Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
File: D97nlErE2jERKV2B4p3roAwWOpY.mft (raw, json)
Hash identifier: pbYOgO7B+4tEevHel1CXFw8vCECitKFehLsLtSmidgQ=
Subject key identifier: F6:18:A6:73:04:A0:24:27:6B:BC:96:70:11:0C:D6:7F:F4:6F:44:81
Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Certificate issuer: /CN=0fdee7944ac4da3111295d81e29deba00c163a96
Certificate serial: 019D28F304AC15B7B69FFAD495334645AE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
Manifest number: 1282
Signing time: Thu 26 Mar 2026 07:01:48 +0000
Manifest this update: Thu 26 Mar 2026 07:01:48 +0000
Manifest next update: Fri 27 Mar 2026 07:01:48 +0000
Files and hashes: 1: D97nlErE2jERKV2B4p3roAwWOpY.crl (hash: izZulgLgITrf84Uy9Rl2xkafitXEr5HiE88JAR8pMcg=)
2: WgNv7-eEqKwSW95Nva_O1MQX1iY.roa (hash: 9ipqetu8ePvj0pp7eCO9cwEQqK0gXGR/o2mUfaHu77U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:04:ac:15:b7:b6:9f:fa:d4:95:33:46:45:ae:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96
Validity
Not Before: Mar 26 07:01:48 2026 GMT
Not After : Mar 27 07:01:48 2026 GMT
Subject: CN=f618a67304a024276bbc9670110cd67ff46f4481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2c:81:9f:f3:7d:1c:28:1f:9d:52:2f:2b:be:
53:de:69:c4:f3:4f:54:6a:df:7c:3c:02:8f:f4:1e:
9a:b7:85:57:8c:d3:7b:c7:e9:ca:f8:3e:a4:b8:d1:
63:2c:69:e5:af:e3:e7:7d:23:6d:7d:cd:d0:ce:c3:
4b:8c:12:4b:40:7d:bd:a7:f2:fc:2e:5a:9e:9c:d9:
cb:a7:31:63:9f:ff:85:cb:4e:f7:79:aa:90:c8:9a:
9a:cc:a5:94:76:74:cc:3e:9d:c0:a7:81:a4:49:c1:
cd:bb:2d:af:6d:e6:7a:c9:3b:41:db:73:c4:5e:90:
5e:1e:95:b9:c1:10:48:4b:a7:51:e6:c5:ed:df:9d:
98:e6:6c:42:57:3c:cc:f7:bb:db:a6:6e:21:18:3b:
dd:5b:15:8b:01:58:bf:d2:dc:1e:98:5a:e2:92:9a:
1b:0a:4e:a9:83:6e:13:e1:37:83:7c:5d:79:ab:a7:
08:bf:96:06:da:14:7b:00:74:03:7d:1d:9c:db:f1:
dc:60:84:08:c4:ed:2a:f5:f3:9f:9c:d2:94:b8:89:
51:17:1d:e5:a2:c6:c6:72:37:79:27:1a:49:90:6f:
5d:33:03:ec:87:7f:12:f2:a1:1d:1c:9b:4c:c3:41:
2d:c0:2d:fb:c2:50:fa:64:b9:cc:ac:9a:99:b2:a1:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:18:A6:73:04:A0:24:27:6B:BC:96:70:11:0C:D6:7F:F4:6F:44:81
X509v3 Authority Key Identifier:
keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9f:d5:05:4c:44:09:d9:23:65:5d:f6:5b:3d:39:c5:11:23:
8d:8a:9d:70:19:f7:47:06:50:e0:db:0a:47:5f:a7:d1:b5:45:
69:21:53:bd:6e:7d:f4:ce:25:fb:79:6b:c9:e5:b6:d1:99:af:
b1:35:d4:2f:2b:86:34:8c:75:e2:53:0b:0c:ea:b4:96:6d:a1:
72:3d:b2:dc:3e:32:87:b9:5a:ee:ac:4b:45:66:dc:4e:74:b2:
eb:c9:9a:2b:00:19:b3:e0:f6:3e:c7:8d:52:0e:72:b5:7b:0e:
62:a4:37:bd:7e:4e:ac:08:39:97:c5:af:fd:f5:2c:29:19:91:
27:8a:48:a4:ed:5e:72:a9:55:b7:e1:df:5f:cb:f8:1b:b2:6a:
b7:30:a7:0d:56:c9:91:0e:a9:a7:18:98:ab:f9:47:85:ea:82:
e2:d0:03:ad:28:f8:67:ad:43:cd:9a:f9:66:cb:df:1e:05:37:
8e:0e:7e:ae:08:4f:85:7e:79:90:2a:db:d4:26:0e:22:f7:cf:
d0:5f:7d:fe:62:ea:0a:7c:06:75:6d:ec:5c:bb:34:cc:e8:a0:
d1:b2:7a:9b:af:3f:04:4e:3a:6a:3b:3e:24:67:69:87:8f:c3:
c1:01:4f:39:89:53:51:5a:8a:06:61:9d:3d:ee:62:4f:16:d2:
a9:8d:b7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:45 2026 by rpki-client