Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
File: D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json)
Hash identifier: mcGy42tm3FaBQntlZDvsZnG8Twzkqrh4CfOsE0zKlls=
Subject key identifier: 6B:4F:F8:86:AC:23:EC:2B:B5:53:1D:FB:99:2D:EB:7B:C1:56:38:86
Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
Certificate issuer: /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Certificate serial: 019D39E59E16E7BAEE78CA9ED7BA0F2C68F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
Manifest number: 148D
Signing time: Sun 29 Mar 2026 14:00:42 +0000
Manifest this update: Sun 29 Mar 2026 14:00:42 +0000
Manifest next update: Mon 30 Mar 2026 14:00:42 +0000
Files and hashes: 1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: HLY5MuKU36Xta5qkzTqs+BXxwI6YIG0e8FgulqwUKf8=)
2: QwkbPhXCYpS8QdG4aux1NndNvVU.roa (hash: lPZVn1QVeW2aCEI35oLMwurmWxshCLVoZsSdXVqBOzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:9e:16:e7:ba:ee:78:ca:9e:d7:ba:0f:2c:68:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Validity
Not Before: Mar 29 14:00:42 2026 GMT
Not After : Mar 30 14:00:42 2026 GMT
Subject: CN=6b4ff886ac23ec2bb5531dfb992deb7bc1563886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:ba:4a:59:bb:4d:ad:9f:af:e4:9f:56:3b:
45:5a:49:d9:88:ba:9a:85:11:25:0e:24:60:05:b8:
12:cc:12:a8:1a:a9:d3:10:30:f7:dc:da:89:af:5c:
09:27:59:87:52:7f:6b:55:6e:57:0e:67:71:75:0c:
cf:c8:75:51:24:ee:71:1e:f6:f4:1a:a5:0e:64:4a:
c4:d6:71:50:9b:68:bb:aa:68:94:76:87:86:07:b8:
75:11:25:19:98:d6:b4:26:1b:bf:09:9f:09:69:ac:
25:dd:32:4e:21:4d:fe:5d:90:bf:65:76:2f:50:1a:
e0:10:bc:f3:c4:46:2b:9c:15:41:8d:9d:b5:4a:99:
bc:94:d0:5c:80:f5:4d:80:66:8f:44:af:75:70:c8:
6c:0b:93:41:1f:f1:64:5b:eb:c6:20:bc:3f:f7:3b:
e7:c3:79:52:bb:b2:09:e7:11:40:d8:97:e0:f1:4b:
9d:63:26:f6:0e:03:bc:42:7c:04:44:bf:d2:6a:52:
93:21:c9:5e:14:0b:74:d8:cc:8d:c1:62:3f:ec:12:
6d:c0:8a:50:d1:d8:df:a8:39:29:08:f9:30:5f:fb:
75:12:11:1e:cc:50:8c:39:ca:6c:60:73:ab:64:71:
cb:7b:38:cf:a8:16:bb:03:7a:e8:26:40:1e:25:19:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4F:F8:86:AC:23:EC:2B:B5:53:1D:FB:99:2D:EB:7B:C1:56:38:86
X509v3 Authority Key Identifier:
keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:eb:dc:d7:c0:f2:c2:4e:44:24:a8:67:1d:11:73:1d:56:4b:
7f:1c:38:80:fc:f9:bb:01:51:d5:c0:7d:bb:8a:1b:66:1c:bd:
10:3e:7c:6a:a9:ef:95:be:33:ef:ff:eb:2a:41:0d:64:c9:e0:
98:db:d5:b3:0c:99:85:67:b1:57:3d:2c:29:90:12:44:d6:86:
88:65:73:2c:1b:70:2c:b2:4e:5e:9d:ad:81:af:a8:fa:67:31:
b0:b5:80:7d:38:54:ee:27:c1:78:4a:32:26:bb:ee:e7:f4:ae:
9d:dc:98:4e:19:ce:9d:70:a4:81:f6:bd:1d:bf:cf:58:a0:74:
f2:7c:1c:a2:76:df:77:c0:18:3f:87:36:d9:19:99:97:c8:b8:
69:78:7d:04:a9:fa:73:b6:17:2b:e3:b2:a4:4b:f5:6d:3f:45:
e9:e9:0f:38:cf:90:92:5b:e2:78:0d:fa:e5:e5:4b:9f:da:0c:
08:03:61:d9:4f:54:8e:40:9d:34:10:de:02:26:17:24:a8:9e:
a0:a6:5a:a9:16:9e:27:ab:64:56:1f:0b:d3:4f:59:46:ca:a6:
ad:1b:1b:80:44:d2:a1:68:0b:3b:53:dd:59:3b:02:60:35:0a:
d9:ff:57:ef:dd:c6:9f:20:cc:32:f4:e8:25:e6:39:e3:c4:f4:
65:9c:6e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:46 2026 by rpki-client