Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
File: RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft (raw, json)
Hash identifier: 3qNTu+oIHODjsezrdeZucwtaDq5dNib1nICKHjSWGUo=
Subject key identifier: 20:6C:8A:82:33:57:6A:67:FF:06:CA:90:9C:09:4E:D6:32:F5:9E:70
Authority key identifier: 46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D
Certificate issuer: /CN=462767a7375f1ac546691aaf2a511fbb6277031d
Certificate serial: 019D32D12CBD55785A7E2F222D10C51DCA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
Manifest number: 010D
Signing time: Sat 28 Mar 2026 05:01:02 +0000
Manifest this update: Sat 28 Mar 2026 05:01:02 +0000
Manifest next update: Sun 29 Mar 2026 05:01:02 +0000
Files and hashes: 1: 0ppkgAkMVUZmtvxiis_JaRg_jKc.roa (hash: hmBjjzY/GLh0BaP+YN19dWeqC0F3ldt8pYexHB8bxW0=)
2: RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl (hash: Wz00g42QgHy/tUa3eoKGixTntLiZK2/wti6bDnrdpxQ=)
3: hvFmobLJgv_FtphUoy5jADPJJnc.roa (hash: jnuVvbpAgeJ1NUOXj3up5SgN82P8AgWr5+BqvtU3HaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:2c:bd:55:78:5a:7e:2f:22:2d:10:c5:1d:ca:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462767a7375f1ac546691aaf2a511fbb6277031d
Validity
Not Before: Mar 28 05:01:02 2026 GMT
Not After : Mar 29 05:01:02 2026 GMT
Subject: CN=206c8a8233576a67ff06ca909c094ed632f59e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:12:a7:dc:4e:13:81:1f:c4:ac:af:30:f8:18:
2c:c6:48:f6:97:8c:12:73:23:41:23:de:2e:a6:7d:
51:66:76:7b:da:ef:0c:aa:73:8e:be:47:cf:8a:69:
bd:b5:3d:0f:aa:5a:65:4c:60:3d:fa:2f:5b:d0:95:
3f:3a:7b:bc:73:c4:c4:ea:82:9f:7b:3f:b6:7c:98:
f3:27:9f:1a:29:d7:a0:5e:e4:4f:2a:3e:91:11:17:
7c:46:c8:cb:16:0d:83:1d:06:35:15:98:13:bd:0b:
d4:71:60:6a:ad:ba:06:08:5e:2d:ee:ef:b1:9a:3a:
f6:df:a5:22:97:b5:41:19:0d:2d:a4:51:df:88:5f:
57:02:21:5b:24:a4:2f:b9:48:e9:9a:a1:e0:49:09:
f0:bc:33:92:24:3f:bd:42:04:d2:47:5f:c4:27:ce:
b6:f0:18:76:59:55:b1:47:8c:60:e5:c0:d9:ce:95:
39:68:b8:f7:6b:81:95:e5:13:80:e6:01:2f:75:bf:
7d:47:17:6c:63:22:cf:f1:7b:77:f2:c6:ac:bb:60:
03:bc:c2:76:92:df:c9:c5:a0:2f:3e:74:dd:5d:d7:
44:fc:2a:e9:c1:90:fe:ff:ff:3c:ee:9d:2f:67:3b:
23:c7:e5:4c:0f:27:07:aa:f5:d2:a2:5d:71:66:21:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6C:8A:82:33:57:6A:67:FF:06:CA:90:9C:09:4E:D6:32:F5:9E:70
X509v3 Authority Key Identifier:
keyid:46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a6:c8:a2:85:33:88:62:5a:40:c0:1b:7a:d8:a2:30:b3:3b:
28:0a:7e:21:54:3f:40:67:15:d8:9f:9f:3b:9c:76:7c:3d:98:
bd:21:6c:c3:3a:03:96:82:19:63:1a:d7:b7:d6:95:fa:5c:95:
ca:94:34:27:b3:2c:43:78:a7:28:fd:f4:3a:50:1b:bc:b4:d6:
59:b6:38:06:6d:3e:4e:4a:c8:03:18:45:5d:54:e4:cd:27:cd:
76:a6:ad:a8:aa:cf:3c:26:e5:21:82:df:3b:37:7c:a0:e4:b5:
d3:6c:11:d4:f5:14:1f:8a:2f:22:b9:39:b4:c1:cb:11:8b:d1:
8b:c6:e3:fb:60:3f:c5:d6:f1:c7:95:77:f9:eb:02:43:ea:aa:
d6:7b:60:ea:d2:9c:11:29:6f:77:02:24:f9:b3:df:36:7d:64:
4d:d6:b0:0c:80:03:79:3d:e3:a0:c2:ad:43:4c:f7:bb:f5:b0:
be:3a:39:18:c0:17:aa:e2:26:b3:ab:f5:b0:fa:96:1c:23:e2:
f6:c0:e9:15:59:b0:e5:f7:cd:e2:d4:92:d0:7f:e6:a4:a0:e4:
f0:64:4b:5a:5e:63:af:b6:97:75:a7:40:a8:e7:d6:ca:ee:b2:
94:0c:d2:c4:9d:75:04:91:c6:03:cf:30:15:3c:fc:44:51:e6:
20:d9:8e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:01:12 2026 by rpki-client