Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File: t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier: SfQZAbYY/jaMemk449f+nGyEqGoU3haxPsEiMXpQ2nE=
Subject key identifier: 91:E7:35:FB:32:D3:75:AD:84:B2:DB:5F:B7:9C:C8:89:39:B2:8B:04
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer: /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial: 019D39E5E8F4E72DC2662769467784CDA35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number: 0D30
Signing time: Sun 29 Mar 2026 14:01:01 +0000
Manifest this update: Sun 29 Mar 2026 14:01:01 +0000
Manifest next update: Mon 30 Mar 2026 14:01:01 +0000
Files and hashes: 1: UCdBL2cD1nASc373rfpJddfKBRk.roa (hash: lFmC2crxbHri6/LBkNCkhFFRFW/esHZK/bXeT9XM8CQ=)
2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: qeKgwLxhQPc0oYvKfGqHCLI983xWf7qO4WSqUMiSF2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e8:f4:e7:2d:c2:66:27:69:46:77:84:cd:a3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Validity
Not Before: Mar 29 14:01:01 2026 GMT
Not After : Mar 30 14:01:01 2026 GMT
Subject: CN=91e735fb32d375ad84b2db5fb79cc88939b28b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:75:68:e4:fe:e1:1a:63:fe:61:ad:60:46:
e2:e4:67:61:2b:f6:ee:a0:b0:8f:94:f4:9c:f7:1d:
ad:f9:5f:f4:cd:53:9c:ed:b6:40:db:5f:ee:e8:15:
14:5b:b7:8d:81:50:a7:68:0a:ba:c6:1a:35:4b:85:
73:4c:5b:da:fb:5b:cd:94:92:22:66:6f:8c:7c:9f:
0a:7e:1b:64:62:ec:1b:55:3d:68:da:07:67:19:4e:
8c:f2:1f:95:5d:f7:e4:7b:82:24:3e:ca:b4:f6:ef:
c0:4e:74:63:2d:f6:fc:34:25:ff:59:5f:9d:c5:55:
e1:93:7b:09:fb:1a:db:d5:fd:0b:ef:81:7e:4d:6e:
1f:4a:69:40:e2:0a:ac:be:a2:81:a9:ee:44:79:19:
57:a1:77:00:71:3e:61:49:09:6d:d7:89:36:c9:45:
f0:48:25:76:26:5c:6d:0a:64:b9:8f:98:cf:d6:a7:
97:b6:11:1b:2b:0c:98:66:d1:63:d1:ef:dd:e9:ee:
74:c2:be:38:bf:ae:1d:05:7f:a2:f8:49:19:bd:67:
ca:98:bd:30:8e:1c:fc:34:30:5e:0f:fd:25:18:81:
d0:31:22:7f:23:6f:8f:42:a9:9a:96:75:e4:85:92:
57:fa:f7:21:4b:8a:16:20:be:a7:f2:9a:5b:d4:db:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E7:35:FB:32:D3:75:AD:84:B2:DB:5F:B7:9C:C8:89:39:B2:8B:04
X509v3 Authority Key Identifier:
keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f2:ad:82:9a:98:ec:98:73:66:52:6a:75:f9:f0:36:3d:ce:
35:da:cb:66:22:56:6f:76:0e:6e:8c:25:fe:27:e1:ec:b5:a9:
61:2a:9a:95:0e:5c:76:5b:49:aa:1b:5a:96:4e:4f:95:fd:6d:
cc:3e:b4:c5:a0:f2:a6:39:b9:11:a6:cd:48:44:24:fc:67:8c:
8a:47:63:a8:e9:eb:a2:81:a7:7b:85:6c:00:a4:b1:7e:3b:2c:
c7:1b:a5:e0:13:9a:e4:a6:cb:8f:56:21:fe:90:70:8e:3b:ec:
f6:f8:29:c9:69:cf:7e:ce:a9:18:37:42:3b:74:31:ba:31:1c:
40:20:1e:a6:00:4f:a8:54:b6:78:cb:44:af:5f:bb:ca:a7:7f:
42:5c:2a:d4:df:bc:9a:cd:9b:2c:51:0d:91:6a:f6:8b:db:95:
6f:24:69:0c:24:d1:32:4d:73:23:0c:f1:a2:39:50:a5:a8:29:
9f:d3:a2:00:0e:5b:05:37:ef:a7:8a:25:dc:92:c0:54:f3:e2:
6b:1b:0b:e5:d9:27:85:0a:bb:f7:03:8f:1b:86:f6:64:46:65:
d7:72:a4:6a:0a:22:80:7f:b4:de:7d:2b:f4:82:b4:30:3a:5a:
4b:16:67:20:70:85:ed:2d:ea:bf:24:ec:65:ef:10:5f:51:37:
4d:8a:35:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:15 2026 by rpki-client