Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
File: dAThbzM9iWUMZhOsbJXTSNxLeVA.mft (raw, json)
Hash identifier: jMIVCXLw1WSRc2p1+CZlWKqRVUkzj+mUkdpKfkqPd4c=
Subject key identifier: FA:71:55:D4:A9:00:A7:D1:04:0A:15:0D:8E:55:3B:84:CC:5A:CC:E3
Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
Certificate issuer: /CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Certificate serial: 019D28BB98AE6D3CC5B3242FC5F2AF88EBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
Manifest number: 0411
Signing time: Thu 26 Mar 2026 06:01:16 +0000
Manifest this update: Thu 26 Mar 2026 06:01:16 +0000
Manifest next update: Fri 27 Mar 2026 06:01:16 +0000
Files and hashes: 1: aON68VTwskogSIwfK0by-nZp_Rg.roa (hash: dkh8/Wbv+HTgUBFM4ZbuS+fZuVAjLH6qIB6RVSRMT9M=)
2: dAThbzM9iWUMZhOsbJXTSNxLeVA.crl (hash: Tk+7CA5ciDn39qIonxh5gOz0HcZKL5mtGGfPvTH3cPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:98:ae:6d:3c:c5:b3:24:2f:c5:f2:af:88:eb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Validity
Not Before: Mar 26 06:01:16 2026 GMT
Not After : Mar 27 06:01:16 2026 GMT
Subject: CN=fa7155d4a900a7d1040a150d8e553b84cc5acce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:fa:67:4e:86:a7:06:f0:a2:95:db:4a:65:
55:8c:fe:57:c7:e5:7f:07:02:48:a7:b4:31:b3:54:
e9:83:c3:96:b1:56:ee:76:66:05:ae:e5:8c:f6:e2:
9a:a2:df:9e:ad:13:50:57:3d:76:a4:72:6b:4a:a0:
a6:0b:f9:d6:17:52:58:97:fb:06:0e:2b:03:d0:30:
17:1f:40:09:a8:c9:18:e3:49:e4:a5:9e:77:33:08:
bc:03:77:58:ef:7d:25:81:0f:ac:7f:b6:4e:f8:ad:
a0:b2:6b:27:38:f8:e7:43:d4:c8:ee:1b:94:91:36:
29:20:e9:e7:21:02:9e:f5:58:cd:81:1e:59:2f:5d:
68:43:0d:20:e3:d0:38:ec:a0:8a:10:ac:a9:7e:1f:
17:ce:0e:ba:fd:18:d0:af:0f:72:2d:73:4a:5e:98:
bd:f1:51:82:9b:64:c1:cb:6c:c2:42:2d:90:50:a3:
84:6e:a0:19:fa:94:cc:89:cf:97:3a:a7:1d:78:23:
74:76:cf:84:ea:90:d5:1e:f8:04:04:0f:ec:f5:2c:
1c:04:80:bb:93:6c:9c:83:81:f2:d2:da:e3:ca:ee:
ac:59:91:2e:f0:b5:c3:0c:9c:e6:c2:f7:7c:ed:68:
94:1e:f9:ef:77:79:53:0e:b2:40:32:03:2f:12:15:
7d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:71:55:D4:A9:00:A7:D1:04:0A:15:0D:8E:55:3B:84:CC:5A:CC:E3
X509v3 Authority Key Identifier:
keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:80:ff:cb:de:8c:e1:88:8b:de:42:24:cf:9a:dd:83:d4:3f:
16:ba:68:7a:90:86:a0:92:3a:a5:51:21:e1:0e:b8:66:18:91:
df:61:bd:4a:67:97:65:a4:76:3a:ac:7c:5d:02:da:71:93:94:
46:72:0d:81:97:7d:20:6c:cc:a9:40:08:44:5b:84:a7:62:f3:
56:b0:1d:e2:54:c3:f8:a2:3c:47:8f:d5:62:4b:34:b3:e1:b9:
ec:61:29:2a:f2:22:c9:67:16:2f:30:16:b1:dd:f8:57:1c:6d:
38:b7:a3:32:18:71:85:2e:dd:db:f0:dc:57:37:08:ef:6b:91:
cf:a8:d6:11:83:26:93:e8:63:6c:0e:51:80:d7:c8:f1:d5:00:
00:ed:f8:cb:ad:23:82:9a:66:a7:b8:ec:0d:38:cd:5b:b6:61:
1b:cb:6d:02:cf:bf:59:eb:b8:36:9c:71:fa:75:9f:35:64:19:
a6:04:6f:7d:0e:15:94:97:86:fe:4e:ae:f0:19:86:b4:a2:0f:
3e:ca:31:d9:56:cc:92:31:91:22:2e:ae:e1:03:f6:cb:3f:79:
a9:b9:2a:99:82:78:87:f9:15:b9:c8:e0:a6:fb:5f:42:91:18:
0f:82:f3:a6:a4:87:92:30:a9:be:c3:ea:c2:af:30:7f:26:9f:
ba:4a:6a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:51:25 2026 by rpki-client