Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
File: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft (raw, json)
Hash identifier: PozPEoZ1t9zvo/FaLOBGCtNb5p+8cjBDhIrsMjspWC0=
Subject key identifier: F4:FE:04:0A:B9:5F:8A:3E:73:BE:CA:DB:E3:3F:22:28:BB:70:C1:13
Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
Certificate issuer: /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Certificate serial: 019D371B55B91133D4854A2A0D5E8AFC06B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
Manifest number: 1160
Signing time: Sun 29 Mar 2026 01:00:31 +0000
Manifest this update: Sun 29 Mar 2026 01:00:31 +0000
Manifest next update: Mon 30 Mar 2026 01:00:31 +0000
Files and hashes: 1: O0WFOQ5F0adp9CIdcAP4Tkb9e78.roa (hash: 2t8GAUYJVh4IihKnWbix0KGV/ekdr74eFxI1zTcuA2c=)
2: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl (hash: O4FC+LnHtekjMruSHR7AO6GcugnnSa3BStBI9I7VHgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:55:b9:11:33:d4:85:4a:2a:0d:5e:8a:fc:06:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Validity
Not Before: Mar 29 01:00:31 2026 GMT
Not After : Mar 30 01:00:31 2026 GMT
Subject: CN=f4fe040ab95f8a3e73becadbe33f2228bb70c113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:54:24:d0:a7:84:17:da:e2:8d:86:cd:d9:
93:47:d6:fd:de:74:75:86:4f:d8:0c:3d:75:01:82:
03:60:b7:8d:5a:2f:6a:e3:78:3d:e7:85:07:d4:32:
82:10:b8:12:a4:8f:b8:57:84:df:13:c1:4a:a0:dd:
4c:be:65:92:e2:00:52:01:60:b6:f7:fd:cd:db:85:
48:1f:f8:50:14:f9:eb:55:a0:9b:b7:30:7f:5e:a9:
8f:ba:72:5e:98:1f:cf:32:28:31:e3:3e:d0:1d:04:
8a:89:67:1c:56:2a:8b:e1:57:07:32:f0:d9:09:74:
72:4d:40:a0:35:1e:21:25:bf:9a:0c:eb:e7:ef:71:
c4:04:5f:ad:58:5f:df:4b:f7:96:bf:0f:5c:83:e3:
42:ea:f9:1e:9b:81:00:87:a8:c9:0b:61:0e:0f:22:
59:8c:6e:98:5f:b7:df:0e:51:31:d3:f0:93:70:d3:
e4:5f:7b:ac:2b:4f:c1:2c:3c:0c:de:97:17:24:c3:
c2:d2:30:38:e3:45:13:1c:80:5b:7b:88:a6:c3:c8:
88:11:f3:2c:d6:d2:2b:4e:99:92:8c:f8:da:91:d0:
95:7d:d0:a2:87:df:80:8f:fc:19:23:b4:24:a5:9d:
6c:70:46:26:2e:fb:c0:f5:9e:69:9e:ff:93:44:69:
53:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FE:04:0A:B9:5F:8A:3E:73:BE:CA:DB:E3:3F:22:28:BB:70:C1:13
X509v3 Authority Key Identifier:
keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3a:71:1b:10:56:68:60:6f:e6:6c:2c:fd:05:5a:ad:58:ae:
c2:3c:23:2e:50:73:18:fb:75:fe:f0:2d:96:49:e5:83:e2:8b:
9b:ee:e8:95:97:64:24:87:87:fa:f9:70:42:9b:04:7e:24:5f:
3c:0c:45:90:10:48:12:0a:6b:a5:af:c1:28:60:6b:53:ba:9d:
48:d9:e8:67:a3:a6:29:d4:dc:2e:94:e5:7a:f9:69:e0:3a:8f:
77:64:6b:1a:cc:71:c1:e8:c0:67:17:3d:75:76:67:aa:c9:27:
1b:f8:b2:c7:14:f1:5b:a9:1a:ce:90:2a:e1:34:f5:81:8f:ee:
68:d8:85:ea:35:bc:a2:9c:5a:93:b5:88:81:47:d5:20:09:92:
68:db:e5:13:ff:7f:11:98:e6:a2:06:25:1d:64:7a:85:70:eb:
dc:2d:e9:a8:f0:58:8c:40:96:db:23:35:ad:8b:52:26:cb:2f:
9d:36:61:f8:54:e9:a7:a1:20:94:6e:3a:2e:5a:63:49:24:38:
b2:75:b8:b5:a5:ff:39:10:5a:11:ea:30:11:d9:67:08:36:6e:
22:37:a5:32:fb:f4:d0:a5:a8:88:62:41:e5:42:73:84:8a:a8:
6f:d4:50:4a:f6:bb:8a:8d:3a:fc:d7:6c:f8:31:4e:bf:0e:9f:
fa:70:6e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:08 2026 by rpki-client