Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
File: D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft (raw, json)
Hash identifier: i7JEkyn6m0Zv5QJ69qHo1wzrxnrPKZqDq1j8/V/gf88=
Subject key identifier: CB:D3:74:1E:68:D6:C1:57:98:BE:5D:BE:04:E2:7D:43:E5:26:64:17
Authority key identifier: 0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
Certificate issuer: /CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Certificate serial: 019D2997824558FBBC83297674EDF4A404AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
Manifest number: 1666
Signing time: Thu 26 Mar 2026 10:01:28 +0000
Manifest this update: Thu 26 Mar 2026 10:01:28 +0000
Manifest next update: Fri 27 Mar 2026 10:01:28 +0000
Files and hashes: 1: D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl (hash: IJCjtEYxASEsP+gcIpsSspYuesSdlgu+AJ4AX/4xups=)
2: FVoehWVHfRAM9Wax2PLEzeuzUcQ.roa (hash: jKrRrki3jFgX40lflCLx2Zym5UZldktVdjD6ypmdCdQ=)
3: _FcCRW97Oyy-701A8ky-qnc9PuQ.roa (hash: TPZyrFAeXnN7pauwjeZRrcEQ8uCeSHffzbaYPf3BfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:82:45:58:fb:bc:83:29:76:74:ed:f4:a4:04:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Validity
Not Before: Mar 26 10:01:28 2026 GMT
Not After : Mar 27 10:01:28 2026 GMT
Subject: CN=cbd3741e68d6c15798be5dbe04e27d43e5266417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:d8:f7:0f:16:c7:16:b1:69:cb:fc:6f:d8:
82:a6:cb:1c:fc:97:f7:fe:9f:9b:77:8b:db:73:dc:
fb:6b:82:d5:62:00:50:07:a2:af:19:a1:5c:bb:44:
d4:47:4c:3b:2f:97:08:2b:04:f7:03:4b:bf:08:07:
4d:2f:2e:c3:75:b8:07:c6:dc:98:7f:c7:8f:56:7e:
e8:db:25:61:36:b8:ac:86:aa:f8:cb:b0:28:7c:da:
07:ac:d7:75:43:74:c9:2d:2c:a5:be:75:e3:e0:a1:
68:6a:6d:6a:cc:44:c4:8b:c9:24:d0:69:2f:4f:17:
31:47:68:07:84:18:ea:a5:4b:14:10:ee:fa:86:c9:
32:b4:ac:b3:7d:d5:39:3c:c8:ed:01:fd:82:b8:f4:
74:65:0b:d3:7f:6f:ed:b7:2f:a8:8f:c7:a9:4e:38:
db:68:cd:c2:3d:61:6a:84:59:65:67:ef:20:23:d8:
e8:8c:a9:ee:ce:ff:0c:0f:ca:52:5f:21:a6:0b:bb:
09:f4:6c:20:9c:b4:58:2a:90:1d:15:fc:0f:7b:61:
3f:f8:2d:6c:2a:2b:91:ee:d9:b1:2e:2e:83:d7:57:
a9:17:01:bc:bf:19:d4:41:1c:01:29:07:54:f1:b6:
dd:2d:db:e6:bf:6c:7f:2b:35:5b:ae:b6:64:ca:e2:
3b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D3:74:1E:68:D6:C1:57:98:BE:5D:BE:04:E2:7D:43:E5:26:64:17
X509v3 Authority Key Identifier:
keyid:0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fc:76:0d:46:05:5f:ea:c4:f2:3a:56:f8:6b:c5:26:7b:de:
bb:ba:52:ae:6c:29:f7:f3:1e:fa:b2:ef:8e:f0:5f:a5:6e:62:
b6:ff:2f:21:f4:18:64:a9:81:93:eb:0f:aa:37:28:54:4e:16:
fe:41:0c:38:d5:e4:74:fd:80:4c:c9:65:99:f6:58:59:e4:ca:
d0:3e:04:a8:85:c1:56:06:23:7e:3a:02:f4:e6:36:70:08:57:
57:6f:20:6e:e5:4e:74:21:f6:ba:61:5c:31:e6:42:46:65:e6:
49:13:00:de:cc:87:bf:29:3a:fe:57:ee:4d:bb:b9:a7:39:47:
8b:49:81:06:8f:57:ee:29:cb:d1:bc:7e:f0:49:a0:df:dc:02:
bb:d2:67:a3:80:02:a9:e9:26:b1:17:8a:1f:c5:29:9b:43:43:
6d:42:91:f2:e3:50:be:a3:1b:87:e9:b8:5e:73:e8:04:0e:52:
94:74:dc:cc:33:d1:c1:e1:d0:61:55:8e:2d:ea:3b:e5:44:39:
1e:18:f9:1a:9b:16:90:39:bc:98:cb:f7:e2:dd:5c:20:13:9b:
1f:c5:e6:c3:83:77:7a:33:77:7c:c9:3c:48:b7:46:f1:6b:be:
9b:87:d9:7f:b5:4d:25:fb:26:74:52:ad:70:67:83:b8:d4:42:
36:18:87:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:12 2026 by rpki-client