Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: gPTw6oLgxbKNawTHbEhN5J5pCs+lo68dpF/kvQQjuxU=
Subject key identifier: F9:0D:2F:65:5F:2B:4A:A2:63:06:4B:2F:33:FE:A8:56:53:2D:69:3B
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 019D37897D35003F39A5C3C26EC7DFDCF229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 0497
Signing time: Sun 29 Mar 2026 03:00:50 +0000
Manifest this update: Sun 29 Mar 2026 03:00:50 +0000
Manifest next update: Mon 30 Mar 2026 03:00:50 +0000
Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: HndRgrLFp+KBCT+/VSWeOuTr13zxH77jbMTKgPonH8E=)
2: kiTvl7qRwBbY6cobkK0xpr1YwKU.roa (hash: ej/OHpg3lUXGkRe1UvCRILNoIypuMG3kknoqujS4cxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7d:35:00:3f:39:a5:c3:c2:6e:c7:df:dc:f2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Mar 29 03:00:50 2026 GMT
Not After : Mar 30 03:00:50 2026 GMT
Subject: CN=f90d2f655f2b4aa263064b2f33fea856532d693b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:18:76:92:5a:88:54:e4:15:21:63:12:0c:
a8:2f:d2:08:f9:16:46:6e:9d:86:f9:a8:cf:a1:6d:
86:b3:16:3f:a1:50:15:16:ba:a2:fb:37:41:76:44:
25:e4:91:7f:46:64:40:cf:23:fc:54:7a:9b:a1:7f:
78:ff:f9:03:91:15:8c:a0:5f:45:3c:f6:c4:ec:18:
26:16:87:60:18:bb:6a:0d:11:2f:c6:83:32:46:c7:
c2:71:2e:10:a6:8b:c2:d4:54:f9:3e:2d:7b:eb:8d:
ba:a0:d9:33:e0:8e:df:2a:51:85:4c:42:b7:4d:fe:
f4:fc:54:0d:5e:eb:93:bb:01:0d:6c:97:4e:5c:b0:
9d:68:5d:cb:f1:70:ba:5e:c7:2e:6e:a5:69:19:aa:
92:0c:97:00:f5:68:2a:25:94:61:23:a5:10:e8:21:
d7:98:b8:2f:92:05:08:de:cb:f9:76:68:d2:1f:04:
ac:c3:62:79:35:dd:0c:55:ea:c2:08:f7:33:91:ec:
f7:12:24:09:d8:b6:2c:18:98:8e:f5:83:76:35:d5:
53:80:15:6c:26:fd:6c:d4:52:18:7a:2f:fc:b6:40:
e2:04:4a:51:e4:b5:4d:11:5e:46:91:4e:73:e5:9d:
c2:78:6e:e1:ad:cf:9c:e3:44:fe:f0:93:ac:ed:92:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0D:2F:65:5F:2B:4A:A2:63:06:4B:2F:33:FE:A8:56:53:2D:69:3B
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bb:c1:b2:d5:3f:89:bb:f1:b4:5d:46:30:36:2e:46:fb:dc:
34:4d:81:b7:4d:cb:04:05:34:f0:1a:e2:a0:bb:83:b5:b8:4e:
27:ac:b3:30:7a:b6:a4:ad:af:81:55:97:c1:60:e3:57:1d:20:
bf:88:7d:19:21:19:73:78:01:2c:6d:b9:ef:34:76:5e:52:fb:
8f:81:67:da:f8:bb:e3:03:3e:89:a5:89:65:60:12:0a:0c:48:
1c:cb:1d:3e:79:a9:c7:9a:37:9a:26:2e:0a:2b:e7:a6:dc:29:
56:da:99:c2:f6:af:cb:fd:d7:7d:c3:f1:01:92:e7:f2:91:02:
42:0e:d2:da:f0:9d:52:28:7e:e2:0f:f0:64:7d:17:ee:cf:d0:
d1:d8:9c:13:5b:35:bd:08:81:04:e5:3c:4f:66:42:89:6d:3b:
17:99:4d:1d:cb:5c:37:6e:ef:d3:49:7e:04:02:33:77:93:f8:
40:3c:8f:0d:4b:29:8c:1e:54:32:ba:d7:15:9e:89:06:dc:3c:
d3:fd:4b:16:ac:a9:20:f6:2c:b7:05:b6:9e:67:0d:d1:35:75:
84:ee:e3:ef:6c:e1:14:b6:8c:d1:a6:60:2e:bb:fc:2d:12:af:
29:b6:39:83:f5:ef:2b:e1:b2:c7:1a:4a:d9:41:46:56:24:de:
30:da:37:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:16 2026 by rpki-client