Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
File: dI6Zox81gkAKtd-nd8YNFqyu3bM.mft (raw, json)
Hash identifier: 6dNVYRhfSJr+A6UonVxMquYiM4IyeCq6mKOOiU1TJIw=
Subject key identifier: 40:B1:83:3F:FE:ED:05:DB:A2:1D:D9:FC:A7:A1:55:36:E5:D0:5C:EA
Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
Certificate issuer: /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Certificate serial: 019D29292ADDF3D74A842C917914C8CD1C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
Manifest number: 0A57
Signing time: Thu 26 Mar 2026 08:00:56 +0000
Manifest this update: Thu 26 Mar 2026 08:00:56 +0000
Manifest next update: Fri 27 Mar 2026 08:00:56 +0000
Files and hashes: 1: WQjl92RW0jdBTqM0hadCVWAMXP8.roa (hash: CIaHkNR2G65+9/3FHuVOGVz2ojdxwlcnxwiCYecNZcg=)
2: dI6Zox81gkAKtd-nd8YNFqyu3bM.crl (hash: 7ofGnEydqLPaVyksb85CaIotNKWtNRT8BGjyEv63mfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:2a:dd:f3:d7:4a:84:2c:91:79:14:c8:cd:1c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Validity
Not Before: Mar 26 08:00:56 2026 GMT
Not After : Mar 27 08:00:56 2026 GMT
Subject: CN=40b1833ffeed05dba21dd9fca7a15536e5d05cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:62:bf:80:1b:a2:b4:55:e8:bd:00:01:6f:
4b:b0:c3:35:6e:f6:b8:9a:9e:64:bc:f5:b2:d8:7e:
c4:58:f4:4e:16:ff:cd:aa:8f:ef:16:53:ed:bf:5b:
e1:1c:f8:3a:0a:74:e8:67:52:f7:f2:f8:fc:90:3f:
13:a1:50:c6:c4:42:52:d4:84:18:91:e4:43:0e:dc:
95:44:55:73:73:f0:45:ef:ec:9c:0b:a5:c3:a6:38:
b8:d9:51:59:0a:af:1b:81:64:3f:63:05:52:6a:eb:
5a:18:df:28:aa:33:c8:e5:16:4c:ea:31:93:fb:8d:
2c:f7:44:6b:7a:af:eb:95:8f:d5:a5:9a:1d:a1:a2:
cf:dd:87:19:ca:5e:b9:d7:39:01:63:d3:71:6e:e0:
36:70:a2:12:7a:68:dd:0f:81:46:3a:89:64:74:1b:
7d:7e:75:2f:cf:86:a1:f6:ff:fb:e1:d2:49:f5:87:
1e:27:9e:84:6e:3d:27:4e:3b:10:b8:c2:93:86:f4:
79:27:34:d1:1d:fd:59:25:f9:a5:5f:44:85:c1:11:
d7:85:11:69:e7:87:ce:17:59:bf:b0:cf:e3:6d:44:
9a:db:90:0e:35:f6:93:28:19:6b:47:2b:19:fd:a8:
e8:cb:4a:67:64:a0:f5:31:94:2b:86:69:53:06:46:
45:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B1:83:3F:FE:ED:05:DB:A2:1D:D9:FC:A7:A1:55:36:E5:D0:5C:EA
X509v3 Authority Key Identifier:
keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:98:ff:57:ed:11:45:e3:33:9a:33:4a:e1:b3:3d:6e:e2:48:
62:b7:3d:92:65:60:27:d9:b4:f7:9f:d4:56:79:9f:ea:0e:57:
35:3d:0f:cf:ea:a2:e4:08:89:ce:1c:46:ca:a0:75:b1:80:5d:
47:3b:fa:6d:67:6d:37:9b:1a:e9:d3:a9:82:45:d5:22:7e:13:
dc:75:8c:82:7e:72:e9:67:c4:50:a7:ec:b9:f6:77:67:ee:4b:
dd:4b:2e:a8:28:5b:00:d5:22:22:07:aa:53:3a:b6:aa:72:07:
e9:a6:83:10:c5:be:f6:b5:b3:94:23:62:09:f7:42:ee:34:d2:
d8:4b:14:1c:88:99:2a:7b:8c:7d:b4:c6:bd:3d:83:d1:97:06:
51:6d:a3:f5:74:0d:fd:ea:b0:b0:6e:d2:2d:94:c8:f2:54:10:
79:f1:32:0c:83:12:8a:94:bd:80:ea:1a:a3:56:ee:e0:3b:bb:
55:bf:b5:00:1e:82:15:c4:a5:8e:74:19:0b:ae:83:d1:78:94:
eb:d0:86:50:f4:f3:85:bf:2b:6a:8c:dc:e8:a3:ef:0e:e4:6e:
31:9a:d9:a0:93:a3:27:37:bc:00:26:96:1b:5e:52:6e:92:52:
dd:a5:4c:77:1e:4a:20:3e:7f:ee:b0:2c:c7:1b:78:db:b4:a2:
19:79:63:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:39 2026 by rpki-client