Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
File: rfDfdxFHQeE6F9chPmlWv5YntVg.mft (raw, json)
Hash identifier: bgX6JS2GhYN0FnQW4cuwYK5UWa04BDaVKhA5lXDlIA8=
Subject key identifier: 7B:CA:8C:3E:D7:71:CD:6E:7D:55:3B:01:52:3B:E1:F8:57:84:A9:61
Authority key identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
Certificate issuer: /CN=adf0df77114741e13a17d7213e6956bf9627b558
Certificate serial: 019D378974ED4CFCBABB537D3272410C3335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
Manifest number: 1743
Signing time: Sun 29 Mar 2026 03:00:48 +0000
Manifest this update: Sun 29 Mar 2026 03:00:48 +0000
Manifest next update: Mon 30 Mar 2026 03:00:48 +0000
Files and hashes: 1: 8eYijGU89HKkHPl1vQkVznR2YWI.roa (hash: GVKbdEH+zbWNIRI6lkz6XipadG7YSN2rD9CEidAiQUs=)
2: rfDfdxFHQeE6F9chPmlWv5YntVg.crl (hash: zD7l/AgZuFGMH1JKXDCUaoYliOtIRfcSSbX5mlyW2+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:74:ed:4c:fc:ba:bb:53:7d:32:72:41:0c:33:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf0df77114741e13a17d7213e6956bf9627b558
Validity
Not Before: Mar 29 03:00:48 2026 GMT
Not After : Mar 30 03:00:48 2026 GMT
Subject: CN=7bca8c3ed771cd6e7d553b01523be1f85784a961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:7f:f5:6d:b0:65:58:cb:c9:30:50:f3:6c:
6c:02:cc:cd:0c:88:23:80:31:df:c2:b5:2f:82:d5:
f0:38:03:9d:cc:5b:cb:a1:62:ad:59:09:bb:90:5a:
27:81:e0:5c:79:ba:93:8c:43:6f:96:00:29:00:b1:
cd:a7:5d:59:c2:4a:ba:78:ae:69:4c:85:2c:e8:0b:
19:98:78:1c:ab:a1:d4:83:1f:9c:c6:c4:54:05:be:
6c:f8:cf:50:d8:91:b9:61:91:20:17:79:66:9b:72:
a1:0b:09:aa:a3:fe:00:55:c2:ae:ba:26:8f:82:e1:
c1:79:67:82:68:25:10:ce:e6:75:aa:99:d3:6a:4e:
1f:ba:c9:6a:81:9f:cf:48:cc:b5:19:35:f0:ea:54:
19:22:ca:1e:15:2d:b5:2a:d0:76:9f:75:fa:8f:ea:
66:12:f1:a3:e4:ef:f2:1f:fc:fe:90:b6:7d:58:e6:
5d:c3:57:bd:93:36:ea:42:1d:3f:a9:86:db:ed:9a:
79:dc:b1:12:49:7c:03:c9:fd:cd:ca:72:3d:79:8e:
72:00:6b:ed:ba:3c:63:f9:1e:ce:4f:ba:84:43:18:
61:fd:38:31:09:a3:33:b5:a8:ba:76:1b:a5:7a:4f:
33:2e:8f:3c:49:6a:e6:80:c0:d4:e5:68:ea:12:85:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CA:8C:3E:D7:71:CD:6E:7D:55:3B:01:52:3B:E1:F8:57:84:A9:61
X509v3 Authority Key Identifier:
keyid:AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8c:ac:63:20:b7:20:c8:79:8e:3e:ed:07:35:c7:c4:83:42:
06:a2:a6:0a:c3:ff:17:79:01:3e:60:1d:d1:cc:a2:06:12:00:
59:92:a9:c0:e2:dc:a6:9c:05:8c:55:05:f9:1f:30:80:41:b2:
a8:07:16:72:40:c8:d4:38:16:ea:8e:82:1f:d6:67:d0:59:20:
02:1c:5a:0b:d0:87:c1:87:4d:ea:68:d3:2f:2a:1f:2a:2b:11:
e4:2a:dd:91:fd:95:55:3a:b3:8b:ff:07:39:c9:ee:3e:26:04:
d1:2e:9b:5f:7a:01:b6:57:f6:7d:be:bd:1c:d4:03:03:1a:f7:
05:b9:c2:89:4f:85:84:d6:88:d7:0b:35:f7:c2:94:59:cf:79:
b6:4a:6c:7c:dc:72:28:24:a4:77:28:42:e1:2c:a5:0e:21:c3:
43:e7:01:3f:04:3d:fe:ba:a9:b0:ab:31:89:e4:b4:f0:4f:b2:
6a:b6:67:ac:31:f8:de:26:f0:87:ef:11:01:e1:c5:96:e1:13:
6c:db:82:46:02:a7:20:89:10:25:bc:f1:1a:4f:e2:ca:5c:38:
7d:a8:83:04:02:ad:b6:ee:2b:52:4c:d2:21:c6:49:1e:b2:af:
d9:fa:f6:85:5c:6f:5b:65:da:5e:56:94:ae:85:fd:99:bd:d8:
88:32:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:59 2026 by rpki-client