Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: TQCBtfBigS/K95O8rBNAnCTedoTuZefuNKD9eE7hYIk=
Subject key identifier: 5A:40:B1:16:8C:31:87:87:C5:8D:E6:E3:AC:67:85:82:63:DC:C7:34
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 019D2628117B8A553B32FA37289731141EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 131D
Signing time: Wed 25 Mar 2026 18:00:53 +0000
Manifest this update: Wed 25 Mar 2026 18:00:53 +0000
Manifest next update: Thu 26 Mar 2026 18:00:53 +0000
Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: UTlAlV+WYuGkR16hFvDQonidTThZrT/L2hQilzKH6M8=)
2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:11:7b:8a:55:3b:32:fa:37:28:97:31:14:1e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Mar 25 18:00:53 2026 GMT
Not After : Mar 26 18:00:53 2026 GMT
Subject: CN=5a40b1168c318787c58de6e3ac67858263dcc734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:3d:96:49:82:c0:87:77:e8:f2:2f:87:10:
6c:ba:37:fe:e5:94:d3:81:6b:c2:bd:4a:af:00:1b:
d4:53:1a:6a:9e:76:e9:fa:67:4d:c2:7e:39:cb:5b:
07:3d:2e:3a:5c:23:f9:b3:17:5e:f1:2d:fc:22:5b:
d0:9f:a5:e4:d5:ae:41:62:84:e4:9d:f8:95:83:42:
dd:94:f4:ad:b4:d5:19:3c:ab:ff:3a:8e:d8:dd:61:
26:24:08:8a:11:4d:ee:50:24:a0:54:38:1b:c5:dc:
8f:31:28:d9:de:4a:30:01:61:a3:7e:e3:d0:7a:b9:
9c:00:05:dd:0e:55:fa:25:68:71:29:90:ea:b7:96:
e0:31:23:d4:34:e5:58:68:91:17:2e:da:9d:4e:88:
22:d3:ec:43:d9:b0:e9:f9:d9:e4:d4:58:b8:bd:10:
16:54:21:16:be:3b:05:2b:e6:d8:8f:9a:e9:4a:bd:
89:9d:e3:19:5c:e7:fb:b0:5b:7b:4c:d6:b1:45:5e:
44:51:77:0e:71:93:cb:36:de:10:ba:d8:c0:f5:9f:
bf:b5:5c:8e:28:ef:f4:a4:18:50:6e:34:bf:82:b8:
3a:63:ee:78:3e:cc:7e:bd:90:c8:2d:aa:1c:9f:72:
18:e4:f7:9a:89:d3:ab:35:5c:4c:fa:00:33:6b:5e:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:40:B1:16:8C:31:87:87:C5:8D:E6:E3:AC:67:85:82:63:DC:C7:34
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:38:04:75:1c:1c:f3:ae:ce:1f:7e:47:7a:a6:5f:d3:b4:29:
9f:a2:87:94:d2:e3:17:ce:b9:72:0c:b8:bd:97:14:06:7b:fc:
5d:e0:95:80:fa:c1:f0:f2:72:21:e1:98:40:3b:39:e2:2d:9d:
2d:ac:e4:57:15:6f:f8:4f:6b:e2:cb:35:60:8e:2c:61:f2:91:
8a:10:11:e7:69:9a:44:c8:4f:c4:a2:ef:c9:df:8b:ac:bc:60:
e3:19:44:f4:8d:12:03:2e:3d:83:2a:b5:b4:e2:d9:a2:15:2a:
1f:34:c0:f5:1e:91:47:ca:2e:c2:49:a7:1a:f5:6a:98:5d:1b:
8f:bf:f8:87:7f:1b:23:0c:21:82:59:56:a4:2b:f8:e4:3e:47:
d1:8c:b8:ce:2a:2a:df:c0:69:f9:78:4e:32:2e:cd:dd:7c:63:
2e:7e:ff:ee:59:45:5b:06:a5:78:6b:fd:83:7d:0f:f4:f4:9c:
33:ca:87:a0:ac:5f:20:c1:a2:a3:5f:b0:f6:89:50:d0:b4:fa:
66:02:30:69:7b:f2:96:18:65:ce:ad:b1:6b:f8:91:a7:18:96:
17:b6:93:23:91:d3:ac:78:28:06:0f:f6:91:5a:ef:25:33:6a:
13:cc:cd:b0:5b:25:84:27:db:e9:a5:b5:46:a8:51:e4:ee:cc:
91:e8:75:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:13 2026 by rpki-client