Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
File: d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json)
Hash identifier: g4igD5tUi/Vh5nCsrMvGQmY8zT6ihimu2BPFhfGi25o=
Subject key identifier: C8:73:F9:C9:9A:9E:9A:71:EC:BE:4E:12:27:5B:0B:DC:9D:D0:5C:7A
Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
Certificate issuer: /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Certificate serial: 019D2928E898825D8AE67A7BB736BB447F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
Manifest number: 0600
Signing time: Thu 26 Mar 2026 08:00:39 +0000
Manifest this update: Thu 26 Mar 2026 08:00:39 +0000
Manifest next update: Fri 27 Mar 2026 08:00:39 +0000
Files and hashes: 1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: dzyJNbiYnEvQ5Q1NUCODDjse9TeainBiYZSCjO3M30k=)
2: kPvxZ2OyeoUeAIvW5z89UU8ASkE.roa (hash: Sv6cjXS82obyL50XzOiS7kDFeEpRD0eJe0mAtx0A7U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:e8:98:82:5d:8a:e6:7a:7b:b7:36:bb:44:7f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Validity
Not Before: Mar 26 08:00:39 2026 GMT
Not After : Mar 27 08:00:39 2026 GMT
Subject: CN=c873f9c99a9e9a71ecbe4e12275b0bdc9dd05c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:b8:58:9b:ee:98:11:bf:6e:92:61:04:35:
65:1d:3c:93:4b:b8:f3:78:44:38:ec:59:5d:ac:ff:
54:0a:fa:87:7d:fa:7c:d0:77:ba:7c:d0:18:6f:5a:
c8:83:dd:c1:56:39:0b:17:99:b5:1b:6c:ab:46:dc:
55:d5:79:73:59:11:ca:33:58:2d:6c:3b:67:aa:af:
cc:d7:a3:2e:52:b7:c5:27:cd:ad:94:d1:ca:1d:5a:
89:34:2f:9c:cf:11:89:95:f5:05:f4:31:6c:14:b9:
6b:aa:83:04:c1:55:bf:f9:df:bb:b0:9b:59:02:0e:
1d:e4:0d:0c:7d:0c:c5:16:6e:de:07:c1:e8:61:63:
15:f6:4b:b8:87:ce:f8:f3:1b:a5:d6:73:1c:c3:50:
47:83:4f:9d:23:db:8d:01:9a:9c:8c:b2:61:30:be:
de:77:65:f3:2b:d1:f8:26:db:26:77:e2:8d:5b:b4:
71:16:9b:1d:8a:b5:10:1c:ad:ef:81:1e:e6:fc:c6:
2d:70:8c:a5:ad:6b:d6:5e:9f:3d:4d:68:37:df:29:
1f:90:56:50:aa:ed:d2:96:cb:c9:f0:4d:d8:b2:30:
03:59:69:7b:60:cb:3e:2a:0b:e4:4f:f3:7c:e3:1f:
be:c9:33:34:cc:8c:62:4c:c4:50:10:ff:91:29:79:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:73:F9:C9:9A:9E:9A:71:EC:BE:4E:12:27:5B:0B:DC:9D:D0:5C:7A
X509v3 Authority Key Identifier:
keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:72:11:f3:30:b4:3a:b9:aa:8a:10:6d:bb:0e:f0:6f:fc:fa:
49:99:d1:02:a9:21:66:be:a8:c1:4f:d3:b1:54:e6:92:05:8f:
11:84:4d:97:5e:a4:88:cc:79:11:2a:e6:c9:f6:0e:b6:dc:b6:
37:86:6a:70:20:92:af:23:be:7a:36:5f:a5:24:f3:70:92:35:
40:b5:62:76:2e:a5:15:79:b2:f2:aa:68:e2:e7:6c:f6:30:b0:
70:0c:68:64:6a:ba:73:ec:c5:c0:5b:8f:bf:58:03:c6:1d:69:
77:04:5f:c3:30:2d:1a:5a:ad:c5:10:e6:7a:c3:05:08:75:19:
c9:68:a1:25:72:5f:2a:77:69:64:26:e1:53:7c:a2:7f:ef:c4:
ce:e9:9a:e7:73:e6:bd:ce:fc:dd:95:b3:6c:44:45:17:75:fb:
84:0d:2a:5f:dc:16:2f:54:84:0b:5e:02:88:8a:15:93:72:fd:
6e:e1:cd:b6:a6:92:ff:8a:74:14:ce:78:80:2e:f4:44:e7:af:
73:a3:76:e8:cf:c5:7b:7f:cf:36:76:26:1a:8d:05:d1:00:83:
33:a7:15:fe:39:49:2a:fd:12:1e:be:03:49:2d:2e:7c:1d:c5:
86:87:ab:06:1b:8c:62:63:ce:08:f8:5f:a9:fd:13:b8:70:c4:
a0:1e:ad:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:47:51 2026 by rpki-client