Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
File: d0972iMD4D6ANP52MfUEi5mF9n4.mft (raw, json)
Hash identifier: eb16xCLfnf4TFeL+lwDzcPTpVj5pQnvo4PTosdljwAs=
Subject key identifier: 60:2C:37:25:FD:AB:17:0C:D5:26:7B:27:A9:F8:DC:F3:C2:71:C4:F2
Authority key identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
Certificate issuer: /CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Certificate serial: 019E3FE5DF463FCDA1F872096588A88BDEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
Manifest number: 0272
Signing time: Tue 19 May 2026 11:01:29 +0000
Manifest this update: Tue 19 May 2026 11:01:29 +0000
Manifest next update: Wed 20 May 2026 11:01:29 +0000
Files and hashes: 1: d0972iMD4D6ANP52MfUEi5mF9n4.crl (hash: sgT/UmhPghmpc/gtj40KzQO3xOZoIzMkMmywvKYRsps=)
2: vr-KcEvzFupIdELOEs6eVsczP7A.roa (hash: sVJX8b77ReEC5s9osN7ZZ4vvNkbfeOM17MUXGpuCdfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:e5:df:46:3f:cd:a1:f8:72:09:65:88:a8:8b:de:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Validity
Not Before: May 19 11:01:29 2026 GMT
Not After : May 20 11:01:29 2026 GMT
Subject: CN=602c3725fdab170cd5267b27a9f8dcf3c271c4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:f1:fe:ca:43:a7:8a:fe:9f:4d:12:66:4d:
82:3b:44:94:a1:19:87:47:1a:5b:d1:20:b4:c3:4f:
63:d5:80:dd:db:99:54:b7:75:46:bf:90:0b:ff:f0:
77:ce:78:a7:55:30:a3:25:3e:22:2b:a9:89:2a:98:
92:1b:57:db:8a:a3:0e:55:41:86:7c:de:24:2f:c4:
71:7d:79:fe:d0:57:e5:85:c2:38:f0:a9:17:aa:c7:
1b:8f:b8:66:66:5c:c2:57:57:87:46:66:4d:36:88:
66:49:84:c1:6c:d5:b9:d8:d7:f9:4d:40:bd:14:2d:
da:e8:c6:38:47:d2:88:7e:04:25:65:d7:9b:09:7a:
e0:02:d6:1c:07:ae:03:ec:d7:b0:5a:b6:aa:11:b9:
cb:22:90:8e:e0:58:f6:32:13:ae:e6:49:75:f2:41:
bf:5e:1b:c1:b5:41:31:64:8b:66:69:55:b9:09:54:
3a:88:57:80:04:d1:65:b3:4f:53:03:6c:16:4e:46:
fc:12:7b:cc:22:51:24:6d:62:22:2b:4f:2a:4b:a3:
bf:83:75:11:dc:f5:b6:17:ee:17:29:31:cd:c9:85:
a9:39:37:24:bc:00:e7:cb:d6:1f:a4:a3:06:16:94:
fe:8c:e9:ab:cc:eb:1a:55:38:c7:e9:76:3b:68:41:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:37:25:FD:AB:17:0C:D5:26:7B:27:A9:F8:DC:F3:C2:71:C4:F2
X509v3 Authority Key Identifier:
keyid:77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:42:87:6a:ec:0a:d3:6c:ad:37:76:f6:ae:81:04:13:b5:01:
19:7a:74:8b:17:73:db:ae:a6:30:d2:b3:2d:ca:52:49:0f:eb:
75:90:33:1a:eb:c5:49:88:89:3c:92:96:3a:6d:51:1a:2d:46:
12:7f:a7:5a:8d:e7:33:07:0a:4f:07:ba:7e:b3:9e:90:eb:a9:
3b:ce:de:e4:95:28:14:77:29:f0:0c:10:34:cc:ab:f0:b4:3d:
1a:c1:32:62:c8:fa:71:35:8a:85:11:84:aa:bd:2c:f3:f5:86:
22:f4:fd:ac:5c:9e:8a:43:f5:ca:2d:c0:17:72:9b:ef:fd:bb:
91:dd:e8:0d:8c:0a:00:10:17:82:9e:90:c0:6f:a1:67:31:0f:
ef:5e:b5:aa:31:44:9b:56:a5:87:b1:c3:d5:43:69:c4:4b:5e:
a5:65:3b:36:50:ab:7b:df:97:5f:47:cd:97:7e:f0:3f:10:48:
b5:5a:21:bf:c4:f0:ed:da:2c:17:af:b5:00:a8:4a:db:66:bc:
c6:cd:46:63:c2:13:8d:a5:96:ad:a8:92:b7:c0:09:b7:82:8f:
18:57:1b:c0:d6:c8:a8:89:50:6a:2e:18:27:b6:26:9e:8e:52:
08:b2:15:0e:10:fc:b1:37:f3:08:47:38:16:8a:f5:cb:49:92:
c8:78:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 15:45:04 2026 by rpki-client