Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: nIQGZ65kjhK9ZN87hPQ+c/CpIvjySht8vIk+CPZ/Yq8=
Subject key identifier: 7D:DD:B2:82:55:79:0D:BF:68:C1:8F:F5:51:61:C1:6B:B8:95:C5:2A
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 019D281646B88D391A612DE3B3F342E99464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 048F
Signing time: Thu 26 Mar 2026 03:00:41 +0000
Manifest this update: Thu 26 Mar 2026 03:00:41 +0000
Manifest next update: Fri 27 Mar 2026 03:00:41 +0000
Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: 55wsgQgEjNCc4x7b7EZ6SW2YeH5AazgDoWwG9UZnebs=)
2: kiTvl7qRwBbY6cobkK0xpr1YwKU.roa (hash: ej/OHpg3lUXGkRe1UvCRILNoIypuMG3kknoqujS4cxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:46:b8:8d:39:1a:61:2d:e3:b3:f3:42:e9:94:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Mar 26 03:00:41 2026 GMT
Not After : Mar 27 03:00:41 2026 GMT
Subject: CN=7dddb28255790dbf68c18ff55161c16bb895c52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:5d:fa:68:97:fd:61:60:0e:bf:f7:f4:3f:
2c:40:95:05:c3:9d:0f:ae:f8:50:08:02:45:ee:e9:
6f:62:c7:0b:4b:48:59:88:e2:ef:04:65:5e:e3:79:
2f:bb:04:63:69:ac:de:56:90:e5:b0:d5:26:0f:93:
b5:cd:e6:02:79:03:4e:ae:ad:62:35:be:5f:1a:39:
c0:44:3d:01:8c:3a:3a:88:b4:8a:98:b2:80:39:84:
30:c9:f5:7c:87:fe:1e:f2:5e:8e:0a:4d:94:7f:5d:
24:db:3e:27:86:ba:a1:35:0c:6d:05:c2:e4:0c:45:
8b:bb:5c:df:02:ec:35:77:be:1a:ea:30:fd:47:98:
e2:ca:e2:6a:7b:3a:62:fa:7f:26:b6:5d:bf:77:99:
1d:69:e1:09:ff:43:f5:b7:63:83:d3:ed:8e:79:6e:
45:fb:cc:0a:0d:e4:32:9f:50:6a:97:d8:e8:64:4e:
14:1f:d8:15:22:77:16:b9:d4:11:51:8f:16:c3:bf:
1c:38:46:03:40:a7:d8:28:b5:52:d4:39:4f:92:87:
a3:51:cb:b5:3d:e3:2e:78:22:ca:9a:07:f3:f2:47:
1b:c4:95:24:db:4c:95:df:d4:4c:f0:f1:a3:ef:b4:
8c:35:9a:18:1d:46:e0:b3:8f:47:a1:ab:5c:de:81:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DD:B2:82:55:79:0D:BF:68:C1:8F:F5:51:61:C1:6B:B8:95:C5:2A
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5e:8d:ab:ad:7a:77:f6:63:e0:0e:67:eb:d5:6c:90:48:79:
2c:4c:b8:b8:ca:1f:e3:8a:f2:25:9f:dd:28:7f:af:65:62:1b:
36:c4:22:4c:68:8b:16:61:19:ea:8e:75:6a:ba:d5:d2:2b:7c:
0a:bd:2e:17:b0:3a:e6:0e:65:3b:a1:32:a1:51:66:c1:e7:07:
8a:00:ac:99:fc:e7:42:d3:16:03:d5:30:a8:db:fe:cb:d9:bf:
32:ad:0e:ed:5f:f9:4a:09:a1:ce:2a:dd:78:3c:90:8d:d4:2f:
12:42:10:19:9c:75:02:0d:31:47:39:6a:3e:7d:05:8d:a4:f5:
19:fa:85:9e:db:99:e9:55:10:02:3a:9f:b3:1d:84:7e:1d:4b:
6e:2a:69:d0:8f:3f:28:f2:0a:c2:4e:78:c1:c9:21:68:ec:eb:
a8:c4:19:dd:8e:c3:cd:1d:bd:be:d0:6d:2b:5d:09:9b:0c:3d:
5c:f2:64:f1:5f:0c:79:0f:f9:d1:0c:9c:f7:bb:a3:43:01:8b:
ae:a1:9f:2a:f0:7f:d7:22:11:12:a2:90:50:f4:38:93:56:f8:
f2:d5:ac:64:83:8f:18:c1:36:2a:e3:79:3d:f4:d6:3f:0b:c9:
11:71:fe:1a:99:31:49:3a:00:74:7c:5d:89:08:e2:7d:10:08:
45:ad:a1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:20 2026 by rpki-client