Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
File: fD2KpDg1BKMa_0sAaBCga88DBa4.mft (raw, json)
Hash identifier: K9YRcWoTZxEXyCFaVAyr45GQh2QQaDWLjhoDps9Xkb0=
Subject key identifier: F4:9B:73:B6:9B:76:C0:03:77:58:69:55:75:B9:0D:6E:1B:FB:36:C9
Authority key identifier: 7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
Certificate issuer: /CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Certificate serial: 019D2771F12AA1C30503BA5AA91D181A553C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
Manifest number: 1462
Signing time: Thu 26 Mar 2026 00:01:11 +0000
Manifest this update: Thu 26 Mar 2026 00:01:11 +0000
Manifest next update: Fri 27 Mar 2026 00:01:11 +0000
Files and hashes: 1: fD2KpDg1BKMa_0sAaBCga88DBa4.crl (hash: XczWGgrTbSxvQrd7m666tdMiJw9fomFlb/IIf66+z7Q=)
2: ynivGHGV8Z6F2cby7L1fi45lXJI.roa (hash: p2d61mUjDisc5jYXXPmal+v44ksSKZ1nKZ0hR92ybdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f1:2a:a1:c3:05:03:ba:5a:a9:1d:18:1a:55:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Validity
Not Before: Mar 26 00:01:11 2026 GMT
Not After : Mar 27 00:01:11 2026 GMT
Subject: CN=f49b73b69b76c0037758695575b90d6e1bfb36c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:b1:73:92:3b:97:bd:12:98:d2:ed:f7:1d:
2a:da:bd:7c:d5:a2:2c:48:6c:67:8a:25:15:16:7a:
a4:6f:90:ae:e6:df:82:c8:3a:ff:d5:4f:ae:f9:c5:
1d:14:0b:cc:f3:76:92:c3:ad:2a:d3:c6:bf:df:3a:
d2:21:34:97:25:46:c7:18:52:bc:60:09:98:06:da:
07:ed:e9:24:85:99:ce:24:22:81:4a:c9:55:90:a4:
50:65:fc:ed:55:59:5f:82:c3:1e:7d:ee:c5:d0:9d:
a7:d7:4e:fd:20:b3:6e:90:98:3e:0e:e1:23:5c:2d:
39:6e:f0:0b:0c:ef:3b:90:8b:2f:a2:67:d1:52:c9:
1b:52:e4:93:c0:70:0f:e4:21:5c:e7:ad:fb:4f:f3:
ef:9d:a7:05:67:92:9d:c1:21:3a:82:76:88:4e:ea:
ec:44:d6:92:72:a1:89:1c:c1:b0:1d:86:8c:87:9b:
24:a6:08:43:68:38:dd:d8:22:89:fe:c0:dc:58:c1:
91:d6:f8:21:7e:6b:fe:e6:17:19:26:1a:bc:b5:cc:
6a:68:8e:fe:8d:0b:05:a0:1a:ed:bd:02:08:88:52:
d4:a9:28:5c:6a:a6:c5:18:f7:71:59:a3:46:4b:7d:
a5:7c:cd:ad:3e:d0:79:fd:a2:1f:4f:5a:8b:95:81:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9B:73:B6:9B:76:C0:03:77:58:69:55:75:B9:0D:6E:1B:FB:36:C9
X509v3 Authority Key Identifier:
keyid:7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0b:de:0d:9b:2c:a5:47:c7:11:0f:55:3d:2c:da:e4:72:8a:
78:fa:db:cd:05:7a:c3:db:e5:6a:16:9e:c5:dd:bf:c9:e0:3e:
f6:81:8e:2d:13:c0:fd:fd:34:6f:00:45:08:23:3c:0d:bd:32:
5b:ab:3c:73:c1:98:24:b9:8c:af:67:84:93:b4:61:64:2d:25:
db:42:ea:1d:81:4b:b9:b4:6e:30:5d:fd:d4:3a:b1:22:3a:5f:
a9:90:fa:75:e4:0e:1c:00:a7:76:1d:94:2c:db:68:6a:f3:f2:
4b:17:51:80:76:71:05:75:d0:c3:8f:4d:2f:33:1e:70:9c:d7:
cc:17:d6:fb:0c:e3:0f:34:00:60:bd:81:64:aa:08:c0:72:bc:
c8:ca:a9:53:66:1d:0d:d6:aa:30:5e:15:c7:67:50:73:cf:76:
bc:e8:f5:f4:c0:00:18:c7:01:84:15:e4:f5:85:46:fb:8d:48:
9d:d4:e6:dd:12:e0:9a:44:0f:cc:bc:59:9d:f4:f7:38:9a:be:
4c:0b:be:3f:11:ed:13:1c:16:5f:81:81:3d:24:5e:92:a6:e2:
3f:5f:57:bd:ec:ba:d9:13:77:67:2c:a0:09:37:a8:37:77:87:
b5:1e:0b:df:14:be:66:37:b0:09:fb:69:d1:87:f7:21:23:5c:
24:ed:bc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:11 2026 by rpki-client