Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
File: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft (raw, json)
Hash identifier: jxGyyodNkS9BJUC9dS4kdoTlsmXRvQUkOxG/KXLYviU=
Subject key identifier: 99:26:1B:02:9C:0A:6D:75:0B:18:21:78:99:14:E7:25:6F:89:3E:C4
Authority key identifier: 0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
Certificate issuer: /CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Certificate serial: 019D2695BE08E9EBC599A5055D4CD58A73F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
Manifest number: 0296
Signing time: Wed 25 Mar 2026 20:00:40 +0000
Manifest this update: Wed 25 Mar 2026 20:00:40 +0000
Manifest next update: Thu 26 Mar 2026 20:00:40 +0000
Files and hashes: 1: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl (hash: LOEjQbMD5DSKgEvCjwqkfAKdhYx6DAmF3aMmoWJG39M=)
2: w2RkZIyXNqzrvFHvVSZFRm-pJFQ.roa (hash: 1g4lPlIgbxd4u2cE0VtdggkYIEEI5tatrW6BetCUOgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:be:08:e9:eb:c5:99:a5:05:5d:4c:d5:8a:73:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Validity
Not Before: Mar 25 20:00:40 2026 GMT
Not After : Mar 26 20:00:40 2026 GMT
Subject: CN=99261b029c0a6d750b1821789914e7256f893ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:d6:77:bc:35:32:98:68:22:08:86:d2:2d:
ce:f6:9c:11:e4:b6:c3:4f:b1:51:06:e1:5e:48:5b:
67:0b:a9:c4:ac:dc:85:a4:2d:4e:dc:05:72:ec:12:
c8:d6:ff:03:bc:0f:a5:9f:4d:e4:b0:78:dd:77:70:
80:9f:1d:97:22:e1:23:4d:08:1c:a5:81:42:94:8b:
35:10:1b:85:e3:44:eb:8f:85:df:63:9f:02:85:68:
c6:2d:35:96:38:02:6e:48:fe:36:04:bf:de:c8:df:
7d:bd:76:8f:11:73:d7:28:0e:ba:9f:79:c1:7e:e9:
2d:ac:8e:88:af:df:df:54:67:40:dc:2f:15:6f:3c:
15:85:50:05:39:ec:60:0b:04:43:e7:ed:1b:0c:76:
54:4f:6f:45:45:61:cb:53:5f:4c:08:fc:fb:7c:a1:
92:c6:13:db:21:37:b0:cb:1e:0c:cf:0e:5c:74:40:
aa:2e:57:65:f3:6f:33:1e:90:30:6d:41:61:16:fa:
42:ac:f1:f2:83:73:da:58:a8:75:b4:67:80:7b:db:
71:23:5c:3e:0e:f3:30:07:92:50:88:4d:c6:db:3c:
3d:5a:4f:59:ed:5d:f2:2d:d1:d9:fe:35:16:fc:e9:
01:ed:a8:6d:9c:59:ef:fe:a7:51:a7:8e:17:1a:94:
96:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:26:1B:02:9C:0A:6D:75:0B:18:21:78:99:14:E7:25:6F:89:3E:C4
X509v3 Authority Key Identifier:
keyid:0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:55:61:17:8c:9d:41:19:ca:8a:ea:76:a0:dd:fe:e0:5e:84:
6a:71:a8:1c:5e:60:ba:d3:fb:6a:22:ba:17:a2:34:29:a1:b2:
ec:e0:9f:63:3f:af:94:8c:09:a2:fa:cb:4b:cb:74:d3:2d:f0:
00:6b:a8:14:7e:06:cb:79:3a:83:fa:71:f8:7c:3b:c0:b5:1d:
e7:4e:58:27:21:db:c4:86:18:66:99:36:cb:eb:4c:6e:c8:5d:
f7:02:b1:2e:56:db:63:06:71:46:73:58:59:16:d7:5f:71:3c:
46:3c:4b:9d:df:e6:21:70:f4:36:a7:d2:62:d5:a8:b3:87:f1:
71:43:7d:07:e4:f8:d7:29:3a:7c:57:7b:d1:c2:79:eb:02:08:
7a:9b:d6:72:54:06:f4:a7:c2:f3:0f:66:10:3c:b8:a7:18:2c:
56:74:2c:77:bf:5b:44:c0:0b:86:66:28:1a:ed:fa:99:79:76:
d4:75:ba:f1:a4:e9:67:0b:91:ea:b4:c6:4a:f2:ee:38:fa:cd:
33:e1:81:7a:63:0d:5b:4e:86:0a:52:19:dd:aa:80:a5:c6:c9:
6f:4a:5b:5c:aa:4f:cb:f4:7d:6d:ff:bf:38:53:aa:e3:dc:df:
f6:d5:11:c7:2d:ad:a7:ca:82:19:86:d5:89:40:b6:33:b3:18:
64:64:df:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:00 2026 by rpki-client