Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
File: 03fcZqVjo68h7gerM-i__nr5KI4.mft (raw, json)
Hash identifier: 5CDYfcpb/xndJqmmu88/P5+r1R3LvtxxQhS7Ky8vckY=
Subject key identifier: F8:F3:1C:3B:8E:E3:A0:E9:14:ED:BC:47:9F:98:26:20:1C:A7:23:3F
Authority key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
Certificate issuer: /CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Certificate serial: 019D26CD37916863C3F44643C48C09979387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
Manifest number: 06D1
Signing time: Wed 25 Mar 2026 21:01:16 +0000
Manifest this update: Wed 25 Mar 2026 21:01:16 +0000
Manifest next update: Thu 26 Mar 2026 21:01:16 +0000
Files and hashes: 1: 03fcZqVjo68h7gerM-i__nr5KI4.crl (hash: SdravRCTmgcmEKGOp5R0BNq1RHC8xJu8FzWZuLwU5bc=)
2: H20JQocMFrDfWdVutaPCrCC7li4.roa (hash: gZcsKxQMJ6dZalTlYBUSf2/QY+Hj8zaB/GmOyCIp1vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:37:91:68:63:c3:f4:46:43:c4:8c:09:97:93:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Validity
Not Before: Mar 25 21:01:16 2026 GMT
Not After : Mar 26 21:01:16 2026 GMT
Subject: CN=f8f31c3b8ee3a0e914edbc479f9826201ca7233f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:96:30:f9:f1:05:4a:df:47:54:f1:5d:82:
e0:4f:e7:d3:01:9e:b9:26:4f:a6:9c:bb:f9:5b:66:
7e:05:b6:91:4b:34:62:fc:bd:85:17:03:68:1b:9c:
76:73:d0:1f:cd:ac:e7:ea:0c:8c:a7:3d:32:b2:2a:
84:32:b2:5f:fd:7a:5b:87:4b:a7:b6:82:29:81:b2:
e8:fb:76:8a:86:4d:3e:4c:73:4e:3e:b8:e3:f3:00:
82:3c:d8:19:33:15:5b:03:9e:85:8e:b1:70:a3:1f:
cc:50:88:ef:7f:6c:13:81:fe:2c:b3:c8:d6:34:9b:
89:c3:4a:aa:33:00:a1:f5:ff:c7:2b:fe:43:4d:a9:
4b:43:81:41:91:27:90:7e:9a:a5:18:3f:60:72:0a:
19:50:60:6a:09:1c:16:f4:59:ad:4d:75:d2:dc:28:
82:ac:cf:18:bf:4f:93:49:f6:f2:61:e7:d4:33:50:
91:e4:29:fe:98:1f:be:12:d2:27:ba:4b:f2:5b:15:
1b:f9:4c:cf:ee:53:80:46:d5:fb:3b:de:e6:93:1c:
75:3a:21:98:56:c9:e2:7e:f9:14:63:0f:11:3d:b5:
b5:46:81:98:56:22:46:eb:45:73:50:5b:56:19:95:
b6:6a:cf:0a:10:32:d7:7a:80:20:4e:ad:38:06:fb:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F3:1C:3B:8E:E3:A0:E9:14:ED:BC:47:9F:98:26:20:1C:A7:23:3F
X509v3 Authority Key Identifier:
keyid:D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3e:49:5f:bd:d3:b2:68:17:ef:4d:fa:b2:92:f0:9f:d9:32:
f9:7b:4f:34:97:9c:14:d5:0f:ef:f4:02:87:68:3d:eb:dd:96:
02:12:79:4c:24:9f:88:11:b7:9b:ac:1b:3e:df:84:1f:fb:69:
d4:8e:42:10:e9:31:ee:50:47:de:dd:a6:39:34:cd:fe:23:ce:
0e:ec:21:88:30:7a:89:4a:a4:5d:d5:54:53:2c:16:98:06:50:
c7:3d:df:39:31:48:5d:02:3c:3e:ac:b7:74:f8:e1:4d:bc:6a:
28:4b:de:03:45:9b:a1:8b:d2:f5:0b:25:75:d3:77:e2:1e:e9:
1c:47:e0:fb:fa:b1:6a:23:59:2d:e6:a2:f2:07:c6:48:4f:c1:
90:6c:34:d2:c3:cf:77:63:ab:af:e6:e0:bd:b2:99:97:77:bf:
0e:b4:e6:54:d3:5f:d1:63:80:47:4e:5f:f1:50:81:e6:98:bf:
16:f6:4b:17:82:8a:d8:16:8f:ea:38:02:91:8f:7d:b6:31:83:
7b:a3:77:ec:81:33:d6:64:b5:b6:19:56:b6:9f:29:0d:87:f6:
37:2c:9a:bf:d8:be:91:42:b8:e3:33:07:de:e3:2d:4c:12:ff:
ec:34:35:ec:5b:1c:a6:27:3b:ca:e6:2c:bc:f6:73:6b:7e:42:
0a:8f:47:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:53 2026 by rpki-client