Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: PBNWvYXDHGCtsDFoaUeEMyeM8CHA9m4JyA04Mcw20wA=
Subject key identifier: 99:93:85:68:0A:93:1F:43:3A:CE:0A:7F:46:E2:64:31:B6:E2:01:A7
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 019D3A1CC45909E752CFE183E8F634FA429B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 15:00:56 +0000
Manifest this update: Sun 29 Mar 2026 15:00:56 +0000
Manifest next update: Mon 30 Mar 2026 15:00:56 +0000
Files and hashes: 1: 3yGgq6gpQ9NYaasBYMMPQaATXzo.roa (hash: i0WCJtC2Kt+N/0o8HIjmO/t5ox+yoXwX3GlgqEv4MdQ=)
2: ZRLYVrP2rb95Q-Ge4TVnxmxa0zg.roa (hash: Xsb75QA4ApCthewBTBgfSKpRYNo5qI3KmhsLF/JdAuM=)
3: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: et1AdXSc5c9/G3vXYAJw/+CGAGRvimW41UYzgYXAZTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:c4:59:09:e7:52:cf:e1:83:e8:f6:34:fa:42:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Mar 29 15:00:56 2026 GMT
Not After : Mar 30 15:00:56 2026 GMT
Subject: CN=999385680a931f433ace0a7f46e26431b6e201a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fd:a4:38:6b:5f:7b:42:0e:e9:01:ef:8d:e3:
8b:8b:f1:44:70:ea:5c:e0:76:d8:09:90:64:9a:88:
c9:7e:62:fa:cd:19:79:22:a8:0b:e9:9a:3c:fd:2a:
49:df:76:56:62:f2:cb:b0:f1:73:a5:66:f1:5d:91:
3d:ec:75:82:1c:43:96:29:7c:51:06:f9:20:ff:bc:
eb:91:85:ae:7f:b5:47:a1:81:e0:51:ae:97:d1:40:
ce:81:23:43:6c:80:b8:e8:fb:16:ef:dd:32:6a:d3:
1e:e4:71:85:45:90:bd:db:d3:35:0c:54:cc:4e:80:
20:d9:66:1f:c0:0d:cc:4b:a6:39:68:da:c9:63:5d:
5f:70:f6:ae:ab:de:11:56:62:58:c9:84:f8:72:c1:
64:a5:ec:a8:bf:8c:2f:9d:76:d8:92:5d:c2:af:0e:
59:4e:8b:16:97:52:0e:1d:9b:7e:2c:78:94:12:5c:
36:6b:39:e8:7c:32:4d:6d:dc:59:7f:09:c5:b2:50:
03:96:c2:8b:ce:b9:bf:51:39:00:15:25:63:d6:b8:
fd:f1:ac:2e:e5:3e:cf:c5:b6:51:9e:e3:92:9f:8e:
bb:27:50:7e:b5:f0:0f:56:9b:c0:54:39:20:e0:62:
54:dc:4f:75:c6:0f:38:3a:dc:41:33:fd:b0:83:a1:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:93:85:68:0A:93:1F:43:3A:CE:0A:7F:46:E2:64:31:B6:E2:01:A7
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:f1:62:5b:ff:20:1e:39:11:81:8d:eb:5f:22:2d:c7:cb:b4:
d1:c9:2e:95:50:6b:d6:f3:a0:3e:53:24:b5:bf:04:85:55:37:
dc:6b:a9:c6:f3:8e:5a:b3:91:4b:39:b5:de:7f:30:2e:ba:f8:
07:02:d0:c1:3f:c5:1b:5d:16:9a:88:c7:1f:9d:ab:01:6f:ca:
0e:26:41:86:76:c0:d2:19:c3:40:ee:49:d6:53:2a:b9:ca:d3:
4a:78:58:14:71:fd:c9:db:a8:fa:2c:65:32:bd:d6:f8:24:24:
c9:e3:e7:d0:e2:46:ca:2c:82:a7:c3:70:44:c8:c4:6e:2d:fd:
41:cb:5b:60:98:cf:d0:b4:0c:e2:0f:b8:4c:41:9b:09:ec:48:
ae:9f:e2:5c:26:c0:9d:28:ed:d8:23:09:e1:a2:9c:ba:3d:81:
85:20:20:3a:50:77:cd:db:6a:13:51:21:41:b3:d7:88:fe:b9:
df:af:cd:d4:63:06:db:49:e0:1a:c1:74:0c:6f:48:93:a9:4c:
c8:c1:7b:c8:26:3d:d8:94:fd:1e:73:f8:a9:20:c7:f9:ee:11:
ae:2c:f8:cb:d0:9b:b0:3f:61:5d:0c:d8:f0:39:ea:b0:16:0f:
f8:8e:d5:e1:8a:42:06:a3:76:f9:45:a1:18:74:9c:02:03:c3:
2f:31:98:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:35 2026 by rpki-client