Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
File: d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json)
Hash identifier: D1KJTv/0JAyatlXENnet5lVo4d1x2Fn+Bk3/CtBuA5c=
Subject key identifier: A7:4E:77:7C:23:ED:07:6D:74:22:A4:DD:16:6A:F8:62:FF:C4:A1:39
Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
Certificate issuer: /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Certificate serial: 019DCF3DF45720A31FE20022A8FF1DEB7F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
Manifest number: 0656
Signing time: Mon 27 Apr 2026 14:00:37 +0000
Manifest this update: Mon 27 Apr 2026 14:00:37 +0000
Manifest next update: Tue 28 Apr 2026 14:00:37 +0000
Files and hashes: 1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: u3PGO1HtYLVJhcs0vRps1p5G9JZ+RLTW0YQEGWFMdmo=)
2: kPvxZ2OyeoUeAIvW5z89UU8ASkE.roa (hash: Sv6cjXS82obyL50XzOiS7kDFeEpRD0eJe0mAtx0A7U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3d:f4:57:20:a3:1f:e2:00:22:a8:ff:1d:eb:7f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Validity
Not Before: Apr 27 14:00:37 2026 GMT
Not After : Apr 28 14:00:37 2026 GMT
Subject: CN=a74e777c23ed076d7422a4dd166af862ffc4a139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3f:33:03:d9:4a:f1:b4:5e:58:ae:fc:35:b9:
48:81:23:33:6f:6b:68:51:7b:54:98:b5:50:6d:5b:
2b:19:06:8a:dd:76:71:0e:87:b2:9c:0a:6f:3b:da:
50:82:e6:35:f4:15:26:33:75:bc:fb:ef:1c:11:5f:
8f:4c:9c:77:06:b2:00:92:3b:fd:5b:8a:3b:e5:a4:
79:84:0d:8a:51:79:24:e2:4c:e8:05:63:dd:19:1d:
9e:84:48:61:6d:fa:69:19:d7:88:a4:da:22:ec:50:
36:08:b1:e1:25:f0:cf:58:35:b5:40:75:74:18:01:
43:5f:f2:38:f2:e2:70:a8:f6:63:26:7d:84:86:9b:
2f:da:b2:7b:77:e4:1c:a3:ce:3b:d0:72:70:d3:a2:
53:76:23:76:40:02:9e:01:5c:dc:60:1b:d9:d6:00:
0f:a3:56:a2:29:61:40:e9:b4:91:93:63:67:e5:be:
c1:04:50:b6:a2:8b:ea:69:72:f5:47:f5:12:05:4e:
7b:4e:af:a3:88:db:8b:aa:e4:62:4e:f7:81:70:39:
bf:31:fa:38:e2:ce:30:73:60:6f:cd:d7:9a:ec:60:
dd:fd:ab:44:ea:c9:5e:9a:c0:8f:8b:b4:47:23:f5:
61:c6:91:d7:9f:d8:83:fd:2b:63:15:c2:6c:ba:67:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4E:77:7C:23:ED:07:6D:74:22:A4:DD:16:6A:F8:62:FF:C4:A1:39
X509v3 Authority Key Identifier:
keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:31:0c:cc:50:85:79:2e:54:97:31:5d:80:97:da:e7:cd:60:
ea:7f:90:07:95:74:7e:22:2a:58:84:8a:07:96:9e:b4:6b:bd:
11:38:9b:29:18:1a:6b:61:d7:f0:20:7c:e6:25:45:1c:ba:f4:
38:d1:f6:39:72:13:8b:36:a5:9f:e6:8d:52:4c:fb:fd:12:2e:
01:bb:ea:f5:48:af:96:32:b1:05:c3:ac:8d:c8:46:83:75:66:
be:dd:76:97:4a:43:a3:a6:52:d0:c1:4c:e1:c8:d2:03:85:fe:
a3:90:c1:09:16:13:f1:1d:99:cf:8a:e5:fc:79:1d:59:f7:b9:
e6:87:03:ee:32:c3:40:ca:e6:ee:6c:28:7a:8a:47:d8:20:42:
cf:30:ad:1f:4e:d2:3c:53:54:3e:38:99:68:12:f7:e8:9c:50:
aa:a0:d4:39:36:d8:2c:86:a6:f5:51:81:c9:c7:6b:59:d2:d8:
46:81:78:ad:69:80:09:98:d1:42:b9:90:f8:d3:35:3f:db:63:
b6:2b:62:53:97:62:15:1a:a8:ef:e9:d1:09:55:aa:58:6c:5f:
fc:b7:ec:06:dd:eb:af:5a:71:83:2d:23:4b:4f:94:cd:e0:8f:
a9:2f:15:03:4a:d1:1d:63:35:ed:12:2e:08:71:d1:eb:8b:dc:
52:36:56:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:06:05 2026 by rpki-client