Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
File: da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json)
Hash identifier: 4/bqObNRS+2VxLcgrULsxUxrEisWEjEqalNfQoXLP5M=
Subject key identifier: 8F:2F:B9:DA:5F:08:8E:A9:79:5C:E0:1F:84:D0:46:CE:A5:85:D2:0B
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial: 019D3A1C7C234726DF902785215E481449FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
Manifest number: 117A
Signing time: Sun 29 Mar 2026 15:00:38 +0000
Manifest this update: Sun 29 Mar 2026 15:00:38 +0000
Manifest next update: Mon 30 Mar 2026 15:00:38 +0000
Files and hashes: 1: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: 2d4YC2SQlfd3ynBvasLURiwfG3DwBY2DiIPyGThqDCA=)
2: oGvgPtzFT-aTFQ_B85J22DwDAck.roa (hash: 6nOejPxS/rpc0rhO5giVJoyCV3cG0CBp7/FNYjbRlys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:7c:23:47:26:df:90:27:85:21:5e:48:14:49:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Validity
Not Before: Mar 29 15:00:38 2026 GMT
Not After : Mar 30 15:00:38 2026 GMT
Subject: CN=8f2fb9da5f088ea9795ce01f84d046cea585d20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:63:42:fc:cf:f2:30:66:4a:77:dc:05:05:
d3:73:47:48:50:1f:e7:75:2a:35:63:20:81:6a:7b:
f8:88:6a:db:c4:ef:0d:22:cf:27:55:2c:a5:e3:5c:
d1:88:62:a8:1b:ff:91:f1:8a:58:09:45:eb:af:60:
ba:26:64:5d:17:45:37:50:f2:5e:17:d7:55:37:59:
95:21:ec:b4:bb:8c:68:cc:65:0a:f5:58:88:a0:0d:
e5:cd:2f:6d:a0:66:b1:65:8c:1f:04:93:cc:f5:67:
b8:e6:c4:5e:18:3f:5d:2d:f3:46:f9:37:da:30:8f:
7d:62:07:4a:bc:bb:73:fc:73:ce:58:d7:78:77:73:
e0:45:41:c2:12:6f:1f:a6:59:b0:2b:9c:7a:4a:80:
bd:ff:f2:28:e7:5f:fe:de:05:95:45:29:41:82:56:
f6:a0:59:33:65:3a:2a:c6:5d:8a:28:eb:42:04:22:
89:a4:67:9e:e1:7f:66:88:a4:c3:72:61:db:e0:76:
06:8b:54:bf:fe:41:ba:e8:ac:98:21:69:75:d5:ea:
4e:31:22:0b:ca:e1:11:75:84:7c:52:f8:b0:44:b8:
7b:3b:00:cf:b0:f7:51:40:f0:73:e6:06:c0:80:2b:
36:bf:d1:d9:f0:b6:df:e7:21:9f:bf:79:b8:44:3b:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2F:B9:DA:5F:08:8E:A9:79:5C:E0:1F:84:D0:46:CE:A5:85:D2:0B
X509v3 Authority Key Identifier:
keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:27:e6:b5:ef:92:3a:d8:0c:f9:52:74:fe:5e:c9:45:e1:77:
51:1c:f9:89:6e:72:6a:16:ff:ab:3f:35:00:61:a1:3f:5b:eb:
2b:1c:43:61:23:4c:db:df:c2:be:c9:06:bd:85:88:e1:a3:dc:
bf:dd:a2:ae:45:3f:b0:1c:5e:42:4d:06:89:d0:f0:e9:b6:27:
30:6c:ee:67:8f:64:62:ab:ec:8d:0e:13:6e:da:8d:c9:88:1f:
ed:d0:07:2b:6e:cc:5f:5f:fc:d7:a4:1a:82:4e:e3:89:68:e0:
5b:d2:b1:6a:fb:b5:e4:14:80:ed:5e:59:f1:3b:0a:dc:b4:3b:
78:18:63:c0:e9:13:36:6b:dd:5c:fd:2c:8e:cd:8a:90:36:0b:
a7:98:c3:38:f8:3a:26:c2:4e:0e:4c:03:9e:e9:68:a4:df:7d:
e6:25:e1:b3:58:43:67:f0:c5:45:76:16:b4:f1:fb:b9:1d:d0:
8e:93:1b:2e:1c:6b:58:23:9f:05:9d:0a:3a:4f:0a:f9:d4:a4:
06:cf:09:f9:b2:1c:4c:e8:76:da:c8:cc:50:55:5f:72:f3:dc:
24:06:90:af:99:88:6e:50:fa:ca:05:97:a0:ad:5d:b8:11:c8:
bc:a1:d8:30:64:dc:68:8b:d6:a4:64:ef:0d:e1:c7:97:1d:f8:
d2:78:1e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:33 2026 by rpki-client