Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: 87AQ2vVNeXJPLs5BHRphoLvb/XWR5TB10EmoRgU6DoQ=
Subject key identifier: 63:07:88:9F:A9:A1:5F:E9:0D:7A:36:37:39:1D:22:D3:EC:51:83:5D
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 019D29298255B351B7B4D162A20ED98A5208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 073A
Signing time: Thu 26 Mar 2026 08:01:19 +0000
Manifest this update: Thu 26 Mar 2026 08:01:19 +0000
Manifest next update: Fri 27 Mar 2026 08:01:19 +0000
Files and hashes: 1: 1ULsjrhU_Mgs_8Mvd-oE1b7ANaE.roa (hash: BPqaZcuEdD+lQrMI+iPU/GW6APEbwg38yW1mZjGwXr8=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: LhuSFqwD5vbUAqe5EV7nVcogLig2Klt6wpSksnDsrmw=)
3: pXo0ZUaV-y6EDCcUoSCUhqpPURU.roa (hash: EuVKLvC6yGpoLeqj+M0pu9788Rfc943eOWrQgVLBCHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:82:55:b3:51:b7:b4:d1:62:a2:0e:d9:8a:52:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Mar 26 08:01:19 2026 GMT
Not After : Mar 27 08:01:19 2026 GMT
Subject: CN=6307889fa9a15fe90d7a3637391d22d3ec51835d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:0b:1e:84:10:14:bf:8d:6a:a4:ba:00:27:
b4:59:83:04:4f:09:17:54:43:eb:bd:6d:54:67:32:
05:02:77:f8:bc:93:64:fa:83:68:a4:08:e0:d7:b2:
45:5a:9a:dd:31:61:81:ec:1d:2a:55:ce:de:69:4b:
1a:e6:49:f2:e5:c5:67:c1:5a:f6:4d:16:60:17:c8:
ff:93:62:8c:9c:8f:c0:d3:42:ba:ef:cb:48:05:ef:
fb:20:a3:9b:e1:1c:61:ad:39:f4:91:67:47:f6:8f:
3d:da:64:80:be:ea:9e:ff:dc:5b:cb:e4:87:75:6b:
b0:46:69:77:2e:f1:1e:64:9d:32:41:72:44:80:e9:
f4:b4:c2:83:56:1f:4c:c7:28:90:1e:52:87:58:2e:
03:de:11:4f:6e:cf:89:3f:d6:e2:4e:db:84:bb:e8:
8a:db:21:63:52:a0:c8:5e:00:a0:b7:72:4a:91:98:
57:eb:c3:c6:3f:d1:93:90:ee:57:81:4b:cf:d4:28:
3b:09:3f:52:d4:49:fd:e1:49:46:91:e5:a0:77:c3:
18:03:e7:88:99:45:aa:81:88:cb:15:39:f3:22:66:
38:a6:54:74:fc:5e:f5:be:91:e3:b2:a6:65:b6:8e:
0c:a9:45:35:57:1e:c1:46:34:fe:08:3a:47:4f:ff:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:07:88:9F:A9:A1:5F:E9:0D:7A:36:37:39:1D:22:D3:EC:51:83:5D
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:de:7d:ea:d0:39:3b:77:94:75:d0:0e:95:21:04:0d:e1:c8:
59:f7:78:9c:3b:78:a6:46:02:48:59:54:55:d9:1b:9e:da:4e:
9e:9a:c9:6b:65:57:3b:fe:bc:f9:92:99:d9:d4:78:43:26:0d:
38:55:5a:ec:d9:f4:2e:8a:26:ca:05:ce:41:ab:6e:80:d8:29:
ca:bc:5a:d1:90:42:b7:45:93:9a:22:b8:6a:ba:a2:9f:14:bb:
62:1b:66:2f:f4:dc:95:1a:dd:52:59:63:f7:41:d3:0f:c3:bc:
09:e1:d5:51:95:24:8e:3e:f6:7f:69:30:c3:ac:2b:b3:e6:31:
5f:ab:0d:bc:78:99:25:83:63:d0:b1:c1:c9:84:4f:c3:d4:80:
62:69:df:7d:f0:c9:20:13:bd:e5:9c:25:30:12:23:c2:68:5b:
92:16:9a:18:c9:2d:74:c1:e8:a6:80:4a:1f:3d:e9:ec:89:e4:
ea:5b:a1:82:97:0a:81:3d:be:2b:e6:0a:1d:18:20:37:39:83:
d2:46:2e:9c:79:d6:a1:56:6f:4f:7d:63:3d:72:aa:3d:0f:61:
7d:eb:0a:1f:07:ac:e1:62:63:ba:42:7e:7d:e2:ac:10:d8:bd:
9b:ab:1a:2f:38:8d:c6:02:3c:0a:51:0e:ef:dc:a5:2b:68:c0:
08:dc:92:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:07 2026 by rpki-client