Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
File: d-g56lm5dYJP1wigrXNVUAF8v3w.mft (raw, json)
Hash identifier: YPAiDpBPRY/1o/NulA0PezJM4v99dTNoF2Nrlajm2rQ=
Subject key identifier: 19:FB:42:50:87:08:15:D5:6A:86:C1:B8:67:0B:88:19:78:EE:03:07
Authority key identifier: 77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
Certificate issuer: /CN=77e839ea59b975824fd708a0ad735550017cbf7c
Certificate serial: 019D2B84FA54E41772731789184556CEADBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
Manifest number: 15F6
Signing time: Thu 26 Mar 2026 19:00:28 +0000
Manifest this update: Thu 26 Mar 2026 19:00:28 +0000
Manifest next update: Fri 27 Mar 2026 19:00:28 +0000
Files and hashes: 1: MbNlUQjdzpnQDNMCae9f42WE5pY.roa (hash: n9mXyj62N2Bl5BqH7SgmfSMdlY5E0hGp40Rxg/eQn60=)
2: d-g56lm5dYJP1wigrXNVUAF8v3w.crl (hash: c4GotvlxXaWqwEovwpDNNHdMvPeu1YIDwTWdU3xpO5c=)
3: juiIPjLer9vbdJkXSU-SEN0CUs8.roa (hash: ubXvY3uPSZ0bvw91XDHx5DvGnkRcxXW06wCBOpNLH2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:84:fa:54:e4:17:72:73:17:89:18:45:56:ce:ad:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e839ea59b975824fd708a0ad735550017cbf7c
Validity
Not Before: Mar 26 19:00:28 2026 GMT
Not After : Mar 27 19:00:28 2026 GMT
Subject: CN=19fb4250870815d56a86c1b8670b881978ee0307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:26:14:d9:1f:55:e5:68:30:ce:9e:f2:ad:
b0:e3:1a:75:8b:31:4b:cb:db:00:dc:85:af:ab:f9:
91:2a:bf:c5:34:0a:3f:ff:88:cf:d5:cb:22:48:b3:
fd:ad:a1:da:72:b1:2a:73:af:82:1e:b0:e8:54:52:
59:d3:ff:5d:20:f8:cb:b8:34:20:b1:af:73:22:d5:
96:8d:c8:36:8a:42:fc:c1:66:b6:9d:c4:78:09:49:
47:c1:0f:9b:ec:43:97:8f:ed:85:e9:c1:53:ae:be:
b2:f3:df:3a:ea:91:f2:27:63:32:76:f0:aa:04:a2:
e6:bc:86:37:47:33:da:8d:9c:69:e4:69:d8:dd:17:
00:ba:c4:e2:38:00:34:16:e7:91:f8:7c:b5:f0:3d:
62:dc:d6:3e:c1:89:c2:b6:d4:d4:d9:9f:49:3a:9f:
bc:74:30:4f:96:d1:c2:e3:77:d4:bb:cc:be:65:23:
22:5a:19:69:01:a2:a3:3d:8b:68:39:9c:64:08:01:
e8:d4:79:6b:1a:62:61:87:62:78:36:c3:40:a9:20:
bb:ca:a5:13:9b:52:61:42:41:a7:fd:b9:14:db:b2:
30:ea:28:e2:8f:77:df:75:8c:5c:16:8d:05:41:ee:
0c:a3:ad:99:72:82:40:82:4e:0d:d5:d4:5f:c7:6c:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FB:42:50:87:08:15:D5:6A:86:C1:B8:67:0B:88:19:78:EE:03:07
X509v3 Authority Key Identifier:
keyid:77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8b:04:21:10:59:d0:25:05:47:9c:83:bf:f5:00:55:dd:2c:
fb:de:7c:70:bf:61:61:28:b3:72:07:67:97:b7:e5:6c:58:ec:
fe:98:ae:67:ef:a8:42:e9:e8:94:5f:fc:26:df:7c:0b:cc:9b:
36:2d:f8:36:92:7c:e6:b7:32:af:ba:af:31:c7:a4:e7:f0:b1:
1e:08:6e:a6:6b:72:2a:45:51:cb:2d:7b:80:21:3a:c4:1f:5c:
67:a4:a2:e9:5b:b5:98:c2:2d:60:1f:81:f8:ec:1b:62:20:a7:
81:88:eb:81:e9:18:7c:cb:33:15:b2:68:39:ad:24:d2:32:17:
71:a9:ff:f0:37:e8:b3:a1:00:90:0c:35:03:cd:8f:9a:d4:b8:
be:ae:e0:96:ac:08:f4:05:2a:2a:5e:53:df:04:fb:9e:fd:f8:
4f:2f:99:2c:cf:5f:9f:c9:34:8c:d9:0a:dc:b8:ff:16:a5:40:
cc:1e:c5:12:9d:66:84:3f:8d:8c:65:3c:a4:2a:14:e4:43:f0:
17:e6:70:62:d1:e2:22:17:55:ec:be:c3:06:5f:4a:93:4e:0c:
8a:76:9b:2e:da:c6:6c:84:da:bf:24:e6:79:48:06:96:ec:31:
0c:82:fa:84:5d:2d:fb:12:e0:51:6a:cf:35:6a:8d:58:0c:d8:
91:6f:ed:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:32:24 2026 by rpki-client