Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File: d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier: Ni6V80rvkhvU7/W/lQRsRpcnl96ikbPGlMVcUlEvJN0=
Subject key identifier: 52:A2:B7:CD:07:75:25:61:29:4C:52:E3:C0:C0:7D:7D:F1:62:99:16
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer: /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial: 019DCDF47CE3F7A2E10E8556C8F94BA6AC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number: 0FC2
Signing time: Mon 27 Apr 2026 08:00:45 +0000
Manifest this update: Mon 27 Apr 2026 08:00:45 +0000
Manifest next update: Tue 28 Apr 2026 08:00:45 +0000
Files and hashes: 1: 1-x1SQoCge1oAxdF8NH1g432c8v4.roa (hash: gGNG1VzQDUnu5gmTgkEbwFhdDKx8kxbSdmHR7f+ftE8=)
2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: MFTP9rFxKqOKweCU0dAhaZUqqFA9BooC6uXdIHof5yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:7c:e3:f7:a2:e1:0e:85:56:c8:f9:4b:a6:ac:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Validity
Not Before: Apr 27 08:00:45 2026 GMT
Not After : Apr 28 08:00:45 2026 GMT
Subject: CN=52a2b7cd07752561294c52e3c0c07d7df1629916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:e4:90:4a:a5:8b:26:21:1a:ce:b7:48:29:
cd:80:c3:e2:ae:a8:70:5f:df:f1:95:cf:6b:e2:53:
d0:59:8b:01:c0:07:64:8c:c7:f1:39:bd:e3:d2:7f:
69:e3:aa:53:81:af:ac:c3:6f:86:06:37:41:c5:42:
25:a0:1a:b8:73:9a:97:8f:2d:3c:90:2e:e0:7c:65:
da:66:6e:9c:b9:1a:d6:18:ec:c3:98:e2:ed:e6:4f:
85:72:7f:ac:dd:a0:17:a1:41:35:ad:da:0c:ef:e0:
d0:a4:03:4f:6a:88:72:69:61:98:24:66:ae:cb:8a:
e7:23:d6:d3:26:d0:5e:53:3e:f0:36:c7:b0:3a:a8:
cf:4f:65:bf:21:eb:5c:17:f7:e5:14:c7:2f:8b:e2:
a7:b6:f0:f2:1d:12:e7:1b:e7:c8:84:08:fc:86:0c:
27:83:c7:8e:55:ed:b8:95:b0:84:f5:29:8e:e0:c4:
88:88:51:42:bb:fb:ef:47:20:d2:b5:9a:de:aa:05:
60:58:b2:84:1d:70:82:4b:2c:42:55:46:fb:56:33:
ea:d3:ff:b3:83:a5:37:fa:01:04:91:ce:f4:33:f3:
03:40:c1:5d:b0:1b:a6:11:10:f6:9e:09:d6:bf:59:
ff:30:7f:c5:f9:49:52:47:63:67:da:7e:ab:dd:08:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A2:B7:CD:07:75:25:61:29:4C:52:E3:C0:C0:7D:7D:F1:62:99:16
X509v3 Authority Key Identifier:
keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:55:96:58:94:8c:67:6f:d1:13:ae:3a:d5:9a:8a:94:4e:99:
06:84:57:9d:f5:9b:96:a6:a4:58:c4:21:ff:c2:6b:fc:f3:c1:
ee:e2:a3:81:4d:10:e5:24:53:60:dd:c8:32:6d:d1:a0:69:8a:
70:56:b9:8d:0a:95:f3:74:7d:f1:aa:1c:17:9f:e5:13:e3:ba:
f5:9a:6a:08:50:94:1a:cb:c6:4f:65:f4:00:1c:e9:f1:9c:bb:
5a:9c:f4:bb:99:54:61:1e:4c:30:fe:80:d9:82:3c:31:d2:0d:
e6:fa:be:1b:96:5b:b2:aa:60:61:ac:36:16:4f:9f:71:7e:ae:
b9:3c:62:0f:08:73:10:a1:66:cd:1d:07:45:24:8d:a8:9e:ff:
9b:85:69:cb:24:ca:78:26:d6:74:4c:d2:ff:ab:23:2c:ba:df:
b1:f9:0b:10:74:c9:2d:94:8a:50:fd:85:a4:7a:b5:f0:2c:2d:
ae:77:e1:4f:da:1e:1e:df:f9:15:2c:6a:89:f1:30:3f:03:84:
81:8f:72:bf:ca:6d:41:d5:12:4d:7a:1d:83:a1:95:9a:72:bc:
32:1a:0a:54:50:ec:7e:ba:38:06:b4:ee:8d:ff:f0:a3:a8:c9:
e3:fe:da:fe:79:c4:ee:83:45:69:b8:26:f4:fc:9f:0b:ec:7e:
21:6b:61:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:26:31 2026 by rpki-client