Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.mft (raw, json)
Hash identifier: ZZPRr2sm1Upifw7Ea1RasS8N+0knolo3Hi8S3cUPUHg=
Subject key identifier: 2F:49:B6:FF:63:86:C3:63:4F:7C:31:25:31:FF:AC:82:DD:CC:AC:1D
Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Certificate serial: 019D37C0559C72A96A5D2FB9EA5BDCEF8F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
Manifest number: 0467
Signing time: Sun 29 Mar 2026 04:00:44 +0000
Manifest this update: Sun 29 Mar 2026 04:00:44 +0000
Manifest next update: Mon 30 Mar 2026 04:00:44 +0000
Files and hashes: 1: 0_-XSe4i8Akle4nYNAzGT7QL_JE.crl (hash: FAXh01tHKNkW/DLrZMhq6m5JqRjUSFjkKs76xJzj6TY=)
2: DJdhUMC3KGFFZZ5lCKkYIdqzjBM.roa (hash: X7w8hr+E7n1YVto9nQ09eEPyzlLrAcr5q43Gop780I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:55:9c:72:a9:6a:5d:2f:b9:ea:5b:dc:ef:8f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Validity
Not Before: Mar 29 04:00:44 2026 GMT
Not After : Mar 30 04:00:44 2026 GMT
Subject: CN=2f49b6ff6386c3634f7c312531ffac82ddccac1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:17:d6:54:1f:aa:79:89:d0:d1:16:68:7f:
91:6d:16:af:60:58:25:65:4a:9c:5f:85:3c:d6:f3:
02:5d:66:8a:6d:06:3a:ab:c3:26:a7:1a:2d:32:e2:
58:18:0e:cb:7c:ad:8a:df:e7:cc:fc:bd:d8:0a:91:
92:e4:16:07:dc:ca:82:9e:46:b0:dc:ae:63:c6:1f:
f6:51:b5:ff:a7:61:51:dd:3f:75:a5:c7:07:98:08:
87:4f:d3:30:55:f5:20:68:57:31:6f:79:8a:b7:04:
87:65:dc:48:0e:d2:c2:06:55:7a:81:5c:88:80:3f:
1e:97:e3:d2:02:99:14:0a:ee:e4:23:32:2d:a4:37:
0e:3c:2a:57:fe:da:68:f8:48:67:52:eb:53:20:d1:
73:d2:60:ba:74:59:f7:9e:2d:d6:b1:d2:64:54:b1:
74:f9:7b:0f:3c:bc:33:a4:52:dd:b9:83:5f:76:85:
ef:a4:b8:2a:c6:08:1f:e2:18:47:2e:35:0f:ab:d9:
f3:12:ef:e1:be:43:0d:44:9e:bb:8c:60:3e:e0:1b:
5a:0d:f6:4f:9e:ac:de:ca:81:5b:7a:43:db:4a:f1:
de:a2:c5:97:f9:a9:23:a2:23:9a:fa:d7:97:4e:1f:
d9:79:23:31:fa:2b:b9:31:5d:52:ba:bd:45:ef:e5:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:49:B6:FF:63:86:C3:63:4F:7C:31:25:31:FF:AC:82:DD:CC:AC:1D
X509v3 Authority Key Identifier:
keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ea:04:59:d3:d0:e6:d8:30:25:ba:16:71:9b:36:e2:91:18:
dc:57:b7:91:95:3e:45:93:96:46:75:75:8d:86:97:32:10:75:
00:9c:2b:5b:c0:08:50:73:6d:e4:20:1f:5b:8b:a4:22:f0:bf:
c9:9a:f7:49:e0:45:72:1c:c3:14:1c:6c:85:72:d2:88:c7:09:
e3:af:87:28:8b:18:5e:e9:f7:0b:b5:40:fe:27:22:e0:19:98:
69:b5:d1:6c:b2:f6:cb:f9:40:21:89:3e:3b:b0:dc:38:cb:2c:
53:6e:01:67:bf:90:cd:4d:d6:2b:b5:6b:d8:82:bf:ea:0c:c5:
39:60:42:55:1b:b8:36:5c:0a:10:3b:9a:37:ee:34:17:4c:90:
ee:55:13:3f:db:18:94:62:69:65:e2:3d:43:a1:62:3f:a0:63:
63:fe:1d:1c:ad:c1:ce:3c:6a:dc:85:b9:4c:16:3d:24:a0:9c:
7c:2e:a8:88:14:63:86:d3:64:32:93:cf:b9:93:27:46:51:05:
f5:41:b1:39:90:1d:50:d0:3e:75:d8:e7:c0:1e:e1:a6:33:7d:
47:b9:0a:bc:c5:51:25:b3:5a:01:5f:d9:f8:03:ff:b4:55:74:
72:2b:bc:b5:56:4e:47:85:91:8a:bd:b0:1e:fc:cc:2f:a9:51:
4f:bb:ed:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:42 2026 by rpki-client