Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: pf/CYdh71dwVoK8Pf6ioNdS0623wNiOj1PCLf8H9fNg=
Subject key identifier: FE:18:F6:82:68:13:EA:98:22:7D:7F:97:20:34:93:5F:5C:FC:7C:78
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 019D224B8B8AA1189D5BC9D20475EDC56539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 0A71
Signing time: Wed 25 Mar 2026 00:01:09 +0000
Manifest this update: Wed 25 Mar 2026 00:01:09 +0000
Manifest next update: Thu 26 Mar 2026 00:01:09 +0000
Files and hashes: 1: 96SX2S5aBWouZ5qx7BRgteL4iq8.roa (hash: M3a2yFufjkSiLfAokMv1+05AOpH8jhB4+9skztdJecg=)
2: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: IzHk4gvPCZZBuH2hMZ6TS13BEbFtbGPiOCMOw1yES7k=)
3: L6SdCLp_FHvz3o3tKNX0l8WA490.roa (hash: 9JHTUcRidI2GiaDB1BZb9pHbOm8ZJYd9k9gXu4meKKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:22:4b:8b:8a:a1:18:9d:5b:c9:d2:04:75:ed:c5:65:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Mar 25 00:01:09 2026 GMT
Not After : Mar 26 00:01:09 2026 GMT
Subject: CN=fe18f6826813ea98227d7f972034935f5cfc7c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:c8:1d:0b:12:d0:89:e5:10:cc:22:6c:cd:
ee:d0:d7:60:c4:9f:d7:97:88:87:a5:99:74:d0:c8:
a8:7c:bc:fc:4b:65:20:93:5f:93:c9:d5:09:0c:93:
60:d2:51:48:1b:98:17:07:ee:5b:39:60:42:1f:a8:
8b:fd:f0:22:02:84:08:9a:80:63:2f:87:62:33:65:
48:7f:08:78:3c:be:f5:e3:ba:9d:30:cb:12:f9:db:
f7:65:c0:61:ad:1e:fe:42:68:3f:7d:54:9f:79:37:
c3:c2:df:7d:a6:76:bd:2b:d9:47:d3:ba:6d:80:d9:
dd:b5:43:e7:bc:ad:58:37:5f:47:55:b5:77:7c:7f:
0e:43:ca:27:7a:08:b9:81:63:5d:ff:0a:1d:a2:2e:
98:a0:8d:a6:5f:e7:19:17:aa:87:8c:c0:09:ba:91:
1f:dd:10:a0:68:38:02:be:44:f5:94:66:d5:71:93:
f4:f6:7f:36:d9:55:cb:93:87:29:4e:54:de:27:33:
8c:d2:53:cd:56:92:5c:51:f7:9b:24:4f:16:64:e3:
c7:27:02:13:ec:5b:6d:26:20:bf:c1:0f:d7:3c:79:
db:98:1e:5d:01:af:a8:5f:24:7a:6b:f9:dd:ff:ac:
68:ee:b5:c5:48:81:c9:f9:42:86:ac:7d:18:5d:e4:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:18:F6:82:68:13:EA:98:22:7D:7F:97:20:34:93:5F:5C:FC:7C:78
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:dc:b4:e9:c0:a3:c8:2d:99:d1:6d:7c:5d:c7:a9:52:6e:1b:
83:76:0d:d2:e6:da:aa:e0:c2:62:20:c4:f8:7d:d6:c7:25:1b:
ac:39:43:d1:94:56:ed:91:ff:af:48:72:85:f9:91:5f:eb:58:
a3:83:0e:c1:e8:65:bc:93:5a:1e:c2:b3:b1:6d:e1:1e:69:69:
d6:12:4b:83:e9:6c:b5:ef:4e:8d:ab:46:a3:9a:20:e7:01:44:
be:a8:1f:4e:d8:4c:a3:c3:5f:49:b8:30:36:0c:b6:be:98:ac:
7c:6e:14:94:91:7e:85:9a:b9:3c:25:83:62:65:ad:27:6d:86:
b0:84:f6:14:c8:9b:84:a8:53:df:9d:f0:de:4d:7b:f3:7f:d1:
8a:06:72:ec:21:3a:24:da:6b:02:14:51:92:b9:c1:6f:ca:8b:
12:94:b0:81:63:66:73:20:5a:7c:59:a7:c0:ba:2b:a7:8e:c2:
8b:f0:ca:f7:a7:09:ef:4d:5c:cc:a9:14:f4:cd:94:cd:13:84:
8d:82:01:36:16:31:7d:ed:4a:8b:09:71:a1:b0:b8:ef:31:dd:
75:5b:f1:a1:8c:bf:9e:05:7c:90:a2:d0:ac:1d:de:c5:bf:2a:
3c:54:09:01:80:87:e1:e0:80:97:8c:34:55:26:1b:4c:99:66:
06:10:00:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 09:43:39 2026 by rpki-client