Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
File: d-PCkAtZl1QoPyfztOjX9sRRCXI.mft (raw, json)
Hash identifier: n2ynn+wL89UR0fK+/rwSQCeDPqvSDJzI5woS1NcSjlU=
Subject key identifier: 02:5A:9B:0E:0E:BA:B2:62:64:EA:C8:FD:33:F5:82:2E:3D:65:2E:3C
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial: 019D2704E291551F3F472AA39E7825DBD05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
Manifest number: 0FD9
Signing time: Wed 25 Mar 2026 22:02:04 +0000
Manifest this update: Wed 25 Mar 2026 22:02:04 +0000
Manifest next update: Thu 26 Mar 2026 22:02:04 +0000
Files and hashes: 1: EGK4nb9z9VfWmRRiWLjjvzCPL0k.roa (hash: 6m0dtYv3ZvmHrMVqOYfbNP/IRoFizFOn4VneAK9Wapo=)
2: d-PCkAtZl1QoPyfztOjX9sRRCXI.crl (hash: wOxhKStBERo+LI1gudzlQBN79qnP1g45UCe1K0nDhuw=)
3: ebEe0KFXRt6CKgcr6dQsEMc5q2I.roa (hash: npVCU+u49BuM8enRn8nrbB2PIwcLlnC6iNP5aZaAass=)
4: zvfze04wd9Ww6fC_EKoJBvHb03A.roa (hash: hqV4t/kgHH9kucLz+TkShbpTOt1VzgMM/WaloxQJWb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:e2:91:55:1f:3f:47:2a:a3:9e:78:25:db:d0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Validity
Not Before: Mar 25 22:02:04 2026 GMT
Not After : Mar 26 22:02:04 2026 GMT
Subject: CN=025a9b0e0ebab26264eac8fd33f5822e3d652e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:62:b9:64:1c:75:4b:48:92:67:9c:6b:ea:
ae:d4:22:e9:ca:c0:51:9f:d7:f4:06:25:ef:6d:93:
df:d4:55:91:e8:11:39:91:1f:66:38:13:81:a6:3f:
41:bd:d5:bd:6c:6b:c8:b9:6b:40:de:2b:01:be:93:
26:bf:68:28:af:83:27:a7:8f:5c:03:d2:7a:f2:c5:
b0:42:89:f2:e2:be:e4:ab:d8:9f:15:19:83:03:e3:
97:59:3a:8c:99:8d:d8:f1:b7:d1:72:fe:a8:2a:3b:
fc:b7:68:e5:6e:94:96:7f:8a:fb:32:2c:0c:b4:f7:
5f:f9:a6:50:c7:01:a2:53:fd:11:f8:a4:cd:7a:77:
6a:6c:3b:68:b2:c5:07:06:33:0f:a0:c2:a5:29:bf:
be:f7:04:95:10:1f:5f:ee:1a:a0:35:01:73:76:ca:
dd:1d:94:f4:94:5c:b4:dc:ae:50:22:8d:cc:87:ba:
57:4d:28:6a:24:9d:55:3a:56:2f:b8:22:1c:2b:05:
e8:9c:46:22:7a:ea:ec:e4:e3:28:bf:21:e5:c9:94:
46:41:30:ce:6d:1f:e3:e6:0f:c1:b3:c7:41:a7:ef:
7b:b8:2b:42:df:75:59:74:d6:2f:2f:51:23:21:82:
4a:de:a6:37:3b:64:54:33:c8:ae:6a:f7:df:e0:93:
20:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5A:9B:0E:0E:BA:B2:62:64:EA:C8:FD:33:F5:82:2E:3D:65:2E:3C
X509v3 Authority Key Identifier:
keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:84:50:80:c9:2a:22:05:56:14:be:44:4e:24:75:64:63:06:
12:f6:f3:ee:34:32:22:99:d5:f1:7c:09:0a:6c:00:e2:2f:b4:
ed:7f:d8:4f:ee:a3:00:55:fb:29:f7:c5:68:49:1a:e7:4c:97:
c6:58:0c:31:85:8f:c2:fa:89:a4:14:f6:38:5f:5a:88:b2:15:
cf:fa:bb:9a:98:ec:38:cb:b9:34:6b:1e:f4:3c:a9:45:08:28:
6a:0f:24:60:8b:e1:28:8e:29:e5:bf:b8:f8:84:98:d3:88:d1:
60:ff:a1:d6:9d:a6:62:b1:c2:1d:e6:36:7f:87:95:ec:5a:be:
ea:19:ac:7b:d0:6f:dc:5a:4f:c1:8c:7d:04:1f:c9:87:17:16:
7b:f8:47:a0:72:d6:9d:48:3e:11:49:29:cb:aa:48:16:09:94:
f5:3d:c4:10:d0:45:53:e1:3c:20:c5:da:6a:ff:bf:43:f7:ce:
16:c6:1f:65:2a:bc:26:3a:15:49:8d:6d:50:bd:06:fd:81:db:
e8:2e:b4:76:0a:c3:81:89:ef:3a:f5:c7:03:32:c9:b1:e4:99:
6c:2b:35:ec:78:be:c4:31:de:91:a3:b7:f8:3e:ba:8d:6e:7c:
e7:83:db:1b:e0:88:b1:84:4d:ce:a4:6b:1e:38:27:e0:f0:95:
08:09:a1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:25:08 2026 by rpki-client