Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
File: 69siVHHy1uQQYLNBhXJUhUgQFLg.mft (raw, json)
Hash identifier: Iu4MaYHeJJLEOItGmDIVbiF0jVQNJqmKYPmaQJYPOek=
Subject key identifier: 43:B0:BB:75:BF:71:49:83:6F:A0:01:2E:69:15:A5:59:DA:9F:DB:E3
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial: 019D273AFBE5FEF557E064688430E00CA91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
Manifest number: 17E7
Signing time: Wed 25 Mar 2026 23:01:10 +0000
Manifest this update: Wed 25 Mar 2026 23:01:10 +0000
Manifest next update: Thu 26 Mar 2026 23:01:10 +0000
Files and hashes: 1: 69siVHHy1uQQYLNBhXJUhUgQFLg.crl (hash: Fjl9Q3eBv/K6MHf4BKBbrdrz8YoT/wgrhTFNbEAfq3g=)
2: 79f2iwLtrmRydXFTtc58ysq7PXU.roa (hash: /kHpLUM291G9o+Fyp/HVYlns3gOueQ1aYbjeKqPoOTE=)
3: cOOgTfeUDEMTH12FgsfATc70VpU.roa (hash: M3wjV6rwKEQJn04pkeYZAKa6kOWv8ol9iG8ZWPsCuY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:fb:e5:fe:f5:57:e0:64:68:84:30:e0:0c:a9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
Validity
Not Before: Mar 25 23:01:10 2026 GMT
Not After : Mar 26 23:01:10 2026 GMT
Subject: CN=43b0bb75bf7149836fa0012e6915a559da9fdbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:7c:08:b7:ed:98:9a:16:35:ab:dd:94:2b:
e7:b6:1b:72:94:87:d1:a2:eb:88:5e:f8:60:a1:c3:
c8:86:53:7a:c6:82:2c:32:07:a3:24:44:f2:9f:62:
dd:79:e5:ca:72:25:65:e5:40:83:8d:64:a7:d9:07:
71:98:3a:87:4d:83:9c:48:d9:b6:c2:11:b9:fb:26:
00:3b:56:47:0c:69:77:5f:0b:6b:cb:3e:f2:db:d3:
9d:75:0d:c5:77:91:68:ce:29:6b:a0:2b:ce:78:aa:
5f:a7:b7:d9:40:49:23:11:64:3e:5d:aa:ef:d4:79:
21:fd:a2:cf:6c:6f:eb:79:ea:30:bb:68:27:03:dd:
94:04:ad:24:0a:e5:23:38:c0:6a:eb:31:b8:db:e4:
8e:9a:f3:f6:24:2a:a7:c7:e9:b4:5d:8d:6f:64:f9:
dc:f9:31:74:bf:6d:ac:d1:66:ac:f0:1f:62:fd:1d:
9d:f6:b0:ba:01:c8:94:ec:3c:77:5a:6c:91:50:3f:
2d:2f:ec:96:b1:e4:2a:c6:a9:86:d8:05:e0:ee:89:
9b:64:00:2f:8d:c9:5d:5e:5c:de:60:e8:64:1e:13:
18:78:9f:75:77:d3:e7:81:73:c9:11:90:51:08:da:
af:be:8f:e0:f0:af:16:9b:90:61:bd:3f:db:e7:b7:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:BB:75:BF:71:49:83:6F:A0:01:2E:69:15:A5:59:DA:9F:DB:E3
X509v3 Authority Key Identifier:
keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f4:f6:53:9f:24:15:e9:68:d9:89:dd:36:f3:de:19:b4:de:
be:5a:e7:44:ce:5f:7d:71:54:00:46:86:f9:69:d8:c2:bd:15:
95:59:66:05:67:13:c1:aa:60:37:0c:51:d7:47:e0:f3:f7:47:
d0:ba:44:38:40:03:3b:a2:74:32:69:90:fc:ad:17:89:fc:07:
0d:92:1d:5a:45:22:e8:7c:f6:a6:54:40:30:18:ec:95:52:1b:
5b:b7:1f:1b:4e:b7:4d:71:fe:a2:8c:fe:81:db:0b:b6:b0:4a:
7d:eb:fd:73:8e:f5:25:6f:eb:80:c7:8b:b8:f8:54:4b:92:f7:
32:a9:98:3a:ab:88:ed:9b:8d:a9:07:2e:f2:e9:57:bc:eb:8e:
38:a8:e2:8c:44:22:4f:62:90:c3:e4:37:96:b1:58:0d:bf:7c:
67:fe:5e:c5:49:5c:db:15:1b:58:c5:60:4e:46:d1:87:70:e8:
39:ad:ce:63:7d:75:de:8a:f8:47:2a:f2:15:b1:b9:fe:59:2b:
1c:cd:a5:7e:80:66:c9:6c:01:77:61:9a:af:de:05:81:60:7a:
c8:1b:c4:7d:f5:14:37:4a:02:3d:f7:28:65:47:bb:f4:06:55:
d0:c3:18:b3:5f:f3:db:82:ea:83:ac:7e:6e:33:da:f9:15:dc:
94:c4:c8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:57 2026 by rpki-client