Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
File: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json)
Hash identifier: VQqI3wUfZjjKwZKKEANuLUnMyrwxh9IVZ/N3SCv4uxE=
Subject key identifier: E9:F5:A1:07:E6:45:DB:9F:6A:F8:0B:4D:86:3A:99:09:92:36:4F:56
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Certificate issuer: /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial: 019D2884A8313576A6DE7E424D813CE158A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
Manifest number: 06CC
Signing time: Thu 26 Mar 2026 05:01:15 +0000
Manifest this update: Thu 26 Mar 2026 05:01:15 +0000
Manifest next update: Fri 27 Mar 2026 05:01:15 +0000
Files and hashes: 1: 6OqTpgmhzn6PJTKFB1lTcULSUt4.roa (hash: 0yR0XfZvnK3OQ/1YUSPxxfbZ0KMJ3RWvdqB7yb8/Z9c=)
2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: PesioOtnR4pJFPH5wFHroHBu+eHYNGEUlqLxcO42yVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a8:31:35:76:a6:de:7e:42:4d:81:3c:e1:58:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Validity
Not Before: Mar 26 05:01:15 2026 GMT
Not After : Mar 27 05:01:15 2026 GMT
Subject: CN=e9f5a107e645db9f6af80b4d863a990992364f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:37:b7:45:df:08:04:e7:14:81:53:ab:5c:
cc:82:1b:9f:44:36:19:94:81:68:6e:fd:2b:21:cf:
80:d3:c6:fe:8c:e7:42:05:c1:de:3a:bb:de:16:d0:
2c:72:46:25:8a:cc:f7:87:ca:ef:b2:95:95:69:6c:
f9:3b:c9:c6:20:fa:0e:44:09:f3:be:3b:91:e1:45:
c7:75:8c:b1:03:d7:7a:58:12:d9:8d:d7:2c:72:48:
ab:03:f9:da:4c:09:94:de:86:8a:ec:8a:f1:dc:5a:
9e:c2:18:de:0b:2c:8e:ed:d6:05:17:59:63:94:fe:
b3:8b:db:e0:e3:84:67:81:53:80:73:83:2a:5c:c7:
88:de:20:cb:e7:d0:50:31:fc:52:f4:fd:4f:52:e1:
a0:a5:6f:af:27:1f:2a:ac:61:80:d6:bb:3b:5a:99:
19:12:f8:38:ca:73:b6:0f:00:25:b0:3f:01:b9:22:
46:de:05:4a:9f:0b:21:46:dd:73:19:70:12:7d:e4:
a7:88:25:ac:cd:78:b3:c7:31:e1:3d:2d:79:7c:73:
32:7b:80:30:5f:89:ef:5f:0b:f2:c1:6c:db:c3:d8:
45:76:e5:4f:e4:8a:e7:35:34:a1:a8:53:5a:84:2a:
d3:bd:ad:5f:e3:62:cf:30:9c:7a:ba:2e:34:b5:82:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F5:A1:07:E6:45:DB:9F:6A:F8:0B:4D:86:3A:99:09:92:36:4F:56
X509v3 Authority Key Identifier:
keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ab:e4:cf:2c:31:aa:30:59:03:98:f8:d5:a2:26:79:7a:cb:
37:fa:5c:02:5f:bb:07:1a:8a:09:70:e2:01:6d:29:e4:87:a2:
c1:c0:5c:cb:c5:62:dd:db:b5:fd:62:20:cc:49:09:86:b1:fb:
3e:6e:12:d5:e7:19:4a:67:f4:f3:fa:28:f7:95:68:7c:e0:c1:
fd:8d:e0:21:ad:64:96:cc:e8:11:67:1d:0e:81:de:04:b1:53:
1b:e5:aa:c8:8d:85:36:04:22:35:a3:45:a5:e9:cb:90:be:b3:
a8:c3:d2:b6:60:16:eb:00:da:a9:1e:be:48:d0:a4:87:8a:ec:
5e:74:9b:d2:09:10:9a:b0:d5:77:8b:fa:25:6b:a5:67:92:0b:
e5:36:9a:1d:68:6a:8a:f2:01:91:d8:20:cd:ac:cf:ea:e4:70:
42:59:9d:57:52:25:80:a8:4e:2c:a7:48:10:38:41:8d:dc:ca:
c2:4e:1a:d7:d9:b1:b0:07:50:cd:c7:7b:92:e4:89:ad:f8:15:
b5:2a:c3:22:2a:ad:96:67:42:e0:27:20:ed:44:ca:53:82:67:
93:d6:47:6d:bb:d5:d2:5e:6b:d3:3e:11:6d:f8:31:df:99:71:
69:fa:92:05:b8:46:cf:98:31:51:09:83:d1:2b:5b:78:ed:38:
16:a9:d0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:45 2026 by rpki-client