
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft
File: 94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft (raw, json)
Hash identifier: vZ7ItWMRYlbFp1IVvIyqIVCbMYfafxlcSAlf5jk7E6k=
Subject key identifier: 83:03:B1:55:1F:08:CD:91:AA:10:A0:EB:5A:D8:31:89:50:2A:A4:3E
Authority key identifier: F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4
Certificate issuer: /CN=f781ad3233d9c2c189d9499da1177b57101a5ef4
Certificate serial: 019D37C0A1E00D76A05CF828FC8C4D39CC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft
Manifest number: 0E5D
Signing time: Sun 29 Mar 2026 04:01:04 +0000
Manifest this update: Sun 29 Mar 2026 04:01:04 +0000
Manifest next update: Mon 30 Mar 2026 04:01:04 +0000
Files and hashes: 1: 94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl (hash: Ps4xF54m5codInc4hMM+yI3P+/a4EEBRhJN5kE2dFKY=)
2: OJlfVODA1Oyel73IkLe76x3InXs.roa (hash: ZaZsJzz+fV4f9gGKkD3UaI87u+j1nI0aVsgxVEdatZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a1:e0:0d:76:a0:5c:f8:28:fc:8c:4d:39:cc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f781ad3233d9c2c189d9499da1177b57101a5ef4
Validity
Not Before: Mar 29 04:01:04 2026 GMT
Not After : Mar 30 04:01:04 2026 GMT
Subject: CN=8303b1551f08cd91aa10a0eb5ad83189502aa43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:e4:38:ac:41:94:ed:77:b8:be:39:f8:2e:
bb:2f:5e:0b:8a:93:a3:49:ab:8c:f8:dc:2e:59:24:
eb:8c:cb:7a:b1:2b:dc:8e:41:27:5c:19:a6:2a:03:
55:2a:21:28:0d:1b:1b:13:9c:e3:f0:04:ff:54:dd:
36:47:46:eb:d4:3b:5c:c4:dd:23:e7:c0:75:0b:a8:
ed:b4:9d:43:e1:f1:b4:c6:55:04:72:62:97:f3:14:
00:5c:bb:9b:7d:1a:17:bb:44:c8:f9:21:02:d2:4e:
13:d8:38:fa:e2:54:2a:a7:79:d1:b6:65:dc:a3:1c:
b0:8f:08:11:2b:1a:05:94:06:ab:dc:35:3f:1d:08:
7b:d2:73:26:ed:f9:7f:34:c0:01:82:7f:76:95:80:
72:45:a4:6d:17:d7:b6:5f:de:1d:d8:81:1a:d5:fc:
5e:95:a6:06:f6:20:4e:e1:36:6f:98:be:53:aa:4a:
df:d5:c6:07:41:05:bc:71:ae:c6:3c:9a:8c:da:7b:
49:cb:8c:0f:00:91:a3:68:4e:8c:a0:bb:bb:0a:96:
5a:09:1e:c1:7f:4c:96:61:72:16:24:cd:f2:02:fa:
0b:31:25:0e:58:e3:41:5b:d4:db:a7:f5:95:96:2e:
2d:3e:26:77:38:82:49:ba:55:fc:05:45:1e:50:51:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:03:B1:55:1F:08:CD:91:AA:10:A0:EB:5A:D8:31:89:50:2A:A4:3E
X509v3 Authority Key Identifier:
keyid:F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c0:2d:bb:9d:c0:5c:ea:2e:ce:b4:4b:6b:02:2c:ef:89:ce:
50:6c:42:82:bd:75:cd:ba:5f:85:c8:ac:31:f8:fc:79:0b:f4:
39:e6:50:d8:e1:e3:64:29:30:3c:a1:9d:ac:a6:ab:89:1a:02:
99:73:9c:ac:d0:5e:ea:76:a1:28:67:90:e5:24:ab:c9:03:62:
b4:97:a2:c2:80:79:43:36:df:17:5f:0f:23:75:09:a2:5d:db:
d3:8a:46:d8:01:a4:8a:a5:e0:64:56:4e:f6:55:82:cb:e5:de:
30:d5:57:90:20:3a:1a:d9:77:b7:3c:9c:79:23:e9:97:cf:05:
96:de:c2:b3:19:28:73:49:5f:10:e0:ba:eb:2c:12:2d:44:dd:
d6:9a:d6:21:6d:c3:98:bf:08:d2:ce:58:8e:dc:27:8b:d4:16:
29:55:15:82:fc:23:89:a0:0f:08:5e:cb:15:f9:4c:d6:87:2e:
39:99:29:d4:a3:4d:07:60:50:02:49:7a:26:54:f2:9d:16:80:
f1:c5:19:3a:d5:af:7d:4c:78:85:00:7f:74:13:b6:12:9c:93:
3f:fb:e7:79:40:cb:e5:9e:ef:5a:bb:b6:1e:6b:1c:f8:fb:07:
f4:0e:7a:1b:65:25:e5:1d:fe:e9:29:2e:d6:fb:54:22:4c:b1:
84:c5:82:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:37 2026 by rpki-client