Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File: d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier: wtDd1U+2WuL5krRiAGIU7su1ifABS0NV2VzNo9bRuwY=
Subject key identifier: 78:AB:48:60:05:B2:AB:80:E1:6B:93:63:EF:52:CB:EF:2F:C0:37:5D
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 019D2704ABA4E3FCE6EB8D7AF240AFEE92B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number: 1063
Signing time: Wed 25 Mar 2026 22:01:50 +0000
Manifest this update: Wed 25 Mar 2026 22:01:50 +0000
Manifest next update: Thu 26 Mar 2026 22:01:50 +0000
Files and hashes: 1: 0gkjksOno670ocIFMbRjSDKIvKQ.roa (hash: 7fdQyOsucl3w/CcG9UB31TgK1ZGG4pW/88lMHFnh6NI=)
2: 91KPHlggwTaeQm7B9Z-AqzP9EBQ.roa (hash: IkXK2vJL4pQnTxIekZE8OSCq0z8UL2BTuoyyjhTkN4c=)
3: QcWwPEpe-P-scFp6iy4Zd8jPfjk.roa (hash: n7+TsjKCJzLkUr9shTyI7r/icRNSvOD74GCCpk5ZSUI=)
4: SOoKX4cNuYJIPao636suM6QbecU.roa (hash: AmP+tcOlMZhqBPlPO/PnVy1DrGZoadzcvOYUXfRfWD8=)
5: Tz7z7nnpOo-_7_49pU8TRQgx4D4.roa (hash: fX3u4dH9kXlBUEKXajJ7/RMZrYzYaBeRsNw5GTo8Vhs=)
6: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: IawtACTvICTEpfHDOXDyd6WqnF7n5QeoPIKT7M9jU9c=)
7: qBcLlywaD6m7lZXiWermZkxeWVc.roa (hash: auQTPfDUcRzWJ8RTz3z6nOVCI/Q9IjlAOX2YpbeFNMA=)
8: ve-jf9EP-jZkCjaun2Gx06psfDo.roa (hash: 5muddW+OaJvatwuoYErV6aaVeMSYh2Ga8iL+J5a6G3k=)
9: xdAaexAUdUDttJM21F7tUlAz2vs.roa (hash: VedRkQ44jOEPcPIUd0dHiyi/hpTJ8KF1xUzmzLpT6Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ab:a4:e3:fc:e6:eb:8d:7a:f2:40:af:ee:92:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Mar 25 22:01:50 2026 GMT
Not After : Mar 26 22:01:50 2026 GMT
Subject: CN=78ab486005b2ab80e16b9363ef52cbef2fc0375d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:b3:87:8e:35:68:57:a2:d1:10:2c:53:1f:
a5:23:92:ae:65:66:5f:a8:22:5b:cd:8c:8e:2b:49:
df:dc:23:99:d6:bb:12:18:a1:4a:85:51:93:58:4b:
21:1b:91:75:52:02:9f:a2:ad:e3:fb:fe:48:81:df:
f4:e3:ea:c1:71:66:c6:cd:94:1c:32:ae:94:e1:68:
43:d5:56:68:f3:ca:f9:6a:e1:4f:46:67:d4:3b:62:
04:8f:73:95:2d:76:44:34:f7:dd:18:5e:12:19:c7:
d7:36:f4:a3:f1:ff:14:80:9f:3a:bd:fd:c1:1e:e0:
b7:c5:3c:6c:aa:7e:c2:43:24:75:84:6b:1d:75:a0:
57:cf:8e:01:1f:60:02:48:1a:12:ac:3a:03:3b:72:
90:6d:a4:38:80:f4:e1:f4:d3:c9:e0:c9:9e:f0:f4:
ba:2f:44:a5:05:ed:0a:a3:cb:64:11:fa:bd:07:63:
f5:39:5c:13:c0:69:fe:71:8f:ea:10:14:e5:de:10:
89:39:a3:22:97:ea:1c:48:c7:1a:b3:aa:fa:9a:69:
b1:99:03:94:f7:c0:ce:35:2b:16:83:fc:80:31:a7:
b2:52:07:db:8c:6c:8b:5d:30:b3:42:5f:75:bd:64:
40:59:6f:a8:82:5d:20:8f:17:5c:18:9d:37:7e:9c:
44:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AB:48:60:05:B2:AB:80:E1:6B:93:63:EF:52:CB:EF:2F:C0:37:5D
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:90:79:db:9a:5e:5d:df:87:7e:4e:0e:5b:bf:c3:1d:76:17:
c4:ce:51:f6:61:40:27:84:84:70:f8:e5:ca:b0:27:0f:ad:0c:
b0:78:b7:e5:ae:b1:ae:7d:15:6d:ca:ad:c7:0b:6d:79:27:e2:
52:6b:12:f4:01:51:58:4f:98:48:d7:c6:77:96:8b:b0:ed:57:
82:e8:42:b6:6f:8c:a0:e5:93:fe:39:00:11:1e:8f:72:f0:50:
ee:cb:45:53:01:d6:65:c4:44:85:eb:5b:64:f7:78:83:b7:38:
5e:f6:a0:89:ff:75:b8:b5:aa:98:b4:91:bf:fe:78:15:51:c9:
9e:62:c6:6d:87:81:b6:58:ef:8f:5e:c3:0d:6a:76:c9:53:7e:
80:50:e9:d6:37:87:f4:20:e2:23:d8:58:9a:b0:55:be:e2:cc:
0e:58:63:c2:88:46:37:ec:3d:8d:ec:c0:61:e4:5a:07:4d:b1:
8b:3d:8e:dc:a8:e6:0a:1e:96:f5:51:b7:55:af:24:39:ac:f9:
8b:d3:ba:b2:51:de:0e:1a:bd:e2:46:99:bc:60:11:75:eb:df:
14:60:e3:f5:8d:8c:15:7c:ab:8b:c6:5d:8c:42:01:b2:8d:b3:
60:f9:70:e0:b8:9d:82:11:bf:b9:41:b1:6c:77:7f:64:d3:b5:
2b:92:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:59 2026 by rpki-client