSMBfo.roa (hash: VpnCurlBt66oP+46I0+rMm2pae0P/l1+xCnoGTzw334=)
2: Td6ePlmmjfj3QDaFtTuHW3D9dC0.roa (hash: 08i4lHbdORnvMw2omeJpM2jEVbltVT01xGE4VC+1/bo=)
3: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: z/PjDvEAFBKDcF4limLtn2WsilE9DQh/FTh7PUsGi9w=)
4: jcdUCN5v_fEw6tgouDGmsAi4uqQ.roa (hash: aK8/MYOjzg2j9dQklFTXiZMZEJgQejRF7dLncl3fyJg=)
5: lWHGG7_f5OqTv0LmU1Cq9xuDChI.roa (hash: vy8Lvl/OimTfUisZZ2J0ZdnOHx/P1IuOxxEKFhLRgLU=)
6: uvv9qPqkc14AyTkKhEshaclg-ro.roa (hash: oelEEgJXLeJc3nzjBLZO2ZEiqv1cxH4FuyLv/ZRpkA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a1:fe:f1:7b:ac:ad:b1:cd:96:69:64:7a:c1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Mar 26 03:01:04 2026 GMT
Not After : Mar 27 03:01:04 2026 GMT
Subject: CN=2e7f395e539557873226f80b99b4ff6501d78489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:27:35:e5:ad:5d:ab:b8:9a:d4:fb:1c:db:
43:d2:55:ad:bb:ce:05:95:24:f4:64:2e:06:70:26:
84:12:69:06:28:31:c3:18:fe:92:f6:78:19:21:84:
7f:4e:85:f4:20:5a:6a:46:25:4c:44:36:96:52:a4:
b7:21:27:d7:e4:f8:6b:a2:3d:c1:25:4b:9f:26:2f:
db:ea:79:b1:41:9b:3f:d2:80:69:5c:c7:2a:1e:40:
9d:be:90:89:49:2e:23:19:36:ae:b3:2b:cb:30:54:
ee:b4:36:6f:bf:33:84:cb:19:5b:1f:d1:86:2d:8c:
99:3c:89:36:09:44:65:7f:87:22:c8:0f:cf:a6:6f:
d8:dd:dc:d7:e4:a8:b6:82:f5:30:17:a9:dd:ca:87:
5e:98:df:70:45:65:09:b3:55:57:8b:ab:36:d5:05:
42:04:99:3f:b8:d7:1a:23:c0:31:be:9a:d5:a1:20:
0c:cb:41:d7:dc:3c:44:e7:9f:19:8e:71:04:3a:47:
6b:03:0b:72:8c:fc:d3:98:22:e8:1a:5a:ec:49:8f:
39:87:43:8b:fd:0c:38:32:8c:85:39:ed:ac:86:e0:
6d:63:4d:5f:79:45:d7:eb:24:9a:f2:42:35:c6:ae:
e9:19:a1:5f:34:5c:29:86:c0:88:1d:c0:23:54:d0:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7F:39:5E:53:95:57:87:32:26:F8:0B:99:B4:FF:65:01:D7:84:89
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:97:b3:ea:86:f6:0b:85:6a:01:1e:6c:b3:79:fa:8c:a8:a2:
32:79:9d:9d:bb:4e:ea:d9:44:f3:de:a5:c3:2a:d6:4f:7a:ac:
08:b1:ff:78:3e:ad:c1:21:95:f8:84:88:ba:e7:4b:5b:8e:d6:
8d:1d:12:a4:45:c4:10:ab:ac:23:9a:41:6a:b4:17:c6:dd:ca:
22:95:d0:2d:bf:44:b2:80:1f:d5:b1:97:5d:95:20:13:48:23:
05:d6:37:13:12:be:20:c7:29:10:4b:2e:0e:9b:54:c9:be:4d:
f0:58:a6:04:be:9b:28:1f:3b:c9:b1:84:3d:a7:06:11:94:7a:
0c:5b:23:77:0c:86:cc:25:e7:81:d8:82:f0:eb:e7:d0:35:4a:
dd:99:82:82:7c:8c:3f:32:9e:93:77:16:f6:58:30:7c:4a:bc:
df:d4:18:b0:34:98:b7:69:d9:98:5a:dd:e7:0a:fe:69:c8:e2:
57:a5:52:fc:6d:48:6f:cb:af:3e:46:bf:b8:14:bd:07:33:de:
f6:5d:52:b8:26:0a:b6:6b:19:b1:8a:17:40:f6:06:76:d0:27:
3b:ab:7d:60:21:a3:99:cb:1a:9d:ea:4b:a4:6a:6c:e1:90:34:
37:dd:02:1e:b5:de:ce:b0:09:51:f4:b5:ee:5f:27:07:0c:ee:
f3:7c:fe:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:12 2026 by rpki-client