Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
File: d-L_RonUITUPdqNzvBGT5FG4HvU.mft (raw, json)
Hash identifier: Bu/kb4VF9D9BMzwoSMeQbwcLdKGOd5rxaJEz570ATJw=
Subject key identifier: 4E:A7:45:91:29:BF:C6:45:2C:ED:FA:A9:CA:1F:96:2C:89:FC:B2:AC
Authority key identifier: 77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5
Certificate issuer: /CN=77e2ff4689d421350f76a373bc1193e451b81ef5
Certificate serial: 019D29291AE3FFFA1D2F036E8071E48D0F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
Manifest number: 026F
Signing time: Thu 26 Mar 2026 08:00:52 +0000
Manifest this update: Thu 26 Mar 2026 08:00:52 +0000
Manifest next update: Fri 27 Mar 2026 08:00:52 +0000
Files and hashes: 1: coMp5dOgndLahx2iTGXfIJ8yLLE.roa (hash: q4LCC/e7DOJLCRD77MYpRDtHZ3bvIBYyvXX9RO1rrD8=)
2: d-L_RonUITUPdqNzvBGT5FG4HvU.crl (hash: 9NrWMH9gYg+jXGhu4mEgFbV0e7oEHxKXJtmtCZIP1mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:1a:e3:ff:fa:1d:2f:03:6e:80:71:e4:8d:0f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e2ff4689d421350f76a373bc1193e451b81ef5
Validity
Not Before: Mar 26 08:00:52 2026 GMT
Not After : Mar 27 08:00:52 2026 GMT
Subject: CN=4ea7459129bfc6452cedfaa9ca1f962c89fcb2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:80:11:a1:62:b4:c7:e8:04:a8:49:39:2d:
10:09:4a:f1:ce:c6:3a:ed:13:ba:42:c8:f3:f4:a1:
4f:49:3e:de:5c:72:98:1f:dd:95:07:0f:56:0b:90:
76:b6:61:d5:09:7c:e3:ef:73:35:48:cf:a3:a1:9a:
b7:5f:e7:a8:1d:49:ad:1a:5e:cf:91:b6:17:c7:5b:
e8:77:74:00:42:bd:aa:b5:8e:9b:b2:7c:7e:27:43:
00:8f:cc:b7:74:51:e3:8e:9b:85:d0:69:2b:c2:83:
fd:a0:bc:e0:58:52:67:a5:4a:5e:10:34:e5:17:7e:
eb:2d:f2:40:39:a2:7e:1c:02:85:5d:29:2f:7b:4f:
65:be:82:09:69:92:5c:ea:a2:43:18:be:19:d5:3e:
bc:30:99:78:2a:67:d5:ab:4e:ca:bb:c0:45:4d:16:
ec:e5:47:8c:68:e9:25:3c:05:c6:4e:f7:43:34:9d:
2b:a5:81:07:e5:44:1b:88:02:70:ec:78:15:a0:e4:
f8:e9:4c:0d:9e:ed:38:a6:f6:97:8e:30:b5:67:dd:
fd:ed:da:18:1d:2c:47:89:f3:fd:1a:86:39:df:41:
a2:0e:18:12:1d:e7:c1:96:b1:02:f9:fd:29:29:13:
28:03:49:a4:c1:7e:fd:a1:8c:a7:54:86:68:4d:9a:
fa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A7:45:91:29:BF:C6:45:2C:ED:FA:A9:CA:1F:96:2C:89:FC:B2:AC
X509v3 Authority Key Identifier:
keyid:77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9f:a8:2a:33:bf:19:23:28:b1:c7:3d:be:ed:43:8b:4b:ee:
d1:ef:30:80:4e:7a:05:04:f9:3f:26:e8:32:ca:58:44:34:25:
fa:ae:e5:89:05:66:f6:dd:73:95:7f:84:a2:3f:5d:32:ea:72:
3a:44:8a:9c:b5:ee:9a:d6:de:05:57:0a:a7:55:40:37:c5:93:
cb:82:5d:26:9d:85:31:65:fd:20:ba:a4:77:4b:9f:82:31:bd:
3a:b7:25:c8:b9:8c:a4:5f:fb:ce:8e:a9:e5:47:30:18:88:a2:
12:8a:84:1a:b2:19:cc:a3:d6:78:c2:6d:ec:83:24:ab:eb:c7:
5a:69:0b:30:67:3c:01:8c:d0:33:b8:74:20:08:a0:ac:17:e3:
ad:7f:b1:17:21:77:77:71:66:96:28:66:a4:5b:de:9b:ad:56:
08:1e:95:8e:1e:c0:da:ad:98:f5:00:33:85:4a:e6:77:57:c1:
d6:04:3e:a7:25:5f:c2:74:8c:08:a3:04:2f:8f:38:b0:7e:95:
64:43:e9:65:38:2e:35:93:fc:52:74:85:d4:1f:90:fd:6f:77:
25:ea:6a:f1:28:20:ce:a5:3f:a6:51:d2:e8:de:4b:f0:80:a0:
88:23:dd:c3:b6:3e:b7:3c:d3:17:59:ac:04:d8:98:aa:32:d5:
40:64:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:19 2026 by rpki-client