Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: cPNIDPsXQ1Guglaxij9vkq93pNHWhGYGwhfy+jG1xOY=
Subject key identifier: 6B:0D:AD:C1:C3:62:AF:95:67:15:24:BE:C1:4E:FA:58:64:DF:A4:BD
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 019D3909D3D0F919DC0B3C3B88B8F853E967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 069E
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: 80qBnu2XnhFRiBmZiF038oU110Q.roa (hash: LIRyJNKQ/3u7PO7ipf6wdyHbe0bKIPQwJsid3/CO5Lg=)
2: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: 4X4Bsxg/VCfqyFiH+bvJibU2U8NOVppxAUH/KctotRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d3:d0:f9:19:dc:0b:3c:3b:88:b8:f8:53:e9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=6b0dadc1c362af95671524bec14efa5864dfa4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3c:01:a0:8f:0d:e6:a6:bb:01:25:c9:92:90:
94:92:bd:59:57:a7:af:69:9a:a0:b1:52:e4:ab:a2:
ad:00:33:ba:2f:85:1d:39:02:49:a3:82:e1:7e:a7:
08:92:1b:a6:dc:e7:29:b8:a3:74:ae:fb:f9:b5:18:
a3:67:7e:2a:60:54:13:0a:88:54:01:f3:4e:4a:d9:
bc:23:e3:d6:83:d4:ae:23:1c:c9:89:6d:0a:db:9a:
7a:1c:bc:05:9a:ad:e4:1b:d7:c7:62:98:5e:03:33:
35:37:b9:3f:7c:8a:22:2d:14:6a:f7:63:38:38:b8:
59:f0:e8:d2:de:b6:96:14:c7:73:78:e9:8d:e2:e4:
bf:49:3d:e0:72:89:58:28:fa:86:f3:19:6c:bc:de:
1a:37:f7:c8:0a:92:b3:96:02:07:4a:58:16:8b:64:
23:ef:2f:a4:a9:df:a9:90:48:b7:a6:88:10:ad:e1:
27:15:5a:5d:98:5f:6c:3b:ad:a9:cd:11:e5:cd:e8:
56:89:9e:88:a0:00:b5:96:d4:cb:47:57:d3:68:79:
a4:7f:38:28:31:07:b4:28:a2:e8:e4:11:f2:3e:22:
dc:ef:88:4c:29:e3:cf:2a:13:c6:78:e1:3e:54:37:
36:d5:a3:b9:55:e3:97:5d:a1:a8:98:95:59:e0:fc:
02:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0D:AD:C1:C3:62:AF:95:67:15:24:BE:C1:4E:FA:58:64:DF:A4:BD
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:27:91:1f:e9:e6:51:87:00:4e:87:4e:52:3c:a9:91:12:f1:
f3:70:64:6e:39:62:9b:c9:b0:a1:19:a0:f6:0c:0a:6b:9d:06:
bc:d1:ff:6c:26:8a:17:eb:db:ca:5b:80:22:49:3e:f4:4d:04:
55:bb:b0:b8:60:27:24:4a:a5:21:64:c1:d5:47:ef:de:c9:82:
c5:8c:44:4a:51:f6:b1:16:66:55:89:5d:1f:79:a0:0a:71:27:
bf:64:78:48:43:07:3d:fb:fd:2f:8f:a6:1e:b1:5a:cb:81:b4:
33:f9:e3:4c:31:e6:60:4f:8e:ef:67:96:89:06:ae:6a:be:3c:
88:bc:25:af:4d:bf:67:60:0d:14:ea:5d:0e:67:2b:03:1d:a6:
42:8b:50:8b:1b:a7:a9:28:4d:38:5c:6d:70:52:65:50:66:78:
32:16:18:45:17:f8:1a:03:f8:41:f5:63:5a:31:e4:61:72:ea:
eb:49:d4:b4:8d:d1:7a:a3:85:6d:ce:6f:9f:cd:2b:d3:30:b0:
8d:4b:20:f6:cb:06:0a:34:9f:d3:63:1f:93:04:5f:f7:5b:e1:
86:fd:73:73:22:b5:cb:9d:8b:3e:31:16:f0:57:01:a0:8e:80:
d3:86:cd:fb:b7:c9:b5:5f:8f:8f:b8:08:27:e9:52:75:5c:38:
b9:e2:37:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:10 2026 by rpki-client