Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
File: 15dPQ3RodlWDV_H7kcOFKlg6FFM.mft (raw, json)
Hash identifier: jJUnAALkot4wkyNtLVXQZa2TPcQ6rs0/LpJdoVa+C9s=
Subject key identifier: 97:B5:2D:97:FB:80:46:DA:D4:11:D1:97:C2:92:B4:7A:A7:64:1A:72
Authority key identifier: D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53
Certificate issuer: /CN=d7974f43746876558357f1fb91c3852a583a1453
Certificate serial: 019D296123BC0C6E99C2AE4E1E0681627F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
Manifest number: 0C3D
Signing time: Thu 26 Mar 2026 09:02:05 +0000
Manifest this update: Thu 26 Mar 2026 09:02:05 +0000
Manifest next update: Fri 27 Mar 2026 09:02:05 +0000
Files and hashes: 1: 15dPQ3RodlWDV_H7kcOFKlg6FFM.crl (hash: O4gXaCdFoTeLDgZatdKKBRMDPK4GQ9R/uUA1vzGMcgw=)
2: VzTt_U2Xq4HtkF0N31czQeZ4QJ4.roa (hash: sGTjG5nzZ1Busaiz9AdE7PDlfqVXk+5CXP96twOrlCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:23:bc:0c:6e:99:c2:ae:4e:1e:06:81:62:7f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7974f43746876558357f1fb91c3852a583a1453
Validity
Not Before: Mar 26 09:02:05 2026 GMT
Not After : Mar 27 09:02:05 2026 GMT
Subject: CN=97b52d97fb8046dad411d197c292b47aa7641a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:7c:d6:5e:db:be:5e:8b:9d:fc:a6:01:41:
e2:bf:a5:60:26:2f:05:d1:7f:f1:94:ce:c5:18:37:
a7:32:26:e3:27:b0:08:80:d2:00:5a:ff:5f:1d:84:
07:7b:72:39:a6:0c:3c:5f:03:07:c0:dc:9c:3f:f6:
48:52:d6:c5:67:26:f4:e6:f4:0f:17:ac:c2:d3:a8:
8c:04:df:2c:cb:47:a7:d6:47:95:86:01:fe:7e:87:
07:f7:d9:88:47:91:bc:ae:b8:bf:64:65:e6:be:a8:
44:5e:40:54:e1:c1:8d:09:d2:7a:9a:1a:a3:25:df:
96:16:ca:b9:54:ae:ba:7f:c9:28:a6:2c:93:25:73:
ca:41:e7:4d:5c:f0:d3:98:91:c5:df:16:68:24:aa:
6e:31:72:cd:f6:ce:2d:1b:53:f8:a4:46:31:cd:ec:
73:ee:cf:e5:1f:ea:4e:15:4c:24:60:18:f5:23:8e:
45:4b:2e:bc:c5:77:62:80:e5:a3:7b:cd:3c:98:f6:
d2:2a:6a:58:6b:ab:d7:e4:41:8b:2c:9c:93:b9:d5:
4d:a6:15:f7:ba:e8:fd:cc:45:cf:30:8c:09:7a:21:
61:a6:04:54:47:f9:c4:5a:91:0c:ab:13:40:fe:27:
ed:d2:ad:e8:6a:25:8e:b0:af:ef:5f:76:1b:a7:28:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B5:2D:97:FB:80:46:DA:D4:11:D1:97:C2:92:B4:7A:A7:64:1A:72
X509v3 Authority Key Identifier:
keyid:D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1e:c7:8e:1a:72:84:4e:e7:fe:22:46:8d:70:16:1b:e1:91:
e9:03:b6:91:53:36:3c:f9:86:d6:c6:60:f5:c4:dc:f5:a7:3a:
a4:7b:17:aa:34:8c:f9:ee:e5:c3:d2:71:4e:48:20:b9:c3:41:
56:ad:58:5a:6c:d2:7f:6e:f5:1e:29:12:61:bb:20:8c:05:ab:
b0:e6:23:1a:ee:e7:6c:31:d8:03:55:a5:ce:10:ed:8e:28:d9:
6c:0b:a8:cb:dc:73:05:dd:a2:f7:af:7d:fe:17:54:8c:5e:4e:
c0:11:03:c6:3f:6e:9c:1c:46:64:53:29:ec:b5:d9:6d:02:92:
e4:2c:00:51:84:10:b6:aa:da:b7:02:d0:27:72:2a:3b:4d:54:
ed:d3:c9:f4:51:90:ef:86:14:f2:dd:9e:aa:7d:eb:bb:85:eb:
fb:db:4c:4f:a3:c8:e7:64:62:e9:67:a7:f5:4e:a1:42:bc:66:
fe:9f:d7:b7:e8:14:e4:fb:df:90:6e:76:f5:76:05:15:73:0c:
7c:cb:c2:fa:86:d3:ab:bb:b0:dc:1d:a3:32:b2:e0:f6:0c:4b:
31:9c:cc:aa:03:05:3f:27:39:9a:a9:9d:49:40:2e:8f:48:35:
b1:53:a5:ea:0a:87:66:72:cd:02:48:5f:94:b9:d4:68:01:c1:
09:43:e0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:15 2026 by rpki-client