Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
File: sDQCUfGCY0f06WRfaCTTuT9H5d4.mft (raw, json)
Hash identifier: YSCd57l5o8PU5Jymu9P6Fc2U+M3tml9SbjEpg2I01S4=
Subject key identifier: 3F:87:79:20:4B:17:23:55:DF:58:6A:AD:BE:8F:2E:D8:95:59:E7:5E
Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
Certificate issuer: /CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Certificate serial: 019D382E5A037A52F4166534D1964BEDB258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
Manifest number: 0E93
Signing time: Sun 29 Mar 2026 06:00:54 +0000
Manifest this update: Sun 29 Mar 2026 06:00:54 +0000
Manifest next update: Mon 30 Mar 2026 06:00:54 +0000
Files and hashes: 1: 7CUwK1UYwqayiiojTeY6DuJ4PuE.roa (hash: 0KwqbQB6sudYAbA+sSqdOrA5B6tIA7G2Tl98Yz+oNVs=)
2: sDQCUfGCY0f06WRfaCTTuT9H5d4.crl (hash: w9YFXcHebnf14BbFNOFEGAQNAj3Rb6IZdTn/isH7b4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:5a:03:7a:52:f4:16:65:34:d1:96:4b:ed:b2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Validity
Not Before: Mar 29 06:00:54 2026 GMT
Not After : Mar 30 06:00:54 2026 GMT
Subject: CN=3f8779204b172355df586aadbe8f2ed89559e75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:9a:2c:6b:9c:7c:a1:72:30:b9:05:86:8d:
4b:da:a3:2f:a3:da:40:6b:a5:ec:93:e8:7d:e2:0b:
29:d4:89:b3:6a:7f:c9:02:b7:b6:7e:ea:23:91:eb:
08:22:17:03:64:07:3d:6b:de:de:eb:b6:b9:3f:a6:
0a:68:5d:77:01:68:3c:01:8b:3d:66:3a:3b:4d:39:
42:01:a6:1f:2d:40:c6:41:5f:c6:4b:df:0e:c0:a8:
70:29:5b:ac:8e:65:83:fd:c1:6c:9b:5c:10:ed:b3:
65:cb:f6:b0:40:1f:22:b6:25:eb:fe:17:78:85:9d:
4c:80:70:41:ae:e6:6c:b9:50:14:dc:da:0a:04:02:
81:62:cc:77:17:94:4c:db:f6:78:0e:1c:23:89:5c:
66:1a:2a:48:42:ec:4c:8f:d9:da:af:18:95:94:b8:
08:9f:ce:2a:d1:9d:00:5b:80:e8:58:30:3c:2c:8e:
8e:a9:ae:84:b0:e0:3d:49:8f:a1:c9:88:67:27:b3:
eb:7b:2a:e0:c0:46:ab:ee:6a:a4:e0:16:a7:a7:60:
e5:60:38:75:1e:01:76:91:ed:fe:d8:21:46:a4:07:
2d:9a:86:46:fb:ff:2c:e8:92:ec:7d:fa:00:fa:71:
da:42:8d:a7:7d:af:3e:d8:1e:ce:64:41:e0:03:ea:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:87:79:20:4B:17:23:55:DF:58:6A:AD:BE:8F:2E:D8:95:59:E7:5E
X509v3 Authority Key Identifier:
keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:72:c1:a4:81:43:d7:7b:60:e3:84:59:03:9a:c1:93:3a:36:
c4:7b:3c:d0:4e:c3:85:66:55:74:8f:1e:f9:73:1d:64:7c:ec:
54:e6:3d:80:8a:7f:49:e0:0d:d4:34:97:d1:4b:0b:f4:8f:e3:
5e:2c:61:20:65:0a:05:f8:10:c5:c4:d8:a5:04:68:f4:f7:cf:
51:d4:a9:c2:8c:bf:e4:34:d2:35:3d:a1:08:1c:b6:e3:19:18:
f3:e5:65:84:25:5f:7d:77:8e:ff:d5:c8:0a:e1:3a:ef:b6:fa:
af:6d:a8:44:50:8b:8d:db:b8:06:d4:ca:53:b9:b0:eb:6e:fb:
c5:f7:0d:ce:b0:51:b1:2b:bf:b0:c6:34:3d:05:3b:5b:44:d3:
59:cc:03:f6:69:94:73:32:8b:89:b7:b5:e0:ad:f2:53:b6:a6:
4f:5e:11:54:74:14:ee:e2:82:50:23:f9:24:56:71:c2:80:ef:
11:89:48:a6:a0:54:12:13:b3:be:72:41:e9:6d:00:79:87:4d:
6c:41:c7:90:3c:4e:3e:72:03:2a:6c:16:ca:c0:79:cd:f1:1e:
f7:7e:04:f3:7a:f4:83:a7:73:9b:55:a9:1c:34:81:d4:2e:c2:
86:dc:54:e2:ad:ab:c4:f1:f1:36:b2:65:9e:11:46:c7:23:71:
5b:4e:10:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:51 2026 by rpki-client