Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json)
Hash identifier: MvJ2If6dygtYvj7xHazTy1fwZkH04DkNmCsHxDxXNZk=
Subject key identifier: 70:2E:5B:E8:0D:30:28:BA:B2:EB:F4:D0:2D:16:49:82:49:9E:4E:22
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 019D153432B6480434EB18DE1F59068EFBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
Manifest number: 189D
Signing time: Sun 22 Mar 2026 11:00:35 +0000
Manifest this update: Sun 22 Mar 2026 11:00:35 +0000
Manifest next update: Mon 23 Mar 2026 11:00:35 +0000
Files and hashes: 1: 2um_rS6WPk2IN6s5x2XbXkQen_M.roa (hash: B3h5JybIRNgVZgqeJwphCEgik9Z267VqHxwbsqTyFKg=)
2: 8f-eDRc6_FXPO45wpxV1xiQ1HAI.roa (hash: qCD4Jc/TwmM8SzWErouUslVtMstyIPcxvXJzTBG565w=)
3: AQlhfGVcA8R2Bwt2uq11a9BJ3I8.roa (hash: ZpJgowIRgidE/63sx4+7oMD9312HUQ//RvFSY5dDQVE=)
4: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: JfJrf3T1mLRNYZvU8nWp76xzv/Mc+XI/uQJiF/GV7tM=)
5: NRE_ExP25AUx8aw3isiH4EnLbWo.roa (hash: SKLRbqjSGl9WDWUOA+lP72kkE1542Czk3hD2WUZlOgE=)
6: WLsy-DnnYnQhVtIJoLpzduDgWrE.roa (hash: V18CJCRRVUNGPvZK+aRf70kDiLaxF9fIzOBbbor2Dw4=)
7: b1zJ7NbuL57-e0rkevnmNIo0USU.roa (hash: 6oXQKWkeIUo+oie2lp60DcRhSM6jyLL6Sog8QbpX/bA=)
8: mWfbcxQdC8J-VBP4j7EBWfW3Qb4.roa (hash: osYbMfspLkdv49SbR62yA1rUcvBEuqW1/Mq+AH8uZCU=)
9: pcZnUT88SN1u2R3xPf6LVW5AwuQ.roa (hash: ZB/G3ZNzs5uxcuPvRWlbNalCCRVbwpgrXGxyYOGJMA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:15:34:32:b6:48:04:34:eb:18:de:1f:59:06:8e:fb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Mar 22 11:00:35 2026 GMT
Not After : Mar 23 11:00:35 2026 GMT
Subject: CN=702e5be80d3028bab2ebf4d02d164982499e4e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:88:0a:45:f2:50:15:0b:5b:e2:9c:b2:91:9f:
62:4d:91:5b:bf:4a:91:2e:ff:75:c1:33:07:ae:4b:
42:aa:58:b2:d9:b4:a9:96:d6:a2:96:c0:64:0d:89:
b7:ea:c4:0f:2b:51:52:1b:89:34:b2:32:41:36:12:
87:77:8b:85:a6:ff:32:31:19:42:ca:d0:bc:a7:42:
84:db:23:1e:42:38:8b:1e:0a:0b:2b:52:08:f5:fb:
24:db:aa:3d:e1:73:48:19:65:46:55:0b:b6:4d:f6:
09:e6:e8:9e:ab:2c:dc:76:d1:6e:0d:bc:ce:39:0f:
7b:f1:86:4a:b4:71:c4:b6:ae:ad:cf:4b:f0:d0:9e:
c0:17:da:9a:49:70:7d:0e:cc:31:66:06:a0:5f:21:
74:22:7f:cf:5b:d4:3a:23:06:ff:0f:21:7f:18:2a:
79:2d:bb:fb:e1:60:a4:ae:cc:dd:4f:47:43:61:ba:
3f:8a:bc:79:74:43:8e:37:61:01:37:f2:74:c0:4f:
97:b2:fd:30:1b:e9:a6:e1:37:0d:c2:64:6f:e4:f8:
69:d7:05:83:b1:10:6f:29:57:50:17:7e:fd:43:b0:
8b:19:02:1a:8e:03:e8:20:3c:2b:c6:5a:01:f2:08:
77:9b:25:9d:4f:19:60:d3:a8:90:fd:b9:a1:69:88:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2E:5B:E8:0D:30:28:BA:B2:EB:F4:D0:2D:16:49:82:49:9E:4E:22
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ee:ff:a8:c5:8b:a0:aa:06:0d:09:6c:70:23:07:4a:f8:f3:
cd:b3:21:b6:e6:6b:76:95:aa:c6:51:05:bf:69:07:d6:21:21:
81:80:2c:01:e3:e6:aa:f1:fb:df:f9:19:58:60:75:e4:85:d0:
a7:91:09:6c:7f:97:d3:d7:16:7d:d9:8e:a4:35:3c:be:db:7f:
db:41:e9:84:df:59:f7:cb:ff:11:24:89:44:e5:0f:a2:f1:99:
23:b0:6e:e6:b5:60:88:56:68:29:e1:c3:3b:70:e5:d5:cd:36:
af:51:e5:44:2a:65:4a:8b:ee:01:a4:c9:77:d3:47:e9:d1:5d:
11:14:9e:d1:6d:8f:f6:7d:97:0a:7a:31:b6:3e:95:08:5b:1a:
06:22:98:28:1d:d0:af:69:1a:17:8f:3e:1c:1c:0b:ec:f0:1e:
e7:a5:30:d3:a5:b6:bb:2f:40:62:e7:8d:56:5c:86:65:58:52:
c3:13:1e:5e:34:25:4f:97:b3:41:1e:a3:27:32:23:bc:c2:29:
01:84:f3:fe:fc:42:18:fd:9c:e5:2c:32:ff:23:55:26:ad:83:
da:00:7e:2b:95:4c:10:78:67:9b:ae:44:1f:72:42:c6:e8:eb:
ea:05:55:ca:dc:ad:5c:f2:69:98:bb:09:1a:a6:7e:35:8f:45:
9b:27:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 16:56:17 2026 by rpki-client