Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: OlQk74Svkc9NmOO+UZJuVp/AzbdyxrN7kFeaztZ89jU=
Subject key identifier: 59:DB:F7:2B:A4:8D:FF:64:81:87:D5:C0:16:66:8B:49:AC:40:C8:85
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 019D382E9101A3B86A639237EB3F95C2F492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 189A
Signing time: Sun 29 Mar 2026 06:01:08 +0000
Manifest this update: Sun 29 Mar 2026 06:01:08 +0000
Manifest next update: Mon 30 Mar 2026 06:01:08 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: ul2AwokhbmMaP/Y6I4gOlQi/w+8AeGjEViwPZO3Rpb0=)
2: Mgm2FMvEWQvAKDRyHQNdXSs8Gk8.roa (hash: YvcWkgvU2zBPk1+mekhJs/OPMV1l8zTWtIoK9RU96lk=)
3: O103OuQ4IixndGyKa3UX3V5e3WQ.roa (hash: TcKGNvz82Ie8m+YB2xFxcsRcNfeQxqqzYWZzRclot5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:91:01:a3:b8:6a:63:92:37:eb:3f:95:c2:f4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Mar 29 06:01:08 2026 GMT
Not After : Mar 30 06:01:08 2026 GMT
Subject: CN=59dbf72ba48dff648187d5c016668b49ac40c885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0f:19:02:f0:59:2b:bd:34:09:7e:6b:51:ba:
86:68:f9:5c:3f:8b:1e:ca:1b:32:c8:ae:1a:a9:e6:
c6:b0:83:dd:08:23:16:b0:fe:c2:db:4b:84:24:30:
13:d3:d5:ef:73:d5:0b:12:a5:fc:78:d4:8a:e8:ca:
07:75:fe:d4:c1:cc:37:7c:eb:4b:1f:f3:03:4f:fa:
cc:75:a1:80:1b:95:48:fe:38:65:80:f0:e4:fe:10:
76:02:90:38:21:27:b4:ed:74:20:28:15:be:42:56:
a0:24:dd:1a:86:26:5f:3d:5f:8d:d5:73:35:c5:48:
12:3e:a6:a8:01:da:fa:37:37:c4:07:5b:48:3a:d3:
7c:40:10:61:0a:3e:6b:fc:f8:f2:ef:68:c3:a6:84:
19:fe:a5:5f:23:34:73:b6:49:24:c6:4a:f8:8d:4e:
2d:ff:23:56:dd:2b:e4:cd:36:51:38:3e:4c:4f:e3:
23:0c:66:1f:24:28:29:ee:32:a4:db:21:b0:8f:49:
e6:a1:8c:ca:b9:70:f3:fd:e8:1f:40:d3:e4:d5:21:
1a:42:76:9e:be:4e:78:1c:e8:b8:1a:bc:85:41:1f:
9c:16:28:55:34:67:50:46:44:eb:2d:1f:a5:01:c3:
df:77:fa:1b:fe:7d:de:58:8b:ea:f4:4c:de:8b:fd:
dc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DB:F7:2B:A4:8D:FF:64:81:87:D5:C0:16:66:8B:49:AC:40:C8:85
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:01:fa:96:55:e0:41:68:51:10:32:0f:ee:69:6f:35:98:05:
1e:4f:ba:51:fd:2e:ad:dc:c8:d0:41:73:cb:e3:6f:43:b3:ad:
9a:94:63:80:1a:4f:9c:db:61:06:6e:32:d6:02:94:f9:27:32:
db:d0:c2:b1:e4:e9:f9:c6:b2:ca:c5:1b:1f:8c:0c:61:3f:d0:
60:a8:8a:ee:0b:7e:b2:9b:3f:2d:0b:9a:6c:fd:b0:24:fb:0b:
07:b9:56:8d:5c:ff:45:f5:a1:ce:ea:31:8b:04:b4:87:66:56:
55:6c:a9:98:e1:b8:36:ca:49:57:69:6e:eb:22:20:16:c7:85:
22:ad:39:00:df:14:91:46:c0:46:7c:71:21:06:7b:07:74:fb:
47:b5:09:98:79:ed:d9:cb:1b:bc:2c:df:b9:10:7f:2f:2c:17:
d8:ae:ef:d0:a0:36:0d:97:67:4b:fa:c1:8e:d5:0c:99:70:59:
94:6d:a5:4a:f0:c4:aa:b4:a1:d9:30:53:13:11:56:87:16:e4:
5a:17:f2:bb:c1:40:19:4d:67:4d:bb:8c:23:3e:fd:13:70:14:
a9:2b:04:43:e2:e3:24:ca:cf:7f:86:19:57:b3:e2:ce:10:2e:
e4:d5:86:2f:e3:44:f3:08:56:34:5b:9f:83:16:2f:f2:d6:57:
23:f5:d2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:29 2026 by rpki-client