Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: Qnpz/c0O0+H8YXkZdCE/DhDkL6jRBBIqRxjmKiIkgSs=
Subject key identifier: F2:B3:DC:1C:2F:9E:D7:55:1C:EF:A3:76:93:6C:D4:D1:C7:3A:BD:B6
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 019D37F76B3492EC22069FD63B981913D558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 15A0
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: 90fOLXtBv8zjOyjcz26gkbyoNvE.roa (hash: Ru1YTQpQd39yRjLzCahK22aUJjQHLniT2w2j16/8ijY=)
2: GNQd5Bm0mjUJd67uPNG6cQdgvFk.roa (hash: 0ulANNIaOCC2eudb71uMMJn10FX8G4OgvsoxQ5AP27o=)
3: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: zT3ot57o6uYHoNyqxdSqadKBUN7nPtyJ/Ca9zy5I4K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6b:34:92:ec:22:06:9f:d6:3b:98:19:13:d5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=f2b3dc1c2f9ed7551cefa376936cd4d1c73abdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:8f:13:68:21:ca:ea:62:fa:ba:4a:12:31:
77:1b:f6:49:af:5a:6f:3e:cb:d8:24:f5:d2:1b:5d:
94:fe:c4:4b:f9:4e:42:48:04:60:25:d5:d3:c5:81:
e5:10:af:5c:a7:0a:9f:5f:40:ac:c0:8d:3a:d1:a4:
c2:e5:1a:39:9f:c0:48:2a:ec:72:a5:69:76:b5:84:
0f:09:6e:f4:12:a7:1c:4a:68:d1:e7:c9:74:8c:2e:
11:99:40:5e:ff:a2:be:95:1d:e3:b1:b1:f1:db:6e:
5f:4c:bb:3d:18:1c:8d:26:34:83:c0:f6:2d:0b:89:
3c:f9:3f:64:1d:1a:e9:d0:9e:64:e1:a9:dd:c7:ee:
e7:44:05:8e:14:45:92:3d:6d:f1:83:6b:fe:e7:58:
9c:bd:80:59:bc:9d:64:54:33:16:d7:04:3c:8b:2f:
47:e8:00:53:52:c6:4f:2a:d4:bc:6e:00:86:fd:b0:
b6:21:bb:2c:83:51:9e:f8:f4:38:29:b4:61:ab:23:
08:a4:92:76:b5:1e:3c:97:0a:18:1c:ee:66:d0:7a:
f0:39:6c:db:60:83:43:db:2f:7c:a3:dc:8a:32:10:
66:74:17:f8:88:0d:6a:07:9a:e7:38:91:ba:53:df:
63:e1:95:31:23:2a:07:2c:5d:ea:29:00:57:84:6d:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B3:DC:1C:2F:9E:D7:55:1C:EF:A3:76:93:6C:D4:D1:C7:3A:BD:B6
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:dc:52:60:6e:fb:0b:f2:6a:59:ef:ab:cf:ef:59:01:e2:53:
ff:f5:0e:91:73:bf:04:f3:07:22:d4:82:bc:87:0f:68:28:ab:
e6:bf:e3:6c:5d:9c:52:11:36:05:73:43:3c:ca:f3:a4:bb:83:
03:df:53:7b:41:18:04:61:be:4e:d2:29:62:cc:03:15:4b:c2:
86:b9:83:0f:78:1b:8b:67:89:61:76:80:8f:64:34:4f:c2:87:
73:29:55:8d:8f:bf:20:98:31:33:00:fc:d1:97:3c:09:96:97:
67:71:d8:74:39:94:07:2a:73:47:2c:06:9d:33:a7:28:f7:91:
2a:79:56:ff:47:b3:05:e9:e4:b3:ba:fb:08:14:81:75:11:91:
4c:5e:d8:84:97:d8:4f:7e:e9:f7:5f:80:cd:3c:08:94:4a:b5:
10:96:a3:0b:3f:12:3a:66:29:6c:4c:0c:1e:36:dc:33:e6:8d:
f2:ea:6a:bc:f4:d6:c5:22:2d:70:14:31:e8:4e:8e:5b:1f:af:
8a:82:25:9e:30:5f:c9:c7:71:02:ca:e8:85:07:6c:15:b7:d1:
db:1e:8e:48:fb:cf:07:89:2a:d7:e1:57:db:f1:df:9b:a2:53:
32:eb:1d:fb:3e:a2:c0:14:b8:7b:9f:07:d4:d8:f5:26:a3:03:
f3:b5:e7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:19 2026 by rpki-client