Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier: WgMiPW2hsxr7dyIPMHr/80DCrJtCLjFC6wHnKn0VWaM=
Subject key identifier: 1C:99:42:2E:15:F6:A9:E1:D2:3B:8E:3C:4D:A0:86:0F:28:C7:E7:59
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 019D2703F49C261EE5161A7FD101D4A52098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number: 0F1C
Signing time: Wed 25 Mar 2026 22:01:03 +0000
Manifest this update: Wed 25 Mar 2026 22:01:03 +0000
Manifest next update: Thu 26 Mar 2026 22:01:03 +0000
Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: 6Vd+bpRc1ZuoI1VxTvhCHUPUKnGP82gIklaHYCUxs7s=)
2: jK9vJkC-9INkg3kH606wmZpM3gY.roa (hash: pPtcnLjluAlTQa5sDa1ndB+L+idIHW8vl3l2EMrfHcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f4:9c:26:1e:e5:16:1a:7f:d1:01:d4:a5:20:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: Mar 25 22:01:03 2026 GMT
Not After : Mar 26 22:01:03 2026 GMT
Subject: CN=1c99422e15f6a9e1d23b8e3c4da0860f28c7e759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:dd:8e:ab:d2:29:81:52:9c:0d:1c:3a:a1:
f5:d4:44:dd:04:37:ee:aa:6a:d8:b0:03:21:56:75:
e9:0c:50:0c:94:5a:ab:f4:09:46:f8:3d:57:35:26:
88:5c:7a:0e:6f:0e:6a:6e:79:90:76:b3:d2:78:3b:
07:08:ea:05:85:1f:63:92:3f:97:31:61:3e:6c:bc:
b9:bc:5a:a5:b5:eb:d7:57:08:7e:de:b1:45:df:31:
2c:65:cf:17:46:51:f8:22:17:60:ac:e9:ff:cf:b4:
e9:ee:4b:4a:27:32:26:54:af:52:7f:04:27:dc:44:
82:c2:c1:6d:6d:12:1e:8d:34:76:c2:52:fb:e0:10:
1c:9e:fb:b9:5d:ad:bd:e6:cb:22:27:bd:fd:57:9a:
2c:3a:9e:49:56:47:cb:ab:6d:c0:6b:dc:71:8a:bc:
9c:22:9e:53:62:d0:8f:f5:f4:4a:1f:5f:c2:0b:75:
ba:67:51:26:dc:71:f6:5d:5c:06:5b:98:9d:18:57:
69:57:df:0d:ae:19:de:20:45:69:0a:21:f2:bb:cd:
ff:e3:bc:fc:14:14:7b:3b:81:8b:c4:dc:d1:17:28:
fb:f6:4e:b5:d2:cd:e8:7d:71:bd:c0:b8:dc:5a:83:
0d:57:6c:a6:72:3e:82:55:be:6c:e8:ba:d9:18:bc:
bc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:99:42:2E:15:F6:A9:E1:D2:3B:8E:3C:4D:A0:86:0F:28:C7:E7:59
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:af:b4:14:4a:41:e3:76:5a:8d:56:bd:56:1c:0a:ec:82:18:
fc:2e:b5:6b:df:27:db:52:84:13:6b:8b:f6:d5:c9:2c:b1:12:
90:50:0f:4f:c8:16:9c:c9:99:64:a8:e2:fe:df:51:f9:8d:f8:
73:32:e1:31:30:e6:8c:3d:cc:2e:8d:cc:22:b7:bb:79:3d:0e:
6a:55:c1:68:31:b0:1f:c6:4d:2d:7e:e2:b4:8f:80:22:ad:6b:
d5:ea:cf:10:f8:c5:71:46:ae:9c:5a:56:fc:52:dc:f2:c5:8c:
58:71:a4:12:02:fd:41:d9:71:07:18:bc:2a:b3:d0:2a:4c:e7:
fb:21:ca:68:72:f6:9c:93:fb:27:85:0b:1d:7f:e6:e9:62:f6:
e3:ce:2e:b4:cb:76:ac:4d:7c:ec:90:f9:13:52:59:4c:6d:13:
10:d8:5d:19:7d:bc:dd:75:b3:7b:f8:a4:3b:2b:8b:07:4b:38:
d0:76:57:1f:26:9d:14:6e:ea:71:28:3f:af:02:41:fc:3d:d5:
60:ec:c3:d4:53:0d:3e:20:8a:39:6d:15:bd:18:73:92:fb:6b:
7b:18:d3:56:00:49:10:6e:e5:89:23:ec:e2:6c:51:34:61:ed:
1a:85:15:ef:0a:87:a6:54:24:a4:d3:88:c7:c5:62:94:40:2f:
f9:19:89:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:59:50 2026 by rpki-client