Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
File: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json)
Hash identifier: ZT/Lm+MbzvRVl2vgPYdsZLjiHHznss5ZhVS6IHDVeU0=
Subject key identifier: 6E:DF:87:15:48:66:7A:D5:8B:35:04:AD:34:5F:36:B6:64:C8:4C:D6
Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
Certificate issuer: /CN=d2c17db099bd419eba552a37704deeed3b2e303b
Certificate serial: 019D28F244CE5E283CFEB8D1AD7C278B4828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
Manifest number: 0674
Signing time: Thu 26 Mar 2026 07:00:59 +0000
Manifest this update: Thu 26 Mar 2026 07:00:59 +0000
Manifest next update: Fri 27 Mar 2026 07:00:59 +0000
Files and hashes: 1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: 9GREa3EJdGRdqiBCsN80lMIlQHFz+n5wm/4/2uJbfsg=)
2: 1-MrxZrcPXM7BvaVdVabElQiwAhg.roa (hash: 5Yrq+V+8IPQZLxO9mgzwmCCXtczV+ZsgweXRxHjq37Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:44:ce:5e:28:3c:fe:b8:d1:ad:7c:27:8b:48:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b
Validity
Not Before: Mar 26 07:00:59 2026 GMT
Not After : Mar 27 07:00:59 2026 GMT
Subject: CN=6edf871548667ad58b3504ad345f36b664c84cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:79:ea:16:c8:d8:bc:78:36:c8:06:dc:d3:
c3:8f:a1:00:0e:5b:8b:47:61:03:ca:d3:90:b5:dc:
fb:a2:21:ca:d9:a4:2c:ec:e8:2b:19:60:16:0e:85:
d6:e7:96:8a:07:8a:6b:10:f9:d2:fa:9b:76:e7:ff:
cc:76:15:92:97:1e:8e:e7:b9:4f:e0:2e:b3:f7:8a:
c2:b9:c6:ee:ad:36:fe:33:08:36:aa:8f:ca:60:1d:
cf:fd:fe:1f:fa:7d:9e:e8:f1:4e:d2:c1:80:9a:74:
e6:e6:7f:70:1e:04:ef:7d:b7:1d:80:b7:c5:e7:9b:
bb:53:fc:91:09:8e:e4:2b:8a:9d:8d:79:be:8c:75:
4c:24:08:ac:5a:bd:c2:e5:bd:3d:75:d2:9c:e4:70:
73:31:53:ba:f4:01:e7:89:79:21:6b:dc:33:f7:4b:
10:1d:9e:eb:7e:ba:ae:69:d7:a5:91:6a:15:4f:47:
02:68:af:b5:61:92:89:17:b3:1d:11:c1:39:67:99:
c7:95:bb:29:a6:36:bb:a1:ce:97:7e:0b:ac:13:ab:
ee:b9:92:31:45:09:9f:54:9b:d7:37:e9:66:05:f4:
91:09:b6:79:23:a3:65:49:be:5f:a0:4e:36:a6:5b:
8d:1a:a1:d3:3d:04:69:11:bd:90:12:9a:43:96:fd:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DF:87:15:48:66:7A:D5:8B:35:04:AD:34:5F:36:B6:64:C8:4C:D6
X509v3 Authority Key Identifier:
keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c3:cb:df:00:26:93:d2:c1:46:75:d0:dd:3a:ef:e7:ea:f1:
83:f8:9c:41:ad:c8:07:e5:4b:59:d6:0a:f7:22:f0:b8:1c:1a:
bd:7b:87:18:34:10:de:90:0f:96:35:d4:87:e0:2c:8a:ce:01:
de:1e:24:3e:6a:4a:d9:4f:3f:f1:5a:8b:a5:69:f5:3a:7c:58:
a3:ce:04:45:7e:6d:bb:69:9e:fb:e0:f6:83:b8:cb:aa:4d:e0:
fe:a2:e6:80:64:27:58:43:6d:99:9d:bc:a0:7e:dd:cc:be:56:
8d:0f:55:a8:f9:38:39:4d:b3:44:33:71:14:97:5f:ed:d0:74:
83:c5:c4:f3:77:0a:b8:82:9b:86:31:fa:50:0d:75:5a:07:e2:
d7:b0:b3:d3:dc:77:d7:28:92:65:a1:34:a0:8d:6b:fa:f9:6d:
32:eb:fc:5b:3b:e5:fa:c7:0d:b6:7b:aa:26:2d:bf:2a:ae:bb:
f0:58:73:2d:d0:9f:dd:2e:26:48:f2:1f:86:41:24:d0:db:45:
bd:fc:c1:b0:a6:3b:04:3c:4c:4d:16:3f:75:7c:d0:62:0e:55:
a1:b2:e0:f7:88:0c:0d:68:77:99:69:06:99:3b:32:f9:6d:11:
62:c9:82:72:40:2e:9f:b6:ce:e4:36:a6:01:32:56:d5:17:d8:
ce:17:30:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8kTOXig8/rjRrXwni0goMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYzE3ZGIwOTliZDQxOWViYTU1MmEzNzcwNGRlZWVkM2Iy
ZTMwM2IwHhcNMjYwMzI2MDcwMDU5WhcNMjYwMzI3MDcwMDU5WjAzMTEwLwYDVQQD
Eyg2ZWRmODcxNTQ4NjY3YWQ1OGIzNTA0YWQzNDVmMzZiNjY0Yzg0Y2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKd56hbI2Lx4NsgG3NPDj6EADluL
R2EDytOQtdz7oiHK2aQs7OgrGWAWDoXW55aKB4prEPnS+pt25//MdhWSlx6O57lP
4C6z94rCucburTb+Mwg2qo/KYB3P/f4f+n2e6PFO0sGAmnTm5n9wHgTvfbcdgLfF
55u7U/yRCY7kK4qdjXm+jHVMJAisWr3C5b09ddKc5HBzMVO69AHniXkha9wz90sQ
HZ7rfrquadelkWoVT0cCaK+1YZKJF7MdEcE5Z5nHlbsppja7oc6XfgusE6vuuZIx
RQmfVJvXN+lmBfSRCbZ5I6NlSb5foE42pluNGqHTPQRpEb2QEppDlv0BJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7fhxVIZnrVizUErTRfNrZkyEzWMB8GA1UdIwQY
MBaAFNLBfbCZvUGeulUqN3BN7u07LjA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83Y2JhNjItNzdkMC00MTE4LWE0YzUt
YTEwNzZkMTI3ZWM2LzEvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83Y2JhNjItNzdkMC00MTE4LWE0YzUtYTEwNzZkMTI3ZWM2
LzEvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMPL3wAm
k9LBRnXQ3Trv5+rxg/icQa3IB+VLWdYK9yLwuBwavXuHGDQQ3pAPljXUh+Asis4B
3h4kPmpK2U8/8VqLpWn1OnxYo84ERX5tu2me++D2g7jLqk3g/qLmgGQnWENtmZ28
oH7dzL5WjQ9VqPk4OU2zRDNxFJdf7dB0g8XE83cKuIKbhjH6UA11Wgfi17Cz09x3
1yiSZaE0oI1r+vltMuv8Wzvl+scNtnuqJi2/Kq678FhzLdCf3S4mSPIfhkEk0NtF
vfzBsKY7BDxMTRY/dXzQYg5VobLg94gMDWh3mWkGmTsy+W0RYsmCckAun7bO5Dam
ATJW1RfYzhcwFw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:22 2026 by rpki-client