Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: FT35ZjAOV6BEx/h9q0Qb6tEHRakkHKWC/qlK1BQK7zc=
Subject key identifier: 24:AB:E6:AD:F7:6D:CB:B3:32:67:AE:4C:97:7B:34:BB:3B:C0:76:32
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 019D28BB3AF5EDA35531E340D9FE43809A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: 060A
Signing time: Thu 26 Mar 2026 06:00:52 +0000
Manifest this update: Thu 26 Mar 2026 06:00:52 +0000
Manifest next update: Fri 27 Mar 2026 06:00:52 +0000
Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: 186nZAyisTKIsIe2aRaSP+jpkbJcAe575MNwiwP8uK4=)
2: elu1abDHd3RfzpApGEKnDnwdAcI.roa (hash: HHOSPK0nfYS+xwtq8H1DXb/qJlWmVpm7P0B6dxlEAcU=)
3: ygV7k6nVaZCAnScNFHt4paZc8MM.roa (hash: Fv0BlTXpeeDK0QHZ/q3zQcl9lKT33vm1AnUd5vQrW08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:3a:f5:ed:a3:55:31:e3:40:d9:fe:43:80:9a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Mar 26 06:00:52 2026 GMT
Not After : Mar 27 06:00:52 2026 GMT
Subject: CN=24abe6adf76dcbb33267ae4c977b34bb3bc07632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:dd:5a:7c:8e:88:df:6e:83:68:88:ce:e1:
53:6e:4d:c5:6b:99:b3:e4:74:e2:ff:e3:bd:4b:e3:
64:7f:4b:5c:c8:35:cf:58:35:91:aa:93:6a:94:56:
50:0e:e8:31:a7:df:7f:00:93:ab:6e:06:93:11:79:
1c:88:72:6b:d5:2c:cc:97:a1:43:99:fa:e0:15:c9:
8a:2d:e2:ba:73:29:f8:a8:df:39:4f:ba:37:55:b5:
f7:c7:f2:c6:e6:6a:63:26:bb:6d:89:cd:3d:d6:e3:
09:cf:32:02:0e:d3:68:5c:31:93:75:14:be:21:cb:
d1:55:90:2d:0f:4a:5d:67:44:5f:53:48:d9:e4:d4:
ee:58:24:90:52:56:1e:1f:9b:dd:46:48:c0:6b:32:
35:0b:c0:1f:9f:f9:3e:f8:98:ca:c3:99:a0:65:92:
7f:e0:17:c4:b4:99:3b:1f:7f:6f:10:3e:0f:62:34:
d2:b8:90:c0:dd:c2:49:e2:a4:b3:53:87:7c:c1:6c:
94:53:32:46:55:7c:62:5f:33:05:5c:1f:7b:b6:3d:
0e:6d:eb:8e:7f:fb:0d:0e:cc:75:24:d7:ce:31:d4:
90:af:ba:4e:cb:61:80:53:9c:27:be:27:88:f1:eb:
9b:f0:95:8b:46:f0:5b:d2:58:1f:9c:51:ca:de:68:
10:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AB:E6:AD:F7:6D:CB:B3:32:67:AE:4C:97:7B:34:BB:3B:C0:76:32
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8d:a3:de:a3:9b:f7:ed:05:fe:73:69:8d:53:96:1b:1a:86:
76:ac:10:97:79:ea:d7:2e:71:97:88:6d:35:12:6a:b1:44:e8:
55:b4:6d:76:0a:a2:3f:f2:4a:94:68:d1:13:63:8e:a6:bb:61:
af:8d:74:80:d1:62:d2:74:2e:f7:e4:11:35:be:1b:b5:06:8f:
a0:24:51:ed:40:ad:c3:2d:81:c3:34:05:9e:66:f6:f4:b4:d9:
d4:5f:8a:34:64:b3:28:a3:f7:d5:01:50:1e:84:eb:e6:d7:b1:
e0:a8:b2:70:4f:7d:a5:c3:dc:47:95:be:ab:d8:3f:26:80:6e:
bc:fa:ed:95:f6:b1:91:f4:2e:69:3e:2e:58:8d:3c:36:d5:28:
35:f4:07:92:98:6f:5c:94:bd:0d:7a:f8:ab:a0:45:a0:64:3f:
e3:5e:11:60:f1:02:46:b0:4b:61:76:70:05:ee:02:82:cd:b4:
80:b5:c1:b4:96:a1:f8:bf:b9:2b:66:81:26:2f:19:e6:1d:f1:
dd:bf:bd:9e:5b:77:53:43:42:df:03:fc:9f:6f:68:5b:bf:16:
0f:8c:fd:28:dd:d9:9d:a1:c1:93:48:b9:7e:c2:4b:c8:42:ea:
8e:22:25:d0:2d:39:7d:6e:28:d1:72:bb:f9:b9:f7:06:64:8f:
43:f3:09:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:29 2026 by rpki-client