Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: fsaI1Ua8nQQy1yo1Juli7es+9aoMpzLE9AYMJ6kSy3Y=
Subject key identifier: D5:E9:B5:D0:08:96:9B:69:DA:69:57:C7:A6:51:13:31:42:2B:04:E9
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 019D2A044E64BFC30F1D98BDACCF8CCD2A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 05EF
Signing time: Thu 26 Mar 2026 12:00:18 +0000
Manifest this update: Thu 26 Mar 2026 12:00:18 +0000
Manifest next update: Fri 27 Mar 2026 12:00:18 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: OsrVuiI1d8daa1Cuv5UhoK7Po2GbYqsWVUrULw0tlv0=)
2: P-p2NxW9TFmZAwW03gw6xGVVFZc.roa (hash: VYJ/qjVSy2HmGtgmvHoLOPXTUBBAf8syxAzQSjcRmvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:4e:64:bf:c3:0f:1d:98:bd:ac:cf:8c:cd:2a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Mar 26 12:00:18 2026 GMT
Not After : Mar 27 12:00:18 2026 GMT
Subject: CN=d5e9b5d008969b69da6957c7a6511331422b04e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:94:42:ae:46:01:ca:63:06:b0:ef:fe:b3:
fa:ba:cd:61:77:c9:89:9f:e3:2c:c6:ff:55:2d:8c:
21:8a:d3:21:c9:23:eb:07:21:98:44:0b:2e:c5:46:
ef:97:c5:12:33:7c:d0:19:0c:1b:81:e1:56:dc:ad:
14:05:54:e5:8e:1f:c0:f3:ef:82:16:f8:fc:eb:d1:
34:7e:1c:0a:b8:33:d6:55:84:35:59:3e:a1:73:51:
ad:05:a1:80:cf:96:5e:02:dd:07:cc:c5:0a:9b:b1:
82:ff:01:ad:c6:11:3e:c6:0c:29:ca:f0:14:f5:98:
f2:71:cd:57:20:89:0d:85:bb:49:e8:de:aa:16:e0:
1d:fd:98:75:a3:57:1b:ee:a0:67:0f:96:5a:9b:34:
b3:21:86:70:51:68:d0:7c:d7:da:26:a8:eb:f2:8b:
60:f9:e1:45:bc:03:79:ec:6f:0d:6e:e7:bf:0e:d8:
22:8e:1a:5e:86:d4:55:61:04:47:6b:df:7c:47:9b:
14:ea:65:6b:a9:ef:fc:aa:19:29:f7:23:fc:39:9a:
2b:5c:25:56:0c:f1:6c:f6:fb:e9:2f:a1:c6:de:ae:
90:cf:7a:e8:92:97:6e:71:40:4e:26:42:0c:19:4d:
5c:d0:0f:91:ea:05:5b:be:6d:ba:e9:9c:9c:b5:d5:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E9:B5:D0:08:96:9B:69:DA:69:57:C7:A6:51:13:31:42:2B:04:E9
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0e:70:93:2b:eb:b0:59:37:03:f9:aa:ba:bd:db:b1:35:8c:
5a:a9:d9:8a:a5:0e:32:9f:5b:aa:92:ec:b5:1b:cc:77:94:79:
fa:97:b3:86:25:38:a3:03:e7:96:35:f6:15:54:5c:a7:fa:e8:
d6:2f:a7:9a:43:7e:1a:38:32:1b:6c:1c:7b:1d:17:57:b4:a2:
49:59:85:93:02:1f:4e:01:4a:98:85:7d:2e:47:48:e4:05:b4:
2f:35:dd:5b:3f:ac:43:61:74:5d:e5:04:f0:f4:73:ab:21:47:
d2:f6:f0:00:1d:99:a8:e6:18:90:1f:50:ae:60:b0:8d:4d:88:
4a:ad:d0:df:78:2d:36:38:8b:f9:ba:53:4d:63:9a:fa:4f:58:
34:7a:db:62:fa:24:61:32:c3:d8:38:a5:aa:ac:bd:ad:40:41:
c2:bc:67:2e:9e:32:73:f5:42:ef:ab:81:9b:69:df:e5:eb:70:
66:5f:b8:d1:0f:f1:7b:7e:08:dd:e4:47:50:09:41:fe:21:2f:
c8:f7:37:5c:db:f5:0c:b6:2c:2c:d9:c1:30:00:bd:fe:c9:87:
1d:4a:14:d1:70:09:52:d1:a5:42:8d:fa:47:81:ab:a8:ac:79:
98:09:68:54:dd:33:14:26:da:86:60:06:15:2f:9a:c1:64:ac:
39:d1:41:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:10 2026 by rpki-client