Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
File: d_u84sIID4H1oPmPJ5Ipgm3khQs.mft (raw, json)
Hash identifier: ieobGePtaakbWhAWUy3elub+vQWUdFEiBLcWqrwBSKw=
Subject key identifier: CA:CC:F0:F2:0C:8F:A5:81:83:4C:BC:BF:A0:BB:28:B7:46:39:8A:10
Authority key identifier: 77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
Certificate issuer: /CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Certificate serial: 019D37893418D1F2301F53221F60739B005C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
Manifest number: 0FB4
Signing time: Sun 29 Mar 2026 03:00:31 +0000
Manifest this update: Sun 29 Mar 2026 03:00:31 +0000
Manifest next update: Mon 30 Mar 2026 03:00:31 +0000
Files and hashes: 1: 3lFiJAi9xcyPhHbde0XIskVsgIs.roa (hash: qs21NuisUl0QxWCvF+rTCWm7FC1OO83XG3sDyW4a0mM=)
2: d_u84sIID4H1oPmPJ5Ipgm3khQs.crl (hash: dguJh/jMJpx4r7s7rKdn95AIowCUPswygRU1OWoU0PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:34:18:d1:f2:30:1f:53:22:1f:60:73:9b:00:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Validity
Not Before: Mar 29 03:00:31 2026 GMT
Not After : Mar 30 03:00:31 2026 GMT
Subject: CN=caccf0f20c8fa581834cbcbfa0bb28b746398a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:08:e8:6d:a0:97:d3:28:40:a4:7d:9f:04:
18:81:a6:8c:05:de:dc:cb:9a:fe:45:d2:b7:43:17:
4c:e1:f1:40:a6:4b:78:46:28:17:33:76:1f:d0:ba:
a1:f8:d8:e5:ad:48:ff:3a:81:e3:2a:40:6c:aa:a1:
e6:8a:06:f8:e5:da:08:5f:de:d5:e7:3e:5a:dc:08:
f4:0b:f6:3c:09:e3:4e:98:cc:b9:bb:24:1b:78:5b:
b3:df:6f:94:a6:47:91:4c:69:b2:81:c3:67:8e:fd:
5b:ec:2f:30:ce:71:ef:b7:a9:0c:9e:ea:8a:d9:3c:
eb:88:e4:d2:97:63:66:3f:9e:06:56:59:5e:47:d5:
60:b2:11:c3:ee:6f:ca:8a:c0:5e:c9:2f:0c:ef:3d:
b3:21:60:fe:2f:13:e3:05:82:72:63:ba:f7:02:c6:
c0:7b:a6:12:5a:56:51:4b:db:c3:fd:be:fb:d4:c3:
02:a7:f7:b7:14:df:e0:8a:ed:66:94:d1:2b:b9:cc:
9c:d4:02:b6:53:bb:0c:e6:b2:79:fe:3e:c6:47:d5:
84:d9:91:1b:50:91:62:db:3d:57:07:9d:b3:55:ab:
c2:3e:b7:ad:26:32:e7:7c:4c:42:f5:c1:d3:b9:0a:
2f:df:14:43:4f:e6:02:73:1a:57:49:9b:c4:f9:bf:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CC:F0:F2:0C:8F:A5:81:83:4C:BC:BF:A0:BB:28:B7:46:39:8A:10
X509v3 Authority Key Identifier:
keyid:77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:20:b2:07:0f:9c:31:57:37:75:90:04:07:9d:a0:bf:45:00:
3f:3c:73:5f:a8:65:54:4b:eb:0d:5a:15:13:36:c0:a6:3e:44:
e3:3a:2f:cc:26:04:07:2a:23:3d:db:f2:09:cf:d0:95:d2:d8:
86:e1:56:7e:97:d4:81:d5:87:66:f4:18:a5:9b:e5:ef:3c:e3:
04:f1:07:01:2b:44:80:07:dd:08:60:6e:e2:10:16:3f:ee:b4:
b0:f4:2c:1d:e8:52:7f:c4:9e:96:11:56:b6:1c:50:f2:61:29:
70:ea:9d:c3:c5:a1:e7:29:78:7b:60:7b:6f:57:c1:8f:01:e3:
8f:65:4b:b4:e4:db:41:fe:63:76:03:f2:9a:e9:c3:fa:83:ed:
f7:f9:1b:b9:16:5c:9d:60:40:0e:51:f3:4f:28:64:ee:6c:a9:
dc:93:eb:87:0b:35:f1:30:ec:f7:cb:3b:b0:2e:70:e5:d5:1c:
3c:df:71:72:60:ac:92:04:c8:c3:b9:d1:2b:2a:15:fd:8b:bf:
18:d6:00:8c:b3:26:78:28:2a:8b:5c:59:ca:2e:a8:e4:99:f0:
5c:c3:85:2c:16:22:56:07:79:43:0b:b3:19:14:0b:25:2f:bc:
fe:cf:34:0f:58:c9:85:85:13:b3:5f:98:53:6e:67:ae:5d:fa:
aa:0a:f2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:15 2026 by rpki-client