Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
File: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft (raw, json)
Hash identifier: C09mvruaDzMi4C205Jv2VNmF8jzvGrF9JJKMG/CifeA=
Subject key identifier: 28:49:43:FF:E3:75:41:52:6D:44:7D:CC:66:00:93:D9:B1:5C:21:5F
Authority key identifier: 0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
Certificate issuer: /CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Certificate serial: 019D37F725249C8E80BF570396098C4CE70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
Manifest number: 029F
Signing time: Sun 29 Mar 2026 05:00:36 +0000
Manifest this update: Sun 29 Mar 2026 05:00:36 +0000
Manifest next update: Mon 30 Mar 2026 05:00:36 +0000
Files and hashes: 1: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl (hash: V1Ano3kxEHuu3IcZJx5RdmdMupP2S7U0C3GCufbffJ4=)
2: w2RkZIyXNqzrvFHvVSZFRm-pJFQ.roa (hash: 1g4lPlIgbxd4u2cE0VtdggkYIEEI5tatrW6BetCUOgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:25:24:9c:8e:80:bf:57:03:96:09:8c:4c:e7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Validity
Not Before: Mar 29 05:00:36 2026 GMT
Not After : Mar 30 05:00:36 2026 GMT
Subject: CN=284943ffe37541526d447dcc660093d9b15c215f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:67:d2:c7:af:f9:fd:72:50:dd:6e:ea:b4:
69:d6:02:ec:c3:53:b8:58:f9:a3:27:de:17:a3:2d:
d8:bd:4d:89:d2:d6:e8:ed:88:e4:bd:d3:ef:25:8b:
7f:32:85:f6:f4:fa:ff:5e:1f:97:b1:e7:e5:69:ec:
48:a0:19:9f:75:6d:f3:1f:a5:06:7f:6a:b8:20:fc:
e2:6c:7a:e3:c0:cd:ba:6f:6f:2a:47:fe:42:57:10:
2f:5a:09:c1:73:96:94:b0:6c:1e:65:16:e2:d0:1c:
a1:19:18:bd:3c:b9:bd:49:91:38:39:1a:ca:a8:f8:
e1:03:21:3e:d3:f3:ff:73:e8:8f:4a:95:54:08:cb:
47:ac:30:aa:7d:0d:3b:73:f5:0b:ed:05:b6:61:ba:
c4:27:75:57:35:69:b9:fe:7a:68:06:95:bb:9b:3b:
e1:24:39:72:b1:5a:3e:00:e0:b2:ed:3b:60:90:0f:
01:6c:13:39:d9:07:a6:02:6b:3c:04:28:0f:e5:76:
84:51:39:63:13:0c:c7:c9:e3:16:13:eb:ff:e8:00:
79:8e:45:08:ab:d2:2f:25:ad:d4:cf:88:3e:aa:7d:
31:63:33:14:dd:59:2c:e0:b0:a5:8c:07:f9:6c:22:
c8:e2:45:b9:7c:63:1f:51:4c:67:04:5d:70:b2:c7:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:49:43:FF:E3:75:41:52:6D:44:7D:CC:66:00:93:D9:B1:5C:21:5F
X509v3 Authority Key Identifier:
keyid:0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7b:f9:eb:80:fc:d9:06:11:19:1e:1d:99:62:b5:3e:b1:0d:
de:02:7d:e4:0d:04:97:9b:0e:76:98:fb:d9:11:36:84:30:d4:
1c:e6:81:3f:b8:2a:af:bc:64:84:a6:e1:51:28:4f:74:e0:b1:
21:dd:b9:3a:87:87:71:fa:7e:72:c1:7b:dd:80:c5:b4:61:b5:
29:54:64:98:4e:59:44:4d:bf:56:a2:bc:e0:19:d0:30:e4:c2:
28:83:57:4e:b7:08:ce:16:43:c8:f8:cb:df:45:60:da:d4:87:
4a:6d:60:cf:0f:a4:4c:ce:9e:27:01:93:c1:f2:80:4b:bb:6a:
56:9d:22:5c:28:af:54:d3:ae:96:43:88:e4:c6:3c:37:00:1b:
9f:53:bc:72:e5:98:42:f2:62:aa:5a:f6:7f:3f:ab:d9:a6:b6:
2b:71:09:2b:dc:89:4e:04:36:61:5d:bd:16:62:54:3d:b8:8b:
05:de:a6:33:b9:c2:d1:67:a7:36:e0:00:51:65:8c:60:98:ed:
fc:f7:b2:7c:92:f0:fe:b2:67:71:8e:2b:d3:33:7c:0d:bb:c1:
1c:09:8d:e9:0b:da:f0:15:aa:f6:06:1f:3d:59:75:3b:4c:e3:
13:81:2b:a2:03:d0:28:88:3b:02:2e:5a:1a:97:b3:6a:2e:4f:
c6:87:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:15 2026 by rpki-client