Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
File: D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json)
Hash identifier: EQgzRBJ4zXuDFtWc36JEPOvbXgow2waySoXG96U8M2g=
Subject key identifier: C3:84:ED:8C:0D:E1:B1:38:EC:DD:20:13:31:DB:38:B9:76:1F:E3:5C
Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Certificate serial: 019D2884E0D69921A639C5ABB19E3DF7F7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
Manifest number: 0871
Signing time: Thu 26 Mar 2026 05:01:29 +0000
Manifest this update: Thu 26 Mar 2026 05:01:29 +0000
Manifest next update: Fri 27 Mar 2026 05:01:29 +0000
Files and hashes: 1: 79yWfe1C0oJyorvH1Ndj5_ksS2E.roa (hash: VEEzicoUwIVdfyy7u/W5/zZAs5snmAOXbsnXFY4gVR0=)
2: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: hC0lN5U52H/2X1BMWVcybvKsoDtA1QItUaPiMOy6N5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:e0:d6:99:21:a6:39:c5:ab:b1:9e:3d:f7:f7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Validity
Not Before: Mar 26 05:01:29 2026 GMT
Not After : Mar 27 05:01:29 2026 GMT
Subject: CN=c384ed8c0de1b138ecdd201331db38b9761fe35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:e4:de:c4:f5:df:ca:14:d3:18:45:7b:6d:
9e:5c:31:82:93:8b:70:e0:ce:5a:d9:15:6c:34:2c:
c7:0f:e8:2b:4f:fc:40:c5:8a:fc:26:97:f9:8d:ea:
35:8e:69:e6:d3:ed:f6:e8:c0:a0:c7:8f:d6:6b:76:
0e:2f:97:a3:5c:8b:d1:73:de:97:9e:20:a7:8e:ce:
52:06:ee:75:bb:3c:c4:61:55:1a:00:46:2d:3f:6b:
91:87:c1:64:d9:6b:72:a5:63:1a:f0:bf:c1:a8:27:
52:83:e5:ea:8b:d8:bb:a5:38:20:08:6c:92:50:41:
df:ba:f9:5d:8c:3f:8e:84:0a:59:23:c3:5c:7e:8a:
6f:67:76:a9:b7:24:f2:c5:c5:f5:96:46:05:5d:59:
46:02:43:97:f9:ec:d7:6d:11:f8:17:29:16:ba:e1:
75:a0:83:78:c5:5b:09:7c:33:c1:ce:d1:08:af:7a:
60:dd:ac:d5:7b:18:65:28:fb:f7:78:04:bb:61:45:
b8:fc:a0:a4:a2:c5:15:1d:51:8f:7f:ec:4d:aa:4c:
07:56:85:54:bb:b5:6b:5e:57:91:dd:69:da:2d:fb:
fb:d6:5f:c4:76:b3:38:ff:b8:08:fb:4f:2c:f2:52:
47:c3:22:4f:af:11:d4:27:3f:cb:f7:e2:b7:96:77:
0d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:84:ED:8C:0D:E1:B1:38:EC:DD:20:13:31:DB:38:B9:76:1F:E3:5C
X509v3 Authority Key Identifier:
keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:4a:cf:3f:2b:19:26:93:9f:bc:f7:49:e5:d4:f4:c3:60:de:
73:1c:81:96:fe:b4:15:b5:fd:fa:f2:64:33:a0:f8:e2:21:c6:
44:6f:71:16:2d:09:83:a2:39:ee:60:64:77:76:fe:3e:ea:7d:
09:c4:f9:b0:d9:76:41:b7:fc:cc:5f:c8:98:32:f3:6f:ff:c3:
00:81:e6:f1:47:a6:14:8f:c4:8c:05:d5:ac:f1:12:bc:f9:bd:
3e:8a:1a:43:a6:22:e0:be:5c:6e:0b:93:b6:7a:28:53:e6:71:
93:ed:cb:78:80:69:fd:7b:5c:d8:3d:ba:13:03:4d:f6:e2:11:
97:02:3c:65:01:7f:15:28:98:7f:07:13:35:09:7f:cf:56:82:
f8:c0:c6:9d:a5:bb:ec:d8:ea:ab:28:c9:3f:44:99:3f:b5:31:
a0:a7:55:37:e0:51:1d:dd:70:bf:8c:59:07:f3:f3:a2:03:e1:
72:d2:72:7a:d5:92:d3:ac:6a:50:79:15:c1:35:b4:2a:68:25:
ab:4d:08:7c:5c:ce:2b:b7:f4:ed:60:76:34:7a:01:ce:45:38:
ab:6b:bb:56:9e:1a:67:c1:6b:83:32:b5:eb:df:de:4f:22:b2:
22:61:54:b7:de:0f:06:be:fa:c4:ed:1e:29:43:ae:db:85:f0:
77:b6:27:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:58 2026 by rpki-client