Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: 55e6I0Fd8kkOhMGl5Y3Ak+n+TtDrAV1p/ik79Ptdzhc=
Subject key identifier: 92:26:9C:B8:47:5D:EC:6F:6C:30:0E:E9:90:C2:AC:BE:E6:27:54:C4
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 019D2771EEBFF846335616142CCA153E4042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0DA0
Signing time: Thu 26 Mar 2026 00:01:11 +0000
Manifest this update: Thu 26 Mar 2026 00:01:11 +0000
Manifest next update: Fri 27 Mar 2026 00:01:11 +0000
Files and hashes: 1: SzookzV0kvbV2uV2WuzBzsdzDN0.roa (hash: 305744fYy853yhsc/+Jcw6ozr6ihNDOG9TribOS/z2s=)
2: TWCjy8hYVvxSie77cpH2Pet8J70.roa (hash: UosiAuR+zQzxXxFaYN3sf+bjMmm4ozCxMZtIycUu35w=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: c9kWhNnzHP77vFAiZrvC5E3LufGpkqZs7IrF+J7cvpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ee:bf:f8:46:33:56:16:14:2c:ca:15:3e:40:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Mar 26 00:01:11 2026 GMT
Not After : Mar 27 00:01:11 2026 GMT
Subject: CN=92269cb8475dec6f6c300ee990c2acbee62754c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:a4:a1:2d:31:72:03:91:05:de:0e:71:f9:
82:24:ad:d9:5a:d1:84:fe:03:17:6a:86:76:b8:ea:
0f:10:26:b5:2e:ec:5f:50:b3:e6:fd:73:69:68:0f:
b9:3d:cc:b7:8b:8a:bf:42:bc:1a:50:53:72:f8:5a:
0d:37:a0:d5:f3:aa:fa:46:62:17:ba:8f:10:40:1b:
86:91:11:c7:0f:ae:3c:e2:34:07:31:6b:1d:98:b5:
51:e3:25:2c:15:1c:61:80:8d:a7:6b:48:0d:8c:cd:
fa:f5:55:54:70:f0:41:a2:53:ee:15:99:21:3b:b6:
40:4b:d5:e4:48:33:d5:cf:de:63:ef:57:ab:86:a0:
b3:da:5b:99:cb:a3:db:a0:33:d1:df:94:4c:f1:1d:
f2:8b:87:18:f2:60:39:cb:ee:ce:fa:8e:aa:26:57:
62:57:1c:71:e7:48:1d:b5:a8:01:ba:a0:ef:b6:2b:
72:82:11:47:f0:5b:67:e1:0f:55:d8:58:7e:d2:ef:
49:03:52:ca:b6:64:8d:15:1d:dc:ad:2c:69:b7:21:
b9:c4:e1:be:f6:e4:6f:f5:e1:ff:62:aa:b4:cf:87:
88:be:77:18:22:12:c8:70:79:df:f7:ad:4b:fe:20:
45:34:e3:a9:d2:e8:17:52:9a:c9:36:28:71:4a:99:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:26:9C:B8:47:5D:EC:6F:6C:30:0E:E9:90:C2:AC:BE:E6:27:54:C4
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fa:05:1e:2f:b5:24:16:7b:52:58:28:2e:1c:c3:66:0c:c3:
e5:22:d4:fe:93:1c:7f:55:b7:58:ae:42:ce:17:8c:cb:7c:d1:
51:38:67:a3:d0:86:5b:59:d0:16:72:b2:2f:4a:74:45:25:d2:
d1:cc:7f:9f:3b:ed:1b:7e:88:f3:19:6a:ac:d9:0c:d9:fa:6f:
f5:91:a7:df:63:26:7a:08:ee:af:6f:43:90:1b:b4:84:38:21:
fb:b8:d1:84:bc:ee:b9:d1:a7:cc:fa:4f:66:ca:d5:53:38:9b:
53:af:21:65:96:68:56:4e:59:36:95:37:67:88:d0:eb:14:06:
11:26:f5:ac:97:47:0c:67:47:0b:f9:14:a5:f1:87:e1:52:5d:
d7:51:f4:37:a7:8d:62:66:05:d3:d4:a0:1a:a9:4b:9a:07:c9:
0f:11:29:a3:59:73:42:21:d8:f5:59:a2:99:4a:a8:ce:b9:aa:
cf:4a:f6:87:2a:ea:c7:41:09:15:f0:97:48:11:c7:20:ac:15:
97:e9:c1:81:1a:30:40:8b:47:3f:32:bf:7e:fb:19:b7:ae:39:
3b:88:eb:cd:ce:7b:61:7f:11:b8:20:7a:09:b9:44:49:5b:b4:
94:75:1f:fc:93:54:6e:b8:bc:11:d6:d2:42:fe:32:27:83:a5:
dc:b9:6a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:02 2026 by rpki-client