Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: 26mA1YtWWCznOnLdjo91PtvbULJl7gR90dmKYRz3PXo=
Subject key identifier: B9:26:2E:42:20:49:EB:12:75:5A:6C:D8:7C:AF:B7:AC:56:80:E0:AE
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 019D37C0BE40E1A2CCE08A17E951E3BC5DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 16B2
Signing time: Sun 29 Mar 2026 04:01:11 +0000
Manifest this update: Sun 29 Mar 2026 04:01:11 +0000
Manifest next update: Mon 30 Mar 2026 04:01:11 +0000
Files and hashes: 1: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: 3s6aqRteRLDnmSa/D41f6T32eTASdsN2yliVja8rDCg=)
2: dOFQf5AeWGROir3bR0l9oDiF_LY.roa (hash: NCU9gdpQPYAW35UhF4+gLu5Dhpwg+184qJ8TDUdFqxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:be:40:e1:a2:cc:e0:8a:17:e9:51:e3:bc:5d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Mar 29 04:01:11 2026 GMT
Not After : Mar 30 04:01:11 2026 GMT
Subject: CN=b9262e422049eb12755a6cd87cafb7ac5680e0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:d2:42:92:da:9b:0f:79:e6:58:5e:f4:a5:
9f:26:fe:2d:02:8f:58:b8:82:69:60:ef:0e:9d:dd:
a3:d3:ab:23:86:0f:fd:c1:78:1a:f9:e3:7e:90:af:
f9:d4:c7:60:22:5d:8d:41:26:79:49:12:8d:7a:d9:
16:28:c1:ea:77:04:b8:36:d8:02:78:74:71:7b:e4:
45:90:e2:84:b1:e4:ca:2c:fd:5e:9f:06:31:31:df:
7e:49:95:35:01:05:ab:44:2a:34:f8:c8:e2:ba:2f:
c7:ae:d6:b0:19:4c:db:53:41:6a:ae:26:a6:3f:5c:
d9:79:35:0f:66:a6:0d:4e:9e:c8:d2:03:7b:9f:5e:
05:1e:16:99:d0:88:35:50:8a:cd:37:46:5a:39:88:
07:59:8e:c1:ed:cf:64:af:f6:51:3f:1d:13:b9:f8:
ef:4e:34:32:b5:23:34:e1:62:19:b2:66:a1:3f:5b:
53:e4:64:40:84:81:d2:b9:78:b9:22:4b:19:6c:d2:
3b:be:5c:39:68:45:2c:64:be:a8:4a:f0:51:36:ed:
fe:34:c1:d9:b4:03:31:87:11:ca:aa:f8:ba:25:d1:
38:0c:ee:ce:b6:03:95:f2:30:8d:46:40:de:ea:a3:
f4:71:6f:e9:42:0b:b8:e6:13:21:a3:66:64:c6:68:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:26:2E:42:20:49:EB:12:75:5A:6C:D8:7C:AF:B7:AC:56:80:E0:AE
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:22:b8:c0:01:d7:1f:6a:3d:1a:e1:2a:b7:f5:1b:e6:80:0f:
81:43:88:b1:37:62:cd:2e:94:00:3a:b6:61:7c:af:0e:c2:0b:
2e:7e:e2:93:0e:58:d5:6a:dc:fb:c9:63:95:2c:7a:fa:35:17:
20:ac:2c:f7:45:71:4a:24:66:1e:c9:d0:4e:12:e0:ea:af:1e:
1b:a6:e4:d7:51:3c:66:29:f7:a0:2e:6e:c7:94:ad:b1:66:53:
43:c1:36:39:44:f8:5a:3e:49:f3:6d:39:0b:9a:7e:5f:87:d3:
15:91:88:ee:9a:54:10:6e:49:2f:cc:c3:b7:dc:a5:37:db:62:
a8:93:58:7d:06:74:9f:6c:17:70:74:18:3d:46:ca:79:bd:9e:
60:2d:fe:9e:bc:23:74:5d:52:30:a9:c5:d9:1f:e8:86:4f:bd:
b6:4a:f9:9a:33:91:48:ec:11:30:cb:21:92:3a:ba:c0:e8:56:
ad:e3:71:90:e1:0e:02:6c:32:97:8d:15:d2:80:c1:ec:07:65:
ea:a0:ff:8d:ca:12:c6:28:05:20:3a:69:d3:34:36:60:b9:dc:
8d:42:ce:51:4c:87:3b:69:1f:0a:c4:17:0d:09:7d:63:56:f5:
7c:5a:ca:88:f1:41:30:44:73:90:77:42:eb:c7:d5:67:15:5c:
e5:d0:88:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:35 2026 by rpki-client