Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
File: 01VdufbNy92wUqRTSO8Nam1bwcE.mft (raw, json)
Hash identifier: NzzVfepYELLZJLYUtXfQSNzyp8uz5p9poKzFnCdMXC0=
Subject key identifier: 35:04:B0:7F:F6:E5:6D:E9:F7:AA:0B:D1:D7:64:C0:D4:41:75:8E:77
Authority key identifier: D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
Certificate issuer: /CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Certificate serial: 019EFCB90115F88B05178F1FCF8EA1BC14C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
Manifest number: D1
Signing time: Thu 25 Jun 2026 03:00:43 +0000
Manifest this update: Thu 25 Jun 2026 03:00:43 +0000
Manifest next update: Fri 26 Jun 2026 03:00:43 +0000
Files and hashes: 1: 01VdufbNy92wUqRTSO8Nam1bwcE.crl (hash: 7+j3L3e80govCEYaaz6jKXjv832bFfm4qwhCJAH51B8=)
2: szLd58h9ss7j2xagBuMXF5WP0yk.roa (hash: 8ob8pb7Gxq2C51p/RiIuL1KyizGRkOlyyDDvo7AtTm0=)
3: uXRaOLAunE2UdEOM1lTRedX_8jQ.asa (hash: 5LEXYsw/l0m4ESugD1zDY5cY+ORuB71qGoxgj35oZFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:b9:01:15:f8:8b:05:17:8f:1f:cf:8e:a1:bc:14:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Validity
Not Before: Jun 25 03:00:43 2026 GMT
Not After : Jun 26 03:00:43 2026 GMT
Subject: CN=3504b07ff6e56de9f7aa0bd1d764c0d441758e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:bb:cb:e4:dc:58:61:30:a9:b6:25:8f:c2:
03:49:b5:18:f0:ff:12:35:03:85:e8:ee:c8:26:98:
24:47:8d:27:62:d0:67:17:2a:23:c7:93:f4:78:bf:
28:04:1d:eb:8d:c7:a2:35:5e:60:ce:30:9e:87:28:
75:04:4a:3d:40:4a:69:98:9a:2e:c5:c9:c4:a7:db:
00:37:c3:b1:c9:37:72:e5:48:37:c6:24:34:07:3f:
fc:16:4c:4f:d6:99:ce:32:c7:12:d5:b7:24:8d:d2:
12:e7:73:16:01:d1:78:40:29:c7:bb:c7:ea:a3:fb:
b3:52:1d:3e:8e:1d:ec:d2:72:dc:7e:bb:32:22:8f:
8a:4e:d2:0a:83:bb:8b:17:5b:df:fd:d3:09:f6:28:
20:15:40:20:82:96:ff:1b:47:b2:88:b8:55:ea:13:
4c:2f:b9:76:09:d5:95:06:65:88:60:c0:4d:91:fd:
83:61:97:ec:5c:9d:17:2c:b7:2b:0a:89:25:12:1d:
bf:e0:5f:27:2f:24:50:ec:c5:ae:d8:e0:81:a0:2f:
8f:15:b1:0a:f3:e6:28:33:ab:6b:81:16:90:59:38:
5a:8c:4b:62:85:af:14:9c:e2:29:4c:49:d2:00:bb:
2a:a8:0c:a3:51:0b:fd:fe:69:f7:4c:3b:52:7c:2f:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:B0:7F:F6:E5:6D:E9:F7:AA:0B:D1:D7:64:C0:D4:41:75:8E:77
X509v3 Authority Key Identifier:
keyid:D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:54:48:a4:73:46:ea:a5:f5:dd:db:06:80:ab:ae:95:ff:08:
31:f0:18:40:90:0c:aa:e1:ab:c6:98:1d:59:58:e1:e0:c2:59:
e0:d9:2a:af:24:2e:ef:81:dc:ec:5c:95:7a:21:42:29:4a:32:
a4:b9:9a:a3:ae:37:c6:df:f8:b3:7e:c3:50:7d:db:e4:bf:aa:
15:2f:9b:8e:00:dc:aa:d6:00:c1:74:25:18:46:87:84:e5:55:
60:89:a8:7d:ea:00:3a:97:1b:bd:94:16:59:10:13:d5:b5:36:
3a:99:c5:7d:3c:45:15:d2:ef:14:e6:f5:15:44:d0:03:93:39:
87:ac:b8:e6:56:b4:f6:aa:45:0d:dc:9e:9a:41:4a:e7:10:26:
b9:81:e7:e2:3c:67:09:07:7d:a7:6b:bf:61:18:ea:92:67:c4:
16:f5:6e:73:ae:ef:04:0c:f3:37:53:e7:4d:43:ba:18:56:41:
e3:15:f4:97:1c:31:d9:08:d1:3d:f8:a1:8f:ac:e0:18:f4:68:
f1:28:5f:4b:2e:15:2b:fb:a2:52:1f:d9:ad:16:7b:da:d6:d6:
75:01:41:c7:57:e8:b9:48:64:f3:d6:da:7c:1c:71:78:56:b9:
3c:03:10:d7:9e:b8:66:68:f4:9c:6f:c8:a9:c0:cc:30:a8:b7:
96:08:fe:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:17 2026 by rpki-client