Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
File: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft (raw, json)
Hash identifier: 9vEsEawCXgy/8vKMcsiUYUBjEedpLr9Otn0Lavip1QE=
Subject key identifier: 60:F4:54:EF:53:41:D3:16:1B:93:57:41:F1:6D:BB:19:62:70:B5:A8
Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
Certificate issuer: /CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Certificate serial: 019D28BB5441C5FBB28CE90A71ECBEAC864F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
Manifest number: 0FCF
Signing time: Thu 26 Mar 2026 06:00:58 +0000
Manifest this update: Thu 26 Mar 2026 06:00:58 +0000
Manifest next update: Fri 27 Mar 2026 06:00:58 +0000
Files and hashes: 1: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl (hash: x7jMB28SkETSse6CiWNQ5jTG0QnpXqwH8pRjz9NLm/s=)
2: vDD2m5C7Pq8JC2jJeptUPHTPiW4.roa (hash: IslrtVbkyC6BHr/5GuZpnn/vnO+GSJxpxZntKhzxnaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:54:41:c5:fb:b2:8c:e9:0a:71:ec:be:ac:86:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Validity
Not Before: Mar 26 06:00:58 2026 GMT
Not After : Mar 27 06:00:58 2026 GMT
Subject: CN=60f454ef5341d3161b935741f16dbb196270b5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:3c:9f:b5:82:ed:fd:f5:c9:75:18:aa:95:
43:cf:aa:5b:b8:fa:87:cd:e1:2a:15:1d:f0:79:f8:
24:4e:d1:85:c3:83:f5:7e:72:9f:54:fd:95:d5:ed:
9b:e6:3b:39:d4:a9:23:1c:27:c6:60:da:1e:85:20:
31:7c:bd:a9:f8:5d:bb:af:ce:0f:76:f9:b1:02:d2:
93:3d:a2:7e:f2:c5:93:ae:01:73:b9:76:df:2e:48:
12:ab:7a:ba:ca:ca:94:fa:12:8e:14:b4:43:a4:cb:
3f:f0:ea:73:9f:29:32:38:6c:b6:91:09:af:e1:e7:
15:fc:ec:f2:76:f5:97:a0:de:ff:f7:ec:9b:46:e9:
22:73:d8:ae:99:4f:67:e0:97:79:7d:05:d1:73:aa:
d2:16:5f:2b:15:fa:b3:b1:aa:2b:21:2a:21:88:2c:
0e:1a:5e:23:10:1e:38:8f:d1:fb:ca:45:7b:25:b9:
a6:54:fb:16:e4:6c:01:c3:46:3b:e8:ef:cb:fe:91:
50:2d:32:c3:5c:52:63:97:1d:43:de:fe:79:3a:f4:
60:f8:ff:8f:16:5e:ce:f2:1f:1a:e5:8a:c6:ac:3c:
4b:03:29:5d:bf:c1:19:dc:52:9c:b2:32:a5:bf:df:
3e:30:0c:c0:28:a2:69:27:73:bc:fe:4a:72:80:b1:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F4:54:EF:53:41:D3:16:1B:93:57:41:F1:6D:BB:19:62:70:B5:A8
X509v3 Authority Key Identifier:
keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e3:38:05:a1:48:18:61:8a:1c:ee:1a:bd:9e:0a:e3:2a:53:
5b:75:40:49:37:66:5f:a1:a5:68:69:7f:b9:6b:14:b8:18:07:
65:f1:81:44:ad:ad:bd:f3:72:67:e5:c6:b1:59:b1:f3:35:f4:
95:25:07:e7:45:12:a6:33:86:ec:57:d6:e0:71:a0:9a:7c:f8:
5e:70:7b:cc:cd:89:57:01:fb:34:56:bd:63:dd:ee:ba:71:50:
70:3e:41:79:c2:4b:33:a0:8b:2e:fd:fb:ec:30:99:e9:35:da:
8f:70:1b:f5:7c:78:3b:09:1c:ab:1e:cc:ad:44:3f:03:06:a4:
c6:98:65:87:c2:c3:ce:a8:bc:5b:57:c6:95:c4:cc:ed:6b:32:
c5:0e:63:6c:72:c1:f6:13:75:ba:8f:71:62:3d:0f:3c:56:aa:
ac:39:34:ad:6d:45:6d:a8:bd:fc:d6:50:43:63:04:b9:3a:6c:
36:35:f3:58:c9:5e:89:02:c4:e5:7b:66:8a:c9:3e:24:98:37:
cf:f9:9a:0e:52:ff:f4:07:3b:26:57:d7:75:f9:6f:7d:0a:b8:
c6:61:9f:9f:96:f4:70:ed:d2:1a:6e:42:3d:59:3e:cc:65:6f:
b8:39:6b:03:0b:a6:6a:39:a7:1b:1e:b1:d6:f2:07:3c:88:a8:
7d:c0:3b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:34:37 2026 by rpki-client