Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
File: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json)
Hash identifier: XqMxeIRBRuquwXqr2vIkjVwODgUJudIDsAzvlGVFdd8=
Subject key identifier: 27:9B:84:69:35:41:F9:05:E6:F7:71:D6:FE:BC:EE:8A:F0:87:FF:B3
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Certificate issuer: /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial: 019D37F720C473319298CF9B5DF023A4E182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
Manifest number: 06D4
Signing time: Sun 29 Mar 2026 05:00:35 +0000
Manifest this update: Sun 29 Mar 2026 05:00:35 +0000
Manifest next update: Mon 30 Mar 2026 05:00:35 +0000
Files and hashes: 1: 6OqTpgmhzn6PJTKFB1lTcULSUt4.roa (hash: 0yR0XfZvnK3OQ/1YUSPxxfbZ0KMJ3RWvdqB7yb8/Z9c=)
2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: tBeJg+EBFYPImNLoe1KQKnktBc+m1QQIv/bajaQ1PCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:20:c4:73:31:92:98:cf:9b:5d:f0:23:a4:e1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Validity
Not Before: Mar 29 05:00:35 2026 GMT
Not After : Mar 30 05:00:35 2026 GMT
Subject: CN=279b84693541f905e6f771d6febcee8af087ffb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:d3:df:2d:6a:7e:75:f9:30:e0:b4:25:1d:
fe:d7:d1:76:2e:8d:e1:c3:83:1a:db:72:29:f1:6d:
c3:5a:3f:93:76:39:21:57:f2:6c:57:69:c3:91:2e:
8b:fc:c4:ee:71:a1:24:be:bc:a4:30:19:67:67:b4:
93:d5:24:51:1d:9b:f7:e4:55:f5:5d:90:c6:dd:88:
27:c2:cf:31:2b:09:da:4f:a0:52:0c:ec:3a:62:93:
c7:2c:74:bd:5a:c1:45:1a:4b:1d:78:90:59:a3:a9:
af:26:02:07:0e:8a:be:df:60:07:de:72:72:a9:ce:
7d:e1:10:cd:c5:73:e3:79:4e:d5:9b:b1:06:4f:81:
10:7f:ba:49:11:4b:fa:09:e6:0b:45:17:7a:f3:83:
6e:88:6a:69:d2:c2:6f:8f:96:07:11:45:d8:f6:62:
46:39:93:94:b5:98:df:01:27:67:82:1b:de:cd:97:
65:6d:ff:60:d4:04:ea:f7:e8:f0:42:d8:3a:2a:f9:
6f:05:8d:ac:5a:63:38:3e:ed:b0:4e:30:dc:7d:ad:
1e:f3:45:ba:47:b1:8c:05:8b:73:bf:b8:a5:33:7e:
f4:95:f3:9e:6b:f3:69:49:a7:d4:a8:ba:14:d7:a4:
9d:de:39:7b:54:d5:b9:72:d2:dd:6b:e3:99:d8:39:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9B:84:69:35:41:F9:05:E6:F7:71:D6:FE:BC:EE:8A:F0:87:FF:B3
X509v3 Authority Key Identifier:
keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6e:57:16:de:09:71:b3:49:e7:70:75:33:d8:88:ec:5a:b0:
48:32:4e:66:ac:9a:65:5a:34:73:dc:6c:e7:95:8d:46:9a:77:
ad:9d:12:13:37:17:ef:c7:ca:8d:9d:22:9f:5d:8b:5f:4d:81:
77:09:99:d0:88:6d:83:45:5f:54:a2:c0:44:9e:6b:6e:f8:27:
01:6f:a7:4f:d1:3e:78:2e:1d:a9:c8:c1:d8:6d:4d:fd:2c:32:
48:2a:ec:a0:06:3d:d9:b0:de:1f:a4:d2:ae:8d:de:2d:48:66:
f5:11:91:51:b2:45:31:fa:c7:7e:33:1f:14:67:1d:a7:46:ad:
42:5e:27:09:e2:6b:71:2a:c5:be:31:6f:cc:72:78:d8:83:2b:
c4:a4:14:26:04:df:9e:dc:16:82:5e:8c:8c:1e:a1:bd:0e:74:
d2:66:87:0f:eb:74:c6:30:d3:46:85:f2:ab:1c:ff:0d:54:04:
49:92:68:a9:04:10:0a:c6:02:e3:64:ef:50:ea:84:e1:7d:36:
4a:6d:93:ed:21:05:80:b4:11:72:f8:f8:3c:1c:e5:45:b1:0c:
92:85:ae:cc:4c:86:65:af:06:6a:51:54:9c:33:74:69:00:22:
00:ff:42:40:22:54:8f:33:04:6f:71:2c:49:23:77:9c:96:28:
13:5e:f5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:55 2026 by rpki-client