Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: N7Gdv5gMU7hzJkca+pvbgWhoRwqyiASqz9qbRmf3h+A=
Subject key identifier: B6:D7:16:93:52:FB:96:55:80:12:54:ED:8D:B5:8C:6E:EB:B6:7C:A3
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 019D39AF1D72109BC8A535AC4FA1F3DBB9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 1007
Signing time: Sun 29 Mar 2026 13:01:10 +0000
Manifest this update: Sun 29 Mar 2026 13:01:10 +0000
Manifest next update: Mon 30 Mar 2026 13:01:10 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: 9c3FYjLDLmRLc6azpS3H7IwluNDjs1qmrUMzAxysEoc=)
2: mssfFR-jvVEjXWitmlgUfKmk1ic.roa (hash: w30uwAMWbY93oGllAg088gC96/ylOV2F4klPStV+KUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:1d:72:10:9b:c8:a5:35:ac:4f:a1:f3:db:b9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Mar 29 13:01:10 2026 GMT
Not After : Mar 30 13:01:10 2026 GMT
Subject: CN=b6d7169352fb9655801254ed8db58c6eebb67ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:0c:51:78:f3:88:24:f0:45:00:b2:66:0d:
f4:30:bf:6d:05:3b:30:e0:09:e5:02:a5:51:f8:6a:
93:cc:45:72:4e:4d:72:3c:b1:86:24:2b:c6:d6:f9:
93:a6:ce:b1:3f:f5:32:61:8d:57:78:56:98:22:49:
8f:39:c4:80:84:a4:d2:09:58:8d:93:ff:56:22:1b:
5d:f2:90:26:45:e8:47:5d:38:92:a7:02:ff:eb:91:
b3:ad:5c:0d:20:47:10:8e:d7:c7:64:69:38:a6:72:
5b:f3:6f:06:38:47:f3:21:b7:e0:33:10:b9:38:a2:
62:e6:6e:22:14:09:25:19:32:40:48:7d:48:60:50:
df:10:95:7f:6f:97:ce:d3:4a:c9:67:53:1a:00:79:
09:b6:ec:5f:34:28:4b:33:f4:60:09:e7:d0:56:c5:
6c:ba:c9:35:51:7f:13:9d:3f:33:42:28:e4:70:e2:
03:25:64:6d:66:b6:54:71:7c:34:01:0b:49:e0:75:
40:5e:7b:5e:c0:7a:8c:83:e7:ae:c7:cf:af:8c:fb:
ef:c0:4c:84:62:ee:a0:b6:2c:f2:75:b3:95:e5:16:
5e:68:e2:a0:6e:a8:8a:0a:80:55:f5:c0:22:02:fe:
41:ed:df:67:17:f0:0f:85:1f:28:84:52:0c:ee:4e:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D7:16:93:52:FB:96:55:80:12:54:ED:8D:B5:8C:6E:EB:B6:7C:A3
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ee:ec:03:ca:6b:0c:97:00:f4:37:72:79:44:e2:cd:37:f7:
20:42:f4:b9:ac:4d:1f:2e:1d:85:8b:b4:a2:86:97:aa:29:08:
0b:1c:83:2c:da:67:d0:bf:18:3e:4a:40:2d:99:b1:23:b3:93:
34:50:94:0c:77:7b:df:5b:f0:90:11:5e:71:2d:e3:4d:30:91:
9a:5f:6c:57:a4:f0:b9:ec:a2:b6:6c:b4:a0:46:43:76:43:27:
78:19:ab:d2:6e:41:f7:bb:57:57:1c:9c:03:c4:53:42:9c:2e:
fd:74:20:d2:2d:d8:d5:2a:1b:c7:c6:36:cf:5c:61:72:8d:cf:
c7:6f:b3:ee:06:52:5b:97:42:d0:46:80:be:8b:26:82:97:e3:
d1:e4:f4:49:11:4d:cb:38:09:d2:92:92:85:58:69:f3:be:bf:
65:47:3f:00:94:ac:7d:b3:21:2b:84:7c:16:5c:29:06:3a:6d:
f0:2c:79:00:68:5b:b9:50:c1:1a:de:80:e7:5c:d7:05:cd:3c:
5a:ba:88:e5:fb:5e:51:cc:e4:c6:36:41:bd:99:0d:f6:71:b8:
b8:85:06:50:fc:80:e7:06:69:4e:42:67:60:a4:a3:2e:8c:64:
f9:a8:4e:2a:44:1d:5e:3d:d4:37:e4:22:69:07:ff:a3:50:1c:
04:cc:e1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:25 2026 by rpki-client