Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
File: d1XNi-ceKectlpDHzUCHtfJhFvA.mft (raw, json)
Hash identifier: A4EKyv5BK4rCGnwowxSq5aVcoQWz8wGCahioExCj/eA=
Subject key identifier: CA:4A:46:36:E7:0A:E4:CD:1B:9A:32:C7:AA:FA:67:71:BA:3E:C3:80
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Certificate issuer: /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial: 019D26CD50A5E0043E30DF3011A46C0A1ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
Manifest number: 08AD
Signing time: Wed 25 Mar 2026 21:01:22 +0000
Manifest this update: Wed 25 Mar 2026 21:01:22 +0000
Manifest next update: Thu 26 Mar 2026 21:01:22 +0000
Files and hashes: 1: 9F2fGaXqkwYq7hsidHwhVUABVT0.roa (hash: b+5jUhu8wzSR5Hz+8wVW5uNIAXefzuPQ7RL1+84Zd/s=)
2: FJjLx1iJw4VqFKz7FPQ0JyldOfI.roa (hash: ev1W9ohjVf7Q0Z9nGx/i+Cc2wNkdLs6mHMbE9kefqiU=)
3: d1XNi-ceKectlpDHzUCHtfJhFvA.crl (hash: mfxtYmd/gM6Ef/ARbzOeZhntFJrC8wBJOkXOrhwxj0E=)
4: yj4Baoa8O0cK9liPFSajl18EXPE.roa (hash: qR4NJRolj3aKBGShXLhpMIVXbSB+hmucW84pdI75rZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:50:a5:e0:04:3e:30:df:30:11:a4:6c:0a:1a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Validity
Not Before: Mar 25 21:01:22 2026 GMT
Not After : Mar 26 21:01:22 2026 GMT
Subject: CN=ca4a4636e70ae4cd1b9a32c7aafa6771ba3ec380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:6c:09:01:02:48:96:1c:83:ce:74:ff:ec:
47:49:75:a6:b7:1c:92:0f:44:f5:bb:21:d1:a7:ea:
4f:69:69:df:7d:d0:04:44:aa:ee:04:b2:c8:24:43:
12:1b:81:37:1e:41:14:68:bd:5b:ac:0d:70:f4:5d:
4a:ee:c9:0f:08:05:8f:f7:bb:5b:03:07:20:8e:75:
e2:a5:19:da:2b:9d:50:c6:14:6c:a0:3b:55:44:d3:
2f:48:21:4c:67:0c:7f:27:e7:de:50:ae:b2:d1:48:
5f:f8:84:25:8b:68:61:6e:9a:d1:48:36:db:69:c8:
5c:83:6b:73:79:1b:a9:6c:8d:a0:7b:eb:be:99:90:
df:c9:be:6e:5e:2c:d9:39:ca:8a:38:e3:e6:c1:f3:
78:1c:26:02:a9:0b:37:c0:f6:93:3f:bc:e6:a7:15:
cd:de:a5:c1:01:07:83:35:0f:ed:9e:f1:42:71:ee:
b1:00:85:8c:9c:40:ff:0a:93:f2:77:3c:a7:48:87:
ae:6d:80:70:56:bf:dd:b9:17:dc:50:26:7b:b9:49:
81:a6:0a:03:73:a4:6d:3a:f2:cc:eb:40:ac:56:a5:
d7:c0:8c:a3:c1:c8:90:7d:06:45:2a:bb:01:c6:cc:
94:88:8b:5c:48:c9:1f:0d:9d:05:39:1a:12:2d:23:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4A:46:36:E7:0A:E4:CD:1B:9A:32:C7:AA:FA:67:71:BA:3E:C3:80
X509v3 Authority Key Identifier:
keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:27:e7:19:d2:d1:8d:7d:55:f8:6a:16:1f:61:9a:ff:df:ed:
48:e9:81:79:16:9c:c0:ab:e3:08:46:4d:a6:e4:26:62:35:ff:
c7:57:bd:20:78:77:6f:32:13:41:db:34:37:1e:bf:a2:06:3a:
7d:e3:6c:ff:85:a0:57:45:04:21:6b:78:d2:24:1d:12:68:77:
21:75:0c:01:6a:19:5b:7a:6b:c4:71:8c:68:61:81:fe:50:36:
13:6c:c9:0d:c0:74:95:a4:f0:7f:58:56:ae:bc:3a:1c:48:4f:
d8:f2:7b:cd:19:9c:b0:2e:5e:af:5a:5e:e9:62:8d:08:eb:78:
88:bc:24:b3:39:51:58:ed:e4:47:90:2e:44:d8:04:77:5a:75:
ab:2b:79:a0:7a:e0:e7:83:1e:5d:37:db:e8:f2:db:0c:f9:57:
8b:bf:86:78:5a:d4:05:aa:ad:6c:bb:90:bc:24:a3:be:17:76:
93:c8:4c:3b:2b:45:1b:36:96:61:3d:01:c6:66:52:e4:89:29:
31:8e:02:c5:ba:15:ee:7e:38:b2:a6:2a:09:26:36:f7:9a:b4:
13:a0:c1:f8:41:7a:8e:f7:7e:1b:f5:f9:52:c8:ac:22:55:2b:
b1:26:35:61:14:b2:a6:2a:f4:07:fc:d1:8e:0f:6d:e9:a4:2b:
2b:9c:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:46 2026 by rpki-client