Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
File: d-g56lm5dYJP1wigrXNVUAF8v3w.mft (raw, json)
Hash identifier: cwDbxL/rZOQaQ6XYAIRfoo70w8dH6Uzj3K8IKkGWZ+4=
Subject key identifier: EC:3E:55:05:5C:84:46:49:63:35:7D:90:46:A1:E4:AF:1D:61:AB:76
Authority key identifier: 77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
Certificate issuer: /CN=77e839ea59b975824fd708a0ad735550017cbf7c
Certificate serial: 019D27A8928EB63FB4B1B134A2DEF1EA7405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
Manifest number: 15F4
Signing time: Thu 26 Mar 2026 01:00:52 +0000
Manifest this update: Thu 26 Mar 2026 01:00:52 +0000
Manifest next update: Fri 27 Mar 2026 01:00:52 +0000
Files and hashes: 1: MbNlUQjdzpnQDNMCae9f42WE5pY.roa (hash: n9mXyj62N2Bl5BqH7SgmfSMdlY5E0hGp40Rxg/eQn60=)
2: d-g56lm5dYJP1wigrXNVUAF8v3w.crl (hash: qwu8qX0zuePjItlzCaTeebL7U2nuQQU1c77UWNIwpOk=)
3: juiIPjLer9vbdJkXSU-SEN0CUs8.roa (hash: ubXvY3uPSZ0bvw91XDHx5DvGnkRcxXW06wCBOpNLH2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:92:8e:b6:3f:b4:b1:b1:34:a2:de:f1:ea:74:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e839ea59b975824fd708a0ad735550017cbf7c
Validity
Not Before: Mar 26 01:00:52 2026 GMT
Not After : Mar 27 01:00:52 2026 GMT
Subject: CN=ec3e55055c84464963357d9046a1e4af1d61ab76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:d4:c8:b4:d3:fd:df:6b:fe:eb:be:b6:56:
2d:6c:3a:38:c2:7f:78:eb:f4:d7:4f:7f:c3:ed:01:
f5:fc:3d:eb:58:40:e2:1b:4e:e9:3a:1e:ae:ee:b4:
fe:c1:e9:06:5e:02:b6:f6:b7:dd:50:b7:95:38:83:
9b:44:ec:64:3d:2a:65:1f:da:1c:19:1b:aa:1d:7d:
96:9f:92:0c:9f:19:c1:73:40:97:13:55:36:53:40:
9f:04:56:7f:0d:6a:47:b0:db:16:8a:ee:91:33:44:
d6:37:ac:d2:3f:23:c7:43:73:d1:e3:fa:70:af:cc:
e3:2b:ac:fe:82:1a:58:d1:d2:ef:43:a9:cb:2e:b0:
49:09:9b:84:75:7d:2f:ea:23:49:64:b1:81:05:b6:
e9:5b:51:3c:b9:c0:59:6f:3f:5f:93:0e:32:28:c0:
61:54:6d:b6:06:46:27:9f:48:9b:8e:c1:64:51:6b:
e3:5a:d9:54:5e:14:c4:98:43:8c:a1:62:8c:54:d9:
24:f3:4c:b4:41:56:28:14:0c:81:1b:d8:87:f8:be:
82:bc:21:d5:93:71:d4:c6:5a:f3:de:54:86:34:c6:
aa:a7:62:a0:b5:20:eb:23:19:95:c7:69:83:7f:1b:
0a:6b:97:a6:6f:04:c3:55:e8:1c:1b:40:09:8f:bb:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3E:55:05:5C:84:46:49:63:35:7D:90:46:A1:E4:AF:1D:61:AB:76
X509v3 Authority Key Identifier:
keyid:77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9b:4b:ce:88:46:fe:59:67:52:e0:31:1f:4b:96:b4:bf:54:
ea:ac:33:e3:92:c7:00:fa:ec:8c:9e:8e:28:63:64:73:d9:10:
55:3d:c4:97:7c:cd:ae:35:9a:30:37:04:c4:12:f8:5f:10:7d:
14:e1:87:f1:89:93:d3:51:4a:5e:ef:35:a9:a3:aa:76:e2:e0:
9d:89:6d:a9:1c:21:08:b9:f2:87:ab:4f:bc:d4:19:d3:b0:a7:
c2:65:44:f3:e4:ca:8b:8e:ac:0a:26:42:f8:89:0a:9f:85:10:
db:62:46:b7:b2:ee:7b:0b:75:18:26:26:14:7d:04:20:99:9c:
b7:17:76:b6:62:58:a2:bb:00:74:bf:e5:1e:96:3d:1e:60:24:
a5:35:eb:ef:c8:bd:bc:46:92:63:91:93:a8:09:b1:7c:1c:86:
03:44:95:ea:c6:85:d3:37:2e:37:52:2e:3d:b2:4d:e7:f7:5d:
a1:63:2d:98:50:0a:19:dc:0f:bd:95:43:8a:43:57:ff:33:10:
64:ab:82:c8:72:79:a1:b2:d2:f3:64:d5:dd:e6:f0:b6:bf:4b:
9c:ff:b1:b3:81:18:17:55:fd:59:e3:0c:15:4f:9a:24:39:58:
ae:81:b2:6c:f7:74:39:17:94:fb:d2:65:65:dd:aa:2b:4a:9b:
00:dc:54:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:41 2026 by rpki-client