Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
File: d6ssFiF5lXMJnEAq6R_8V5ada5s.mft (raw, json)
Hash identifier: cBLu6tHRcuamLgrS/aBHsHFSscEN+Xj3b4wSCa/pHwY=
Subject key identifier: 75:17:35:BD:7C:E3:6B:96:34:28:3B:4C:40:5E:47:E4:3B:42:F5:7E
Authority key identifier: 77:AB:2C:16:21:79:95:73:09:9C:40:2A:E9:1F:FC:57:96:9D:6B:9B
Certificate issuer: /CN=77ab2c1621799573099c402ae91ffc57969d6b9b
Certificate serial: 019D389BA6871252831F6399435062A4D2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
Manifest number: 024B
Signing time: Sun 29 Mar 2026 08:00:17 +0000
Manifest this update: Sun 29 Mar 2026 08:00:17 +0000
Manifest next update: Mon 30 Mar 2026 08:00:17 +0000
Files and hashes: 1: d6ssFiF5lXMJnEAq6R_8V5ada5s.crl (hash: eIHuYmhLv63aCP0QKIEG/TNaaQXh1gH5rFIZQXOwwsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a6:87:12:52:83:1f:63:99:43:50:62:a4:d2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77ab2c1621799573099c402ae91ffc57969d6b9b
Validity
Not Before: Mar 29 08:00:17 2026 GMT
Not After : Mar 30 08:00:17 2026 GMT
Subject: CN=751735bd7ce36b9634283b4c405e47e43b42f57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:f5:46:80:7c:4d:79:b8:c6:6f:f3:cf:74:
2f:41:43:4b:56:07:95:f6:d6:01:a5:72:c8:b4:23:
ee:b2:ee:b7:eb:c6:18:fc:6a:0f:11:1e:fd:32:51:
1d:c9:3d:ec:f3:7d:de:14:14:dd:29:51:94:5c:43:
db:57:6e:9b:d4:e9:55:63:77:31:02:ba:f1:af:6f:
83:3a:32:d2:3a:6a:a7:9f:a0:77:91:c2:bd:a3:bc:
87:09:6e:ed:ca:ce:6d:c5:1f:c7:9e:d1:a9:62:19:
2a:10:4c:f4:67:8a:91:04:6f:5a:cc:fb:a6:08:a1:
5c:f8:53:c1:07:64:08:ae:6d:ac:e7:29:ed:10:63:
0f:be:86:a9:93:07:18:1c:58:6d:5c:5e:0f:37:bd:
ea:a9:a0:05:fb:65:b6:82:73:7a:c0:ca:4d:9b:70:
26:09:da:b0:38:57:6c:33:6a:d6:38:0e:74:64:b2:
ad:38:c6:50:ff:b8:ce:48:cc:88:38:cc:72:22:a2:
69:73:44:ea:0e:60:13:fa:e0:79:40:74:67:4d:1d:
59:1b:40:14:34:93:d0:3f:b5:29:a3:ce:1b:23:bc:
4b:84:8f:7b:aa:c9:fe:f2:f1:1f:16:69:01:90:28:
ed:67:5e:f7:56:79:b2:4f:2f:52:93:21:a8:2e:eb:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:17:35:BD:7C:E3:6B:96:34:28:3B:4C:40:5E:47:E4:3B:42:F5:7E
X509v3 Authority Key Identifier:
keyid:77:AB:2C:16:21:79:95:73:09:9C:40:2A:E9:1F:FC:57:96:9D:6B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a9:8a:4e:5d:6f:ea:cf:a3:97:20:25:af:f0:17:9f:2f:10:
a3:c2:5d:84:f4:96:2a:c7:a2:20:3c:b5:b7:45:29:3d:76:e6:
63:1b:39:a5:0a:e9:9d:3e:af:f9:44:fd:95:f4:a3:81:e1:29:
56:35:f8:d9:48:ab:78:c8:81:0d:82:7e:67:a8:5c:27:0b:44:
3e:d0:af:da:ad:55:d7:86:b8:b7:d3:a9:88:70:1d:7a:9c:a9:
34:5c:b3:44:c1:18:c5:65:62:b9:78:30:a1:c8:bf:36:cd:ba:
6c:8e:0b:e2:e0:83:cd:24:b9:30:12:76:0a:d0:82:73:c9:20:
a2:71:63:58:64:28:26:99:55:5e:ae:02:1e:c9:fe:d4:f4:c7:
4e:46:77:55:36:08:ad:92:7c:59:14:f9:d2:d5:b7:0b:cb:01:
a9:9d:5f:42:d2:07:ae:39:bf:46:a2:5b:e6:92:c7:51:f4:ca:
bd:83:87:88:30:9d:5c:04:41:f3:dd:e3:be:cf:35:80:f6:d2:
b1:21:45:74:87:6b:cc:e2:03:00:5f:c0:36:8e:c7:0d:78:7f:
15:f7:41:73:be:72:1d:9f:d2:32:9e:f9:29:fb:60:44:be:f2:
e2:f8:16:5e:bf:b3:fb:8c:f0:47:29:2d:cf:ee:0b:99:82:b2:
de:ad:ed:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:06 2026 by rpki-client