Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier: vp9MWgTAso1SK8m/0Fg5aslOEAIoUd2JkhQvM3iO1rQ=
Subject key identifier: 5B:33:FC:0E:08:7A:0A:3F:1F:B7:9E:C2:CA:E0:58:4F:67:36:D5:92
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 019D3865942D1885532CB14E4399F7F410B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number: 0F25
Signing time: Sun 29 Mar 2026 07:01:14 +0000
Manifest this update: Sun 29 Mar 2026 07:01:14 +0000
Manifest next update: Mon 30 Mar 2026 07:01:14 +0000
Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: bjSs0HDAueMcpXt84YR1nvDCFOh7Z2JXFQLDfBio4ng=)
2: jK9vJkC-9INkg3kH606wmZpM3gY.roa (hash: pPtcnLjluAlTQa5sDa1ndB+L+idIHW8vl3l2EMrfHcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:94:2d:18:85:53:2c:b1:4e:43:99:f7:f4:10:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: Mar 29 07:01:14 2026 GMT
Not After : Mar 30 07:01:14 2026 GMT
Subject: CN=5b33fc0e087a0a3f1fb79ec2cae0584f6736d592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:b1:fb:2b:16:67:ef:b5:d6:1d:19:00:ee:
d1:9e:fd:10:05:a4:77:17:de:dc:00:9c:24:e5:59:
33:a2:c9:53:e9:f6:50:1d:d5:fd:ec:d7:e1:6b:b5:
46:46:2d:4d:42:09:08:ec:ef:6a:6a:b2:88:eb:95:
07:17:ba:b7:ad:0b:05:17:d1:18:16:67:69:61:10:
0c:d3:54:f9:60:5a:51:ec:2a:82:80:d9:03:da:78:
ea:95:44:c5:c9:50:2d:36:0d:bb:ac:bb:39:c9:0f:
d0:f0:c6:73:40:59:4f:a1:c9:f9:c0:5a:bd:37:bd:
ca:61:74:e2:fc:51:b0:d4:ce:c8:13:b2:cb:1d:73:
7c:96:ad:05:6e:54:b0:43:87:21:7f:00:14:a8:6b:
d5:93:60:89:ca:26:33:09:d9:13:1e:f1:c2:c4:9c:
bf:39:74:58:5f:dd:74:1f:5a:19:55:e9:8b:b7:45:
29:db:ca:f0:3f:dd:48:2e:b3:61:b5:a7:5e:01:95:
48:1a:a9:e4:35:99:26:09:ca:b8:45:eb:bc:66:85:
19:cd:ab:9b:53:08:8f:a3:10:20:91:03:ca:77:61:
bf:2d:10:f7:03:9a:fb:f0:1b:ee:60:15:36:bc:3a:
bc:bf:d9:1a:47:dc:b6:08:6e:de:a6:b6:e0:87:4c:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:33:FC:0E:08:7A:0A:3F:1F:B7:9E:C2:CA:E0:58:4F:67:36:D5:92
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8b:57:32:d4:d2:ef:50:1b:27:69:99:2f:76:3f:41:18:f5:
96:ff:40:53:88:64:fa:9b:39:e8:25:d3:d5:10:fd:08:8c:cf:
fa:87:e7:6d:d5:4f:d7:bf:b8:41:8d:37:fe:7c:08:c1:be:47:
3e:46:35:4d:4e:ef:a9:69:f4:3d:08:53:28:42:03:70:b5:be:
39:5a:1d:e1:c1:1b:12:59:63:44:43:da:86:e0:38:1b:5e:31:
95:bd:95:b3:0c:66:c1:dd:fb:de:cd:cd:22:74:33:fe:c0:12:
49:ee:35:16:7c:a8:e3:d2:37:ce:62:9b:52:76:7b:36:24:82:
e5:31:f9:12:60:12:b8:2c:d1:c0:3b:d7:e4:9d:6c:44:51:4a:
c7:67:33:4a:74:20:e2:db:6b:82:a4:15:2d:fa:dc:57:af:0e:
42:3a:34:30:24:19:17:70:3d:aa:52:86:ff:4b:27:59:17:41:
cf:4b:1d:a3:41:58:8b:60:6e:73:f9:d9:f8:23:5a:73:ee:9d:
80:ee:98:ba:32:3d:25:3f:c3:62:0c:48:dd:e4:0a:9e:72:75:
7b:41:4f:e3:cd:ac:3b:1d:0d:9a:5b:ec:1d:7a:66:3c:fa:7e:
09:b7:36:22:82:51:f3:d8:f2:91:3d:c4:cf:47:d0:b9:41:c8:
b9:85:13:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:25 2026 by rpki-client