Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: +vPi0BU/+zUeXLSnblOM9LvAzEsUojpNXCjS7JqYl/A=
Subject key identifier: 40:6F:F8:DC:B6:B8:DA:16:AE:CE:5E:AF:D0:93:0E:39:E2:4B:1E:C6
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 019D29CDC81309D1800B9E8B93D2402F660B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 1766
Signing time: Thu 26 Mar 2026 11:00:45 +0000
Manifest this update: Thu 26 Mar 2026 11:00:45 +0000
Manifest next update: Fri 27 Mar 2026 11:00:45 +0000
Files and hashes: 1: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: rgdYM5iNeiML/BNYAIuoa2Dm3v4ZKiEjC4LpdUcGvLw=)
2: gM2StpLZVmvayJcUvILE4XZXuLw.roa (hash: KQMOAlvZrGCc1yTty62TEDax5SGCNvxrkbvizSS1atc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:c8:13:09:d1:80:0b:9e:8b:93:d2:40:2f:66:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Mar 26 11:00:45 2026 GMT
Not After : Mar 27 11:00:45 2026 GMT
Subject: CN=406ff8dcb6b8da16aece5eafd0930e39e24b1ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:cd:fe:92:ae:36:1a:9e:fb:e9:76:47:1f:
31:84:ca:42:ed:86:91:95:aa:59:ed:8e:4c:63:7b:
6b:e4:d1:2d:ae:6f:4a:ed:bd:a9:90:f4:b3:ec:3b:
05:46:03:97:b2:db:8c:e5:bd:ab:f7:5f:cc:f3:51:
49:1d:4b:f7:3f:fa:f9:b2:fe:62:30:a6:bf:0c:1d:
ca:e7:cc:de:f5:af:04:2d:4e:df:30:d0:8d:ad:c0:
37:9c:2b:57:cd:5e:b5:b8:1f:9c:e7:ac:4b:6b:f4:
f3:c5:fc:04:88:f7:8c:a1:30:f1:ec:99:14:19:9c:
e5:f8:48:ef:aa:3d:03:2f:a7:ac:02:d5:4f:6b:bb:
9f:73:1a:cb:41:0a:63:26:75:bd:d3:db:de:93:76:
44:26:cd:45:88:d2:a3:26:eb:ea:02:73:39:e1:63:
63:ce:b2:69:a9:25:cb:81:9f:d2:ce:c1:43:0e:25:
9c:93:52:a0:ee:08:34:17:46:e1:67:b8:4d:26:ae:
f6:bf:44:3a:79:c3:e7:d7:f9:10:a1:c7:15:1b:6e:
2e:c3:b0:62:d6:37:39:cb:aa:38:7a:02:9e:2d:fb:
c5:bd:c2:7c:d3:ba:b4:71:ca:f1:4d:20:f3:de:42:
63:aa:df:1b:da:b7:0f:c3:4c:6e:6e:55:6e:54:b5:
57:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6F:F8:DC:B6:B8:DA:16:AE:CE:5E:AF:D0:93:0E:39:E2:4B:1E:C6
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:99:52:57:fe:f4:29:e0:f1:b1:3c:e8:89:cc:92:43:1d:8b:
c4:3f:30:22:9d:98:e8:3a:ab:30:b0:a0:7b:0f:1f:f2:ca:f0:
ae:06:77:f3:65:65:d2:19:95:bc:d8:f1:c3:32:24:c5:18:9b:
a7:68:25:a2:af:82:cc:30:b3:56:99:f4:51:f6:47:41:0c:0b:
e9:6b:a9:7c:8a:d5:d3:11:c1:6c:95:14:0e:0d:5c:f5:2a:67:
26:2c:1d:32:2f:be:a9:bb:a0:3d:6a:24:7b:46:4c:36:2a:f1:
66:8b:a9:0c:d8:9c:34:f9:3e:22:cf:84:3a:e8:05:2b:7b:20:
3b:80:c7:c2:4a:d6:bc:91:d8:38:68:76:21:50:82:57:44:a7:
c9:c1:c5:f4:c9:81:60:74:32:e2:b0:87:97:a1:7d:6f:2e:f2:
ab:22:c9:c0:18:ef:c1:db:5e:94:87:b8:fd:02:89:7f:0b:0d:
6f:e8:93:f2:a8:44:fd:60:77:c5:3f:38:bb:56:1f:03:ff:c4:
a2:d3:a3:4b:98:b7:14:99:69:0b:f0:b9:60:a9:b7:2c:10:c0:
38:68:82:ab:9f:40:69:8b:4f:45:c5:0a:af:c4:03:d8:0f:5a:
a9:0e:2b:11:2c:01:c8:09:6b:88:a9:af:b1:44:92:5f:83:60:
39:37:61:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:48:54 2026 by rpki-client