Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
File: 69siVHHy1uQQYLNBhXJUhUgQFLg.mft (raw, json)
Hash identifier: Z0uUiNH61yNJdadz8l+JBI1zinE9fLhpfWwLPzi2/u8=
Subject key identifier: 22:26:94:63:8D:B4:AC:0F:7D:23:95:6D:35:CA:F0:A4:E3:DA:F1:84
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial: 019D389C4CB99D9CB7CE857D43BA720A14B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
Manifest number: 17F0
Signing time: Sun 29 Mar 2026 08:01:00 +0000
Manifest this update: Sun 29 Mar 2026 08:01:00 +0000
Manifest next update: Mon 30 Mar 2026 08:01:00 +0000
Files and hashes: 1: 69siVHHy1uQQYLNBhXJUhUgQFLg.crl (hash: zVFfZkL1P2O7nI8mep/u/a0fnSSpK5AZGsIXcv29xOA=)
2: 79f2iwLtrmRydXFTtc58ysq7PXU.roa (hash: /kHpLUM291G9o+Fyp/HVYlns3gOueQ1aYbjeKqPoOTE=)
3: cOOgTfeUDEMTH12FgsfATc70VpU.roa (hash: M3wjV6rwKEQJn04pkeYZAKa6kOWv8ol9iG8ZWPsCuY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4c:b9:9d:9c:b7:ce:85:7d:43:ba:72:0a:14:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
Validity
Not Before: Mar 29 08:01:00 2026 GMT
Not After : Mar 30 08:01:00 2026 GMT
Subject: CN=222694638db4ac0f7d23956d35caf0a4e3daf184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:5c:fa:fa:1c:8f:73:71:87:6b:df:8e:5c:
eb:d9:01:cd:03:63:1e:28:c3:d0:5d:98:98:47:1f:
30:57:71:f0:52:90:e9:86:97:e8:d8:4b:95:fc:63:
37:36:3f:96:b3:3a:62:a7:18:85:f1:08:96:96:34:
db:53:33:ec:47:f6:29:0b:32:0e:09:e7:ba:9e:08:
19:eb:c3:d6:6c:54:24:a4:49:e5:02:88:78:d3:08:
5d:0e:04:7f:8e:50:50:f6:74:c9:70:b4:1a:50:47:
3a:da:a9:8c:a5:41:db:1b:4e:9a:2f:79:ca:b9:38:
37:67:39:b0:23:f9:2c:af:6a:4f:71:71:af:26:57:
bf:81:f8:32:f4:3e:80:08:75:9a:da:a2:54:90:f8:
f7:e7:59:f6:97:e4:be:7d:2c:06:5e:b0:12:44:e1:
5b:44:ae:c7:16:3a:2d:55:d4:72:cb:e1:3c:be:95:
5f:b5:6c:87:be:8b:ba:df:b0:a5:90:d6:67:5f:f9:
1a:d4:54:ee:e9:ac:7b:ac:3e:d3:a8:d5:e8:ee:41:
ee:29:e8:1c:7d:64:ad:7c:0b:89:b7:77:8a:e2:4e:
6a:1a:b3:54:79:a9:e2:eb:6c:62:4f:ba:1d:5a:61:
df:e5:b9:89:13:86:66:e0:b0:bf:1e:81:62:ef:c1:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:26:94:63:8D:B4:AC:0F:7D:23:95:6D:35:CA:F0:A4:E3:DA:F1:84
X509v3 Authority Key Identifier:
keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f8:7a:2f:62:65:a8:0d:86:5c:b5:13:d7:44:f1:91:26:ff:
33:52:3c:e0:ea:6c:79:ca:70:65:b6:5a:4e:f7:fa:0d:4c:de:
02:b4:a0:32:27:60:0e:3d:7e:81:d1:ad:30:84:04:36:9f:7a:
91:47:a4:e2:13:b9:6d:1b:51:4e:14:b4:6b:4f:b0:31:e3:14:
c6:3b:e3:fd:67:ef:4c:3e:81:98:79:8d:5f:68:cd:f0:92:79:
a8:ba:d2:0d:3b:e4:04:e1:79:91:df:aa:f7:aa:af:fc:fa:c6:
2a:ab:b1:03:5a:07:b2:65:fd:21:69:a4:f4:7c:51:08:f1:45:
65:e0:75:d5:b8:41:2e:65:a4:d7:2c:b2:a5:8a:eb:b5:c1:40:
ee:91:96:d0:7e:35:00:e4:62:3a:fa:2f:cd:f5:f3:ce:fc:b1:
92:85:f4:b2:15:e1:37:d2:1a:50:27:d1:51:64:fa:25:34:26:
7e:0a:cb:9b:9b:20:e8:f1:1f:fd:54:6f:3d:26:ee:f8:94:4c:
4d:e2:16:24:e2:4d:93:9a:59:34:19:36:93:c6:65:88:80:2b:
1d:b1:8a:28:4d:59:4b:dc:ec:d0:ba:77:a9:13:65:ea:ca:28:
f0:7d:38:21:65:a4:5c:8a:80:b5:89:d3:f6:a9:73:1b:3c:5f:
f4:92:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:13 2026 by rpki-client