Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
File: diI4ozxVDMXfAkTz_G49vZHkw54.mft (raw, json)
Hash identifier: EuAUuEMaj0TkwmAAggm3PFQ9NGGvHbOqcAMfMy7J2Ss=
Subject key identifier: 4E:17:19:11:2F:57:A5:3D:2A:8D:04:30:E3:83:B0:43:55:CD:C9:1D
Authority key identifier: 76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E
Certificate issuer: /CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e
Certificate serial: 019D386640982EDA470571819FBD5C6992D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
Manifest number: 0CFA
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: F7EHLevqhIbYmfRWGh8ETrgh3yU.roa (hash: 0+kmPqOA1TrwEUsZC2FJDlWO1mQqSKgrQDKmrU5ENvM=)
2: diI4ozxVDMXfAkTz_G49vZHkw54.crl (hash: ZqZ0e/mP0lEp8I/iQDiEdTNiA3SKn5s0EVEnWSsFP0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:40:98:2e:da:47:05:71:81:9f:bd:5c:69:92:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=4e1719112f57a53d2a8d0430e383b04355cdc91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:dc:c2:dd:b2:a2:77:fd:9a:56:18:15:53:8d:
b2:d7:f3:0d:7a:47:ae:00:c3:a7:a3:44:d7:03:11:
b1:c9:7d:98:f0:88:bb:8b:4f:f9:42:46:d9:29:e9:
49:39:ab:68:cc:f6:15:da:db:ce:ca:fa:c5:b3:40:
42:c1:34:b7:7a:82:5a:08:11:50:90:04:e5:0a:d5:
39:59:2c:98:e0:f9:b3:b8:57:50:a1:23:83:16:e0:
88:67:f1:a9:3c:b1:59:b2:aa:3f:f3:e8:2a:54:d1:
20:1c:96:87:a4:c5:72:45:37:4c:7b:4a:58:69:69:
c6:c3:0b:97:d8:bc:5a:99:01:fd:ba:04:3d:06:cf:
e1:90:e6:a6:98:96:1c:f5:1d:2b:a0:b7:13:0f:fe:
ae:ea:f6:58:fc:61:28:86:78:4b:b9:fa:ee:bc:89:
a1:10:83:6f:1b:a4:ab:70:aa:5b:90:8d:6d:b5:fd:
ca:91:a3:49:99:89:01:65:f0:5f:4f:fa:8c:1d:97:
95:f6:69:59:b2:b9:90:e5:eb:e5:c3:60:6f:6e:97:
ae:2e:5a:a7:98:1c:5e:29:24:17:c9:a5:c1:94:9a:
f5:aa:f9:1a:6d:38:ef:5d:65:0f:2e:0a:19:29:4c:
2a:af:d8:1b:13:9b:be:0d:62:fb:1a:50:3b:c9:38:
2c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:17:19:11:2F:57:A5:3D:2A:8D:04:30:E3:83:B0:43:55:CD:C9:1D
X509v3 Authority Key Identifier:
keyid:76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3c:aa:ff:9d:61:71:3c:1b:50:96:65:d5:2a:08:69:72:96:
e9:8f:ca:c9:98:4b:01:52:8e:d8:4a:08:f2:0c:c3:9d:dd:91:
7f:bb:e4:85:e7:90:da:fc:44:0c:6d:82:e6:f7:00:65:0e:af:
03:59:3d:b2:33:c0:b2:91:b6:4c:f1:3f:d5:db:7c:0c:71:21:
ae:c1:65:7d:8b:0e:1d:90:8a:54:8c:b8:2a:c3:7e:f2:4a:e1:
2e:6a:b9:2d:0a:52:1f:13:a1:48:95:d3:93:43:26:e4:00:b8:
f3:5a:ee:dc:17:4f:63:b7:eb:36:c4:7c:e6:fa:2d:65:92:4a:
05:b6:8b:1e:e2:17:05:e8:1d:49:86:94:0a:b0:a1:ad:ef:4e:
8b:fe:0d:60:b1:bf:98:2e:f3:ff:cf:51:7e:c6:2e:c4:f0:63:
30:02:5d:71:cd:de:5b:8f:bf:de:d7:06:cd:96:cf:15:c2:85:
7e:22:2f:b1:b7:c4:51:c6:8b:de:43:f7:52:66:2d:64:1f:da:
99:b3:4a:88:2a:db:4a:14:06:85:75:8a:03:fb:93:e0:c6:cb:
4d:88:52:bb:ce:94:64:70:31:4b:63:53:76:8d:fe:48:b3:65:
5b:dc:e0:95:0e:fd:78:bc:a9:e0:81:d6:91:8a:8d:5b:fd:7c:
49:5a:ed:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:39 2026 by rpki-client