Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: hvoOu3vKGcUW4est+PflPVBMuUYVPMHuouQqDvsJ5tY=
Subject key identifier: 0E:30:00:68:F4:67:F2:4F:86:71:8C:2B:2E:63:E1:52:E0:1D:7F:83
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 019D258310719FA262296BA53C70132F78E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 0991
Signing time: Wed 25 Mar 2026 15:00:39 +0000
Manifest this update: Wed 25 Mar 2026 15:00:39 +0000
Manifest next update: Thu 26 Mar 2026 15:00:39 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: w8qAjiAzqC6uF1NCRHZ2FeiKVuMYL7bd3DdbZmQkFQE=)
2: bbfdsDcnJI7l8XYTq2CjZ7GXkac.roa (hash: Zz0UmtBUzv4omIdkS3mEovbafENQWuqBsJq69kjW+GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:10:71:9f:a2:62:29:6b:a5:3c:70:13:2f:78:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: Mar 25 15:00:39 2026 GMT
Not After : Mar 26 15:00:39 2026 GMT
Subject: CN=0e300068f467f24f86718c2b2e63e152e01d7f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fb:87:84:74:67:20:bc:58:c3:c2:86:e3:cb:
e8:8c:d2:ea:a2:7b:bb:7f:e0:5e:ae:5b:04:9d:90:
b6:59:67:4e:b5:9f:5c:9b:a6:c9:d5:f7:5e:10:82:
b0:16:9b:59:ce:91:c9:2a:bc:2b:f7:00:49:e4:e7:
d3:79:cc:5d:75:0e:a6:7b:aa:ee:8a:e8:b5:af:01:
e4:cc:46:75:6f:fa:d6:91:06:e7:bf:8b:66:d2:c5:
d3:b8:20:fc:07:ab:2d:98:ac:c0:2c:a4:f1:d4:04:
3d:10:5a:52:ab:7d:06:2f:d0:24:f5:8b:26:44:61:
76:01:50:94:67:bc:40:f5:ec:44:ad:dc:7a:d2:ba:
23:68:6d:36:aa:a7:2b:a6:5a:49:69:95:c3:de:04:
67:de:ca:bf:16:e9:5d:1a:6e:12:6c:cf:f2:e6:c2:
6e:6f:ca:d8:43:2d:08:c4:d7:08:02:5e:7d:3d:97:
93:85:9d:39:97:20:5e:a6:21:55:9e:57:17:aa:54:
62:d5:7f:48:7b:c9:91:cc:23:61:57:8a:c2:c0:15:
87:30:be:05:a2:54:d1:08:12:3a:a1:cc:00:7e:39:
54:6c:d4:ff:30:e6:64:99:88:55:99:9a:55:8b:3a:
58:8c:73:47:fa:61:27:b1:44:94:4d:76:8b:33:84:
9d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:30:00:68:F4:67:F2:4F:86:71:8C:2B:2E:63:E1:52:E0:1D:7F:83
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ad:c6:5d:af:8c:02:57:b9:02:ba:6e:97:ca:af:6a:86:f9:
94:43:59:e0:ff:2a:e6:6e:e7:29:57:bc:47:7f:bd:34:8e:84:
69:09:cf:36:e6:a3:2c:ce:9e:b4:77:c1:7b:55:ab:0b:a5:b4:
1f:df:ad:1a:f7:bd:c5:72:c7:63:90:00:35:b0:bf:be:d0:e5:
25:a6:ee:53:57:bf:32:81:3c:58:34:71:f2:e5:61:98:12:19:
4b:24:73:38:f6:46:e3:b2:0d:ea:7f:b2:18:93:02:9f:58:ba:
3b:9c:f2:66:b5:2b:90:fb:fb:b5:01:a1:4d:bd:2e:35:57:59:
e1:e1:6e:26:d0:a1:fc:29:f9:55:23:aa:8a:2a:37:dd:13:7d:
cd:4a:ee:41:1a:33:ee:b1:6f:6d:9c:e4:5c:65:1d:34:06:9b:
78:95:7c:ad:3f:7e:6b:52:5d:95:53:08:86:74:38:c5:8d:b9:
81:34:f4:8f:57:c0:f4:8b:65:c1:86:0b:06:75:12:5e:3b:8e:
73:d0:b4:8a:5d:1f:1b:52:43:dc:52:25:f2:4a:38:3e:7b:b3:
d5:ab:69:cd:4a:e9:22:5b:e3:9c:8d:f5:ba:74:92:3b:84:43:
43:d2:6e:c6:20:69:6e:cc:1e:09:c7:11:87:dc:7c:0d:09:ee:
69:5c:00:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:05 2026 by rpki-client