Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
File: _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json)
Hash identifier: 9j4XUJdPs9KZf1bQ1fM29Ahu5AufK6492oTJpTxUXAw=
Subject key identifier: D6:3F:76:E9:AE:A7:6B:7A:31:E7:EC:A2:06:F6:AC:31:A1:7D:22:86
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 019D2772F4C1ED6A2BCEDF38CAF8615AC0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
Manifest number: 131A
Signing time: Thu 26 Mar 2026 00:02:18 +0000
Manifest this update: Thu 26 Mar 2026 00:02:18 +0000
Manifest next update: Fri 27 Mar 2026 00:02:18 +0000
Files and hashes: 1: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: BlNnj1fZjR0ulG3scO4PgO4OqAsOb7fcPcBek4AnXUA=)
2: x50nfPWrcxkZfg31dDtVSDNo-l0.roa (hash: Zf8Bocjkzb8ajAA1WIwAKEh12BnqmBQgyIDI1yF5zzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:f4:c1:ed:6a:2b:ce:df:38:ca:f8:61:5a:c0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Mar 26 00:02:18 2026 GMT
Not After : Mar 27 00:02:18 2026 GMT
Subject: CN=d63f76e9aea76b7a31e7eca206f6ac31a17d2286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:42:61:8c:a1:00:b0:67:44:a5:aa:c5:12:ec:
03:d2:aa:1f:66:83:06:36:9c:dc:64:58:8b:66:f2:
f9:22:9e:39:51:de:58:8c:88:df:c2:41:21:2d:35:
49:a3:40:c6:80:29:13:49:8c:b7:d1:48:13:91:14:
c4:21:81:1f:8c:31:27:ac:68:f1:c6:fe:03:25:8d:
f4:63:4a:bf:4a:84:68:bb:f9:35:e4:44:34:f5:47:
c8:e1:3c:d2:3d:d0:2e:b0:54:0e:c8:2d:8e:9f:3d:
c2:62:6c:01:b1:9f:33:6c:86:67:df:20:8b:e1:f0:
e9:9f:a8:34:93:cc:63:1e:06:6d:f4:71:53:c3:e2:
86:a8:0e:8b:48:4a:1f:5b:8b:0c:81:ea:59:09:e7:
70:5c:55:6e:38:11:97:65:a7:6c:7d:e7:ba:fc:89:
dd:17:33:ec:39:6e:b8:36:75:8e:c8:14:4c:2b:1a:
08:1b:d4:2e:62:7f:e5:6c:99:20:32:19:4e:00:16:
c8:47:59:4b:59:fe:73:17:62:06:c3:14:ee:97:7a:
07:45:a3:65:00:4c:c7:bc:bd:4e:ea:23:72:65:52:
80:26:b0:34:fa:dc:8a:96:b3:18:e2:a3:93:f6:89:
b3:a9:10:3b:45:ed:9e:75:eb:c3:79:ef:00:df:e3:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3F:76:E9:AE:A7:6B:7A:31:E7:EC:A2:06:F6:AC:31:A1:7D:22:86
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9f:e0:0e:ed:d8:26:50:5d:f5:86:46:ea:bd:e2:10:c2:16:
a0:13:69:9d:2e:02:a2:e9:1a:89:3d:62:3b:cf:03:08:e3:b2:
7e:8c:fb:e8:e9:31:1c:ee:78:2c:d8:bd:82:ff:77:e6:2a:a6:
71:de:9d:94:5d:f9:12:02:66:12:d0:a7:25:7b:a9:09:45:6d:
05:0a:6c:e7:61:2e:c6:43:d9:b0:27:67:e5:96:6a:42:49:95:
1c:91:60:22:9f:f2:6f:49:0a:2d:49:d9:27:a1:2a:36:82:1c:
f4:c3:8e:f9:4d:35:44:50:10:d7:b8:06:af:82:5a:da:5a:78:
9c:e9:db:c5:40:4e:df:aa:9a:a2:fc:bd:c3:66:11:76:e7:10:
11:08:ca:f1:3b:34:5e:4e:9f:7b:79:7d:89:04:ef:67:03:26:
f5:53:5b:bd:13:c7:3c:8e:4b:b8:18:5e:ac:9b:0e:f1:31:80:
c8:57:9f:39:c3:10:33:6a:43:3e:67:48:21:7e:61:49:ab:1a:
34:24:fa:03:b9:f1:a3:b5:85:d5:72:86:77:ef:3a:4b:f0:40:
b4:ac:b2:d8:2e:aa:e8:cb:fe:c6:da:a2:d8:8f:13:06:04:58:
bf:80:10:04:d8:d5:33:9f:7e:da:84:75:66:19:3e:9a:02:b0:
f4:45:15:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:53:08 2026 by rpki-client