Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
File: D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json)
Hash identifier: ZJ2xFRRnO1Yqbd7sMoUDkiDtW8IkUqEYFNiDVe3O3hs=
Subject key identifier: 16:D0:6B:2A:14:FB:F3:96:31:98:16:77:F8:3B:E7:87:A0:40:F1:79
Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
Certificate issuer: /CN=0f554afe672744742b4e35027b402e8613c20377
Certificate serial: 019D3789890FBF4D8F4F66A71308C8057A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
Manifest number: 177E
Signing time: Sun 29 Mar 2026 03:00:53 +0000
Manifest this update: Sun 29 Mar 2026 03:00:53 +0000
Manifest next update: Mon 30 Mar 2026 03:00:53 +0000
Files and hashes: 1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: 5Fb5K04OuIfiawOiP0J/+JexML4BhusbnWWj4cyF70c=)
2: aitD5UH29rGUG8_oXWsc-YfKHvk.roa (hash: fXAcocJ6AW36LCgsDsOqq0Ar/nfeKZ+crNQ7BTk4Lec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:89:0f:bf:4d:8f:4f:66:a7:13:08:c8:05:7a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f554afe672744742b4e35027b402e8613c20377
Validity
Not Before: Mar 29 03:00:53 2026 GMT
Not After : Mar 30 03:00:53 2026 GMT
Subject: CN=16d06b2a14fbf39631981677f83be787a040f179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:44:5b:9e:b5:71:81:bf:25:7b:ed:a0:87:
21:2c:96:d1:c2:55:7c:e5:47:28:1e:19:70:b0:d1:
75:55:66:b4:5b:f7:c4:3c:c2:e9:80:77:5b:14:c2:
fe:25:eb:2b:f1:15:76:18:be:43:3e:e8:19:8e:b7:
28:e4:a5:48:bc:87:ca:32:60:5b:de:a4:17:bb:af:
26:fb:b8:af:f8:48:40:ce:13:9c:a1:17:f3:c2:81:
eb:cc:80:84:2d:a6:3d:26:d1:ba:f2:3b:81:d6:6b:
27:5e:db:bf:5c:80:d4:2f:0e:e0:21:16:06:35:c5:
9e:a1:92:bb:8b:b5:8b:f9:4c:b0:81:77:7e:7f:fd:
c6:c5:72:a4:86:20:15:34:35:f9:eb:e9:c3:c7:87:
96:7f:33:72:62:8a:5c:a3:14:8b:b7:c3:ae:92:02:
78:d4:a3:96:29:ca:87:fa:d3:21:52:79:3c:5f:1a:
60:eb:7d:bf:55:3f:d3:92:2e:8a:ff:40:1c:da:44:
53:c5:fd:f4:27:81:96:bb:07:0a:d2:cb:7f:16:2f:
ca:79:5c:63:a9:f3:d4:7e:8c:cd:4b:72:fd:e7:92:
8e:95:90:16:dc:25:dd:00:ba:1f:73:54:ae:a2:8a:
1a:be:e2:b4:46:e3:05:cf:62:d1:e4:e3:8b:84:e7:
30:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D0:6B:2A:14:FB:F3:96:31:98:16:77:F8:3B:E7:87:A0:40:F1:79
X509v3 Authority Key Identifier:
keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b5:41:ad:f8:a3:a8:94:1b:40:f3:61:9c:64:53:09:6f:9c:
fe:c7:ce:e0:f0:8f:cd:e0:29:cd:ca:15:99:f9:94:c9:65:e2:
a2:fa:bb:f0:37:f0:26:cc:b9:ac:9e:46:e8:dd:43:75:f7:cf:
c4:5d:b4:88:dd:f0:21:5f:5f:fd:67:71:70:3d:d4:a6:56:c9:
21:aa:90:b5:68:8e:49:6c:d7:b6:2c:f6:db:04:3d:b0:f4:07:
3f:b5:d5:41:be:90:4d:59:36:d6:84:3a:fe:8f:f0:e6:4b:f1:
d1:30:84:62:a4:bd:c6:db:df:e6:36:d0:a5:0a:ec:81:47:cc:
f2:b7:3d:27:1b:c7:2b:5e:a4:b1:7f:e8:df:d1:83:ff:b7:76:
82:6e:2f:0d:9d:49:6a:d6:96:c2:72:87:b4:7f:c8:cf:c8:0c:
0a:f9:be:02:72:ba:d6:7b:44:6b:27:1b:18:d6:43:0c:ad:09:
f6:d3:f0:c3:bb:98:b4:3c:38:73:5c:9a:c8:c4:29:f4:92:e5:
9f:fe:fe:ff:56:fb:53:26:dd:1a:6c:41:bc:c8:3d:0c:fe:68:
a0:a8:0d:9b:3b:ea:72:a8:9a:b7:14:7b:f1:87:db:79:e9:e7:
20:2e:5d:16:62:e0:eb:9b:60:42:dd:59:6b:6b:c3:f8:95:91:
8d:44:39:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:07 2026 by rpki-client