Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
File: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json)
Hash identifier: QuNWcTFOww3eyiZVPDVpfV8mmeVBA30XEx7eafuVfmk=
Subject key identifier: D4:25:46:49:B6:6B:CE:5F:B5:C6:DD:4F:AD:1E:DD:4A:19:F2:79:C1
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial: 019D273AEC031FEEFDD4FA2037A2C714F5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
Manifest number: 060D
Signing time: Wed 25 Mar 2026 23:01:05 +0000
Manifest this update: Wed 25 Mar 2026 23:01:05 +0000
Manifest next update: Thu 26 Mar 2026 23:01:05 +0000
Files and hashes: 1: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: 5+D31LgVcw7auctnG0Ov7fz9sQbCFCZuachHiAnSqUk=)
2: Ew3S5Sfhv_PNXhxVof3aevMbKtQ.roa (hash: deUDIfKP8EAYYGoQ4lRaCxh8/fRxNHbmoAk7A20/nwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ec:03:1f:ee:fd:d4:fa:20:37:a2:c7:14:f5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Validity
Not Before: Mar 25 23:01:05 2026 GMT
Not After : Mar 26 23:01:05 2026 GMT
Subject: CN=d4254649b66bce5fb5c6dd4fad1edd4a19f279c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:45:e8:cc:4c:50:34:89:0a:5d:00:dd:60:
c4:49:33:cb:30:89:8a:9e:a6:fb:49:8a:1d:6a:17:
d7:fd:7b:de:e7:f5:37:03:cd:d1:11:d1:d2:a9:e0:
d1:5a:db:ce:7c:11:ff:45:dc:c1:95:ad:86:79:90:
8f:c1:0b:1c:a3:9a:9d:e1:70:91:3c:7d:21:fc:f5:
e8:84:cf:e4:66:0e:97:9d:af:8b:ad:10:a3:40:1a:
5a:23:77:33:ff:2a:de:e2:2e:5c:6b:66:d1:04:ba:
f4:2e:1c:5c:92:ab:3b:bb:e3:1a:c2:ff:81:19:04:
27:44:9c:0b:92:4e:d5:5f:68:cf:f6:bb:3e:86:e3:
cf:f6:18:19:2d:be:4d:02:17:54:a5:3d:0a:36:6e:
f0:5c:f4:24:43:d3:a7:71:6e:3f:00:2e:e2:95:3b:
7a:d6:84:58:c2:f2:39:c6:4f:bd:11:b9:23:51:bf:
65:c6:f9:a9:aa:34:db:9d:00:06:03:44:2e:60:25:
a5:3b:8e:63:1b:14:1d:e5:43:18:2c:31:53:0f:7a:
6c:32:30:09:ec:00:67:70:c8:33:ed:c4:b5:b9:01:
f8:bf:67:18:ee:fa:76:2a:6d:01:81:e2:d4:f4:2e:
08:02:2e:88:ea:4d:d7:9a:94:65:0a:25:b3:ed:40:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:46:49:B6:6B:CE:5F:B5:C6:DD:4F:AD:1E:DD:4A:19:F2:79:C1
X509v3 Authority Key Identifier:
keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ac:5e:75:31:8c:5b:a4:74:e4:3c:80:ae:b3:e6:9f:0f:a0:
80:6a:a8:42:be:76:d3:e2:de:dd:ac:53:21:95:96:0d:19:ae:
ef:1b:7f:34:37:fc:8b:9c:60:91:bd:f9:5f:0e:58:30:52:43:
cd:9a:27:c2:01:b4:ad:6c:79:cf:40:05:da:97:d2:4b:57:4a:
f8:59:65:95:72:1b:0a:bd:c1:90:48:14:12:58:7e:63:66:6a:
f6:67:e1:ad:0d:58:27:9d:4d:f7:8a:2b:a3:92:66:93:e5:ee:
dc:73:4e:ff:1d:15:5e:f2:b4:45:72:6a:14:7c:61:23:32:f8:
57:a5:29:ae:a8:66:03:e7:9f:5c:1c:5d:b1:4c:76:e4:c7:a3:
d9:67:0f:c4:ea:57:16:90:b8:64:df:72:66:6c:dd:cc:51:16:
62:6f:ad:dd:39:00:d0:8f:1c:57:e4:ba:22:31:77:b6:70:98:
59:8e:8e:b6:d0:8b:a2:9f:18:d7:43:b9:11:df:0a:9f:6c:e1:
5d:83:ff:9c:f8:3d:04:55:f2:9b:97:46:d2:d3:fc:05:02:75:
b7:11:cb:ca:3b:65:97:ac:46:a7:e0:1a:6e:7f:bb:4c:cc:b2:
89:98:07:2e:92:0f:74:e3:5d:8e:0d:94:3e:d3:3f:e4:a0:11:
a8:e6:19:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:37 2026 by rpki-client