Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier: 6ot4I3FCn9D0Xh/EZmBgKDjoq85X6Y5Xe656NyVUJok=
Subject key identifier: 29:07:47:4E:98:D7:BA:4E:F9:0A:8E:41:C1:C7:CD:16:53:42:E7:DF
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 019D284E312C8162531F883C284C2D13C35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number: 05D5
Signing time: Thu 26 Mar 2026 04:01:46 +0000
Manifest this update: Thu 26 Mar 2026 04:01:46 +0000
Manifest next update: Fri 27 Mar 2026 04:01:46 +0000
Files and hashes: 1: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: C6J+8afak2TbWWMGiAoIJSghfam2ECAqUWcPZ0//ENs=)
2: F5S7c_lGCVk-Ybkd9IbxnVLn3vg.roa (hash: eVI8yrXfhvYwE0S/KV9hYg3kBr3HBxAmGlH35T90T1Y=)
3: tR9QLvg32zRpvf2oKCE6RFQVW0w.roa (hash: 9iUcyr09RC9S3vOC8uu0ZwV6C+S87j6TwJKmC2Yyv1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:31:2c:81:62:53:1f:88:3c:28:4c:2d:13:c3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: Mar 26 04:01:46 2026 GMT
Not After : Mar 27 04:01:46 2026 GMT
Subject: CN=2907474e98d7ba4ef90a8e41c1c7cd165342e7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:2f:db:ec:21:8e:15:b2:03:bb:48:f6:da:
fe:04:45:cb:c1:cb:1e:66:2f:f5:87:f1:90:96:ed:
5e:64:0f:b1:c5:03:7b:b2:b7:1a:a7:9b:2b:58:86:
39:46:16:70:17:4b:a2:cb:d4:63:29:df:aa:98:e9:
17:7e:5b:af:c4:d2:d7:cb:33:99:81:ca:07:0d:65:
83:0a:8c:3a:1b:56:ce:f1:ff:c5:ed:37:1d:91:2c:
29:b5:14:53:d1:7d:12:fa:99:79:14:c2:02:a8:56:
04:1f:d7:1e:92:04:6f:d3:5f:f4:48:86:82:a7:af:
0e:1b:63:25:ba:84:1b:1a:f4:ea:ce:65:e4:31:4f:
69:5f:5a:4b:0c:10:b2:f5:15:4e:83:18:72:6a:73:
9e:21:fc:a1:09:1d:2a:b5:01:09:e5:4c:e2:55:4c:
7e:fd:0c:cb:db:ff:eb:b6:c4:f9:ea:ea:a0:2c:53:
b6:a1:aa:7c:fe:29:b3:a1:c9:d5:14:19:7b:70:73:
b2:82:6e:a2:77:eb:69:bd:d7:2c:a4:c4:94:e9:c9:
6f:a9:5c:62:d8:20:30:86:db:0e:44:7a:be:3b:58:
e9:ab:56:53:8b:c1:7d:9a:57:86:05:62:7e:5d:e4:
7d:28:47:25:76:a6:55:df:0c:78:7a:11:f5:f7:24:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:07:47:4E:98:D7:BA:4E:F9:0A:8E:41:C1:C7:CD:16:53:42:E7:DF
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:88:0e:f8:63:26:4e:c4:05:ee:71:b4:8e:e8:ee:f5:be:89:
16:01:d7:69:33:d1:d0:2b:7f:96:13:7d:28:c2:6f:6d:78:c4:
6f:76:84:e9:f9:83:6a:04:76:97:db:4f:a6:5f:52:7f:83:6a:
13:c5:d2:75:04:4c:08:aa:48:bd:e3:40:39:ee:91:09:d2:6e:
2b:b3:8b:cb:5f:f4:71:55:cd:a0:95:3b:c1:20:73:f7:c8:17:
c6:cd:42:12:ea:18:a1:4d:6d:dd:ce:47:45:5e:66:0e:d7:3c:
98:f2:f4:ae:7f:d0:20:9a:04:59:ff:0a:1d:d3:60:51:ef:60:
e5:47:c0:7d:c0:0e:ab:b1:79:30:9c:35:62:1e:7a:c2:f5:db:
b9:ac:b4:99:5d:13:14:93:79:a4:1b:7e:1a:d9:5b:42:4e:09:
1f:af:98:3a:6e:6a:e1:cd:ec:ce:59:dd:1d:5f:50:aa:1d:5a:
50:5d:13:d3:a8:3e:76:2d:16:b8:a5:3a:de:b9:c0:0c:0a:79:
4d:aa:e3:4e:14:e2:06:68:45:5e:3f:dc:8e:ab:ae:32:b2:14:
da:69:d7:dc:43:af:2d:3a:1a:cc:6e:93:6e:a4:fa:5e:04:f4:
10:e0:cc:68:42:1a:45:10:f9:70:45:f3:a2:29:77:1e:0e:59:
91:29:41:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:24 2026 by rpki-client