Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
File: d6Hu06zg_C-KoADeaHpJvv0nkdg.mft (raw, json)
Hash identifier: 56l25IIJy9Lpiy7hNUy/sm2Sap741MhPpQ0wMVgzujI=
Subject key identifier: 83:9A:FE:BA:ED:8E:BD:49:02:EB:76:42:F7:9B:9E:5F:BB:99:D1:22
Authority key identifier: 77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
Certificate issuer: /CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Certificate serial: 019D37F78FCDD6CD32E6546A88F200D818E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
Manifest number: 117E
Signing time: Sun 29 Mar 2026 05:01:04 +0000
Manifest this update: Sun 29 Mar 2026 05:01:04 +0000
Manifest next update: Mon 30 Mar 2026 05:01:04 +0000
Files and hashes: 1: W8jOnIUAyFMaEP25sAUwJyxVaIM.roa (hash: i6lculuV3eQhPhN35emc/bL4sPdv/8Y0MhiLt4tT+wI=)
2: d6Hu06zg_C-KoADeaHpJvv0nkdg.crl (hash: 0CpcSV4/486DzmVn18+LtGFTHiEh06SUJrv6lNqLmGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:8f:cd:d6:cd:32:e6:54:6a:88:f2:00:d8:18:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Validity
Not Before: Mar 29 05:01:04 2026 GMT
Not After : Mar 30 05:01:04 2026 GMT
Subject: CN=839afebaed8ebd4902eb7642f79b9e5fbb99d122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:89:3e:b5:a8:bf:be:24:04:fa:b6:c9:d7:
dc:19:27:8e:65:09:25:16:f4:8f:2d:c3:c1:2c:37:
a9:a8:40:0c:d8:51:e8:f9:a3:4c:8d:b2:90:67:26:
cc:9c:a7:1b:6a:ae:f3:5e:de:23:b7:4a:11:b4:e9:
cf:aa:89:0c:24:b6:ed:5c:c6:88:a6:72:5e:8c:0b:
cb:f2:97:f1:c8:4c:04:c4:19:7a:1a:69:99:4b:70:
25:ed:61:ce:9c:00:66:67:6f:bf:18:e7:92:b3:5a:
fb:ef:cb:ee:32:23:7c:36:96:bb:0c:e0:0e:4c:36:
99:d9:e2:fc:ee:4a:89:be:b2:94:e4:7b:e2:ac:ca:
5b:42:40:90:b6:c7:87:94:48:b9:53:32:51:12:c1:
53:06:4d:92:f6:20:cf:92:af:05:71:34:f0:83:6e:
71:10:79:9b:b7:f1:df:3f:0b:9a:8a:78:d9:77:10:
6d:e6:16:f7:8c:2e:3c:32:b0:24:70:fc:62:cb:4a:
07:db:fd:0b:1a:9d:89:34:42:2d:90:2c:f6:3a:a2:
c9:f7:e2:e1:9a:0c:9e:3c:0a:85:4f:cd:92:7e:20:
17:a0:de:cc:e6:7e:b5:fb:1e:af:a7:c1:4c:89:44:
d0:5f:4b:9c:aa:2c:aa:7d:c5:10:5e:17:cd:24:9d:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9A:FE:BA:ED:8E:BD:49:02:EB:76:42:F7:9B:9E:5F:BB:99:D1:22
X509v3 Authority Key Identifier:
keyid:77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2c:00:9c:af:52:e9:b5:81:63:5f:88:5a:ae:ab:21:d2:0c:
d4:65:ae:ae:30:07:67:ac:d6:40:90:0f:14:c3:5a:fe:07:cb:
27:32:fd:ed:1f:df:65:c7:e6:62:05:b8:c7:f2:2c:44:ae:13:
84:45:b4:52:64:3b:59:1c:3b:bd:cc:0e:e7:a4:7d:39:45:39:
ca:c6:55:2b:b9:70:3d:ec:60:54:75:7e:d8:00:20:ee:5f:7c:
a1:b2:20:dc:b2:db:da:ee:74:51:34:8d:91:96:1a:c1:e7:b5:
94:3b:17:7e:0d:8f:31:9e:8b:a8:e1:51:19:4a:07:30:0f:94:
eb:46:eb:c6:0b:f1:b0:75:83:f8:cb:0f:ef:4b:cf:64:da:b2:
bf:b1:33:09:b2:03:a6:78:ce:0e:c2:df:2c:17:be:24:35:f9:
41:69:6e:67:54:45:c6:c7:6c:e2:4e:ae:97:76:41:88:f6:62:
88:96:06:74:0a:9e:e7:7a:35:e9:9b:86:b9:4e:1a:23:5d:b2:
96:c9:31:8f:56:09:69:05:14:21:1e:2c:db:ba:84:c9:04:e0:
b9:6b:3f:a4:f2:7c:69:97:94:ec:f7:3e:da:40:e3:f6:b4:57:
c1:ce:51:e4:a9:57:ed:8d:45:da:db:06:a3:63:cc:fb:18:3f:
b1:70:27:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:50 2026 by rpki-client