Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: Gecd+YRRRlCpR9KhGv3SqahUUJ8KgF4r+uYgXZfVfqQ=
Subject key identifier: 7E:59:C5:02:17:30:DE:97:F4:DE:CA:BD:D0:E3:98:C7:25:E4:A7:A7
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 019D2A3C4100923B76DF0CF157FAEB40BE0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 16AB
Signing time: Thu 26 Mar 2026 13:01:25 +0000
Manifest this update: Thu 26 Mar 2026 13:01:25 +0000
Manifest next update: Fri 27 Mar 2026 13:01:25 +0000
Files and hashes: 1: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: 6Hy1yUsqUPk6Cfbk9rWtxNlS26+VzuxDpZWX30vvJQk=)
2: dOFQf5AeWGROir3bR0l9oDiF_LY.roa (hash: NCU9gdpQPYAW35UhF4+gLu5Dhpwg+184qJ8TDUdFqxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:41:00:92:3b:76:df:0c:f1:57:fa:eb:40:be:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Mar 26 13:01:25 2026 GMT
Not After : Mar 27 13:01:25 2026 GMT
Subject: CN=7e59c5021730de97f4decabdd0e398c725e4a7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:00:92:b4:34:13:f2:8e:48:63:bc:c3:48:
da:fa:9c:34:bd:d7:ed:1d:bf:f9:f9:8a:2d:4a:a8:
99:6e:8d:d7:4e:85:ff:04:ee:f0:5b:33:b1:f3:57:
8e:95:8b:32:ef:c5:db:20:91:38:12:83:75:29:5b:
3d:61:9f:b8:40:aa:f9:03:f6:59:0d:0c:b4:79:4b:
2a:4c:3b:6e:c7:14:91:04:6b:2d:cc:81:c0:bd:ac:
f6:65:c9:2a:f5:02:2c:7b:40:91:21:f0:d3:0a:58:
c3:f6:eb:d4:90:16:21:c8:2f:de:44:a3:42:35:de:
02:b6:e9:4c:c0:bb:c6:07:1c:80:59:8d:3c:07:91:
8b:58:47:1a:8f:38:e0:52:91:3e:17:63:7e:d4:8f:
bc:b0:62:1e:fe:8f:4e:ef:84:ac:40:fc:8e:8c:20:
cd:7b:13:7a:6b:ca:49:01:41:78:0b:23:5e:a7:22:
7b:08:1b:fb:d6:78:27:79:0b:f5:ef:70:58:29:21:
8e:7a:01:ed:a4:f0:71:d8:1c:04:13:7e:bb:a9:5b:
9c:cd:c6:b6:73:d6:02:98:1f:98:0e:e8:9b:19:1f:
74:e8:f0:dd:28:a0:00:c9:fa:37:7e:35:32:69:86:
a3:8d:37:12:c2:9e:c0:57:06:fa:1a:69:6f:d9:9a:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:59:C5:02:17:30:DE:97:F4:DE:CA:BD:D0:E3:98:C7:25:E4:A7:A7
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:64:db:0e:34:47:00:44:80:83:72:fe:0b:52:c2:2c:1c:9c:
4e:e3:a4:fb:5c:87:d2:93:87:44:ee:b1:2f:71:d3:7a:25:e7:
62:78:1f:d1:98:ed:16:64:13:43:d7:41:29:3c:e7:72:1f:00:
32:c5:0e:45:77:ff:fd:6d:9a:d0:24:18:b4:b7:83:27:c2:af:
b8:f9:5d:06:8f:64:0c:cb:8c:13:de:6a:92:87:52:1b:7f:6c:
9c:d8:90:ef:d9:89:8b:32:bb:58:91:10:b6:ab:5d:03:91:2d:
56:5c:0d:0c:4e:a3:bf:45:b0:21:f6:ed:fa:36:8b:9d:f4:7f:
66:80:fc:7a:ee:a1:7b:0f:69:95:50:d6:17:d6:bb:9e:c8:e0:
82:c7:c7:2b:52:8c:a4:c3:00:8e:94:15:ab:01:5d:dc:2a:f4:
79:42:48:c1:45:74:cd:2a:a2:6a:7f:3c:54:e0:aa:46:78:0a:
90:02:7c:12:9b:f9:95:de:17:30:b5:97:18:c6:3f:fd:95:d5:
fc:b2:aa:98:da:80:f7:f9:ed:c1:19:72:00:7f:91:0f:9c:0f:
5a:f7:2e:52:e2:f7:1a:13:11:3c:f6:b6:f6:30:af:73:ab:01:
6c:57:49:08:21:51:a8:d0:2d:80:50:2c:8c:8a:9f:48:5a:df:
ec:30:30:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:38:22 2026 by rpki-client