Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File: d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier: PAPnVBnFLAGnVHBu30/RbvuSkht1RAmVwB/VtaMDS3g=
Subject key identifier: 72:59:1C:DA:7B:91:71:E9:83:C7:BD:5A:A6:E8:33:89:90:20:A7:41
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer: /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial: 019CAC4721A87220848B47DDE33378CF1CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number: 0F2C
Signing time: Mon 02 Mar 2026 02:01:08 +0000
Manifest this update: Mon 02 Mar 2026 02:01:08 +0000
Manifest next update: Tue 03 Mar 2026 02:01:08 +0000
Files and hashes: 1: 1-x1SQoCge1oAxdF8NH1g432c8v4.roa (hash: gGNG1VzQDUnu5gmTgkEbwFhdDKx8kxbSdmHR7f+ftE8=)
2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: wbWEE3GH6uhEc3sXI5+j8OQ4qFmE5qiwJi8uUXYzajE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:21:a8:72:20:84:8b:47:dd:e3:33:78:cf:1c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Validity
Not Before: Mar 2 02:01:08 2026 GMT
Not After : Mar 3 02:01:08 2026 GMT
Subject: CN=72591cda7b9171e983c7bd5aa6e833899020a741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bf:a2:8c:6d:c5:95:7a:01:a0:44:b3:0d:32:
40:56:30:2f:29:10:66:ac:2d:0d:7a:2a:fd:39:b5:
61:94:b9:db:1c:52:e7:01:54:ad:24:a9:75:56:12:
97:68:d8:ec:be:61:d2:77:8b:46:77:6d:6e:d5:da:
a7:e7:4d:15:55:51:a9:fd:f4:b5:5d:c3:ca:34:69:
c5:bf:ad:7f:af:76:65:3a:30:fb:8f:ea:60:7c:00:
84:49:a5:dd:8b:39:5b:2c:3d:2f:11:00:75:5b:e0:
15:ad:c1:01:4d:87:ea:6c:ec:fa:d1:4f:7f:9c:eb:
bc:32:ee:6b:1e:38:70:5d:cd:79:bc:1e:56:31:1c:
d1:20:a5:71:28:6c:05:e0:5a:0c:c7:7c:d8:bb:f2:
cc:75:5d:26:73:b6:58:ae:8e:1e:40:cc:79:e8:ce:
5c:5b:13:6d:66:88:67:dd:b3:43:f7:db:90:93:ad:
3a:b2:b6:24:d5:01:2a:45:ea:1f:46:03:ed:d5:02:
6b:1e:58:ac:bc:45:28:77:dc:7a:81:ee:6d:61:8b:
98:51:9f:4c:d7:fd:d5:be:6b:5a:17:90:ce:34:da:
66:88:d4:61:ed:a9:02:11:30:71:ff:09:7a:41:99:
d2:87:5c:ff:6e:13:5d:1d:ca:c6:6a:8a:a7:48:26:
82:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:59:1C:DA:7B:91:71:E9:83:C7:BD:5A:A6:E8:33:89:90:20:A7:41
X509v3 Authority Key Identifier:
keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:31:8b:6e:65:b8:af:79:4d:71:20:ac:02:6c:67:ab:6a:83:
ba:6e:99:d9:e0:3b:a1:3e:55:9c:b6:3a:16:90:f5:5f:9b:17:
26:52:78:78:a6:71:5e:33:aa:10:9f:ec:6a:fe:65:e2:cd:77:
9a:32:4f:2d:77:ee:ac:d8:71:e5:ec:dd:e4:4c:53:e9:03:a3:
09:9b:9f:6e:2d:87:23:75:5f:96:86:18:9f:b9:df:c6:70:28:
09:88:f5:43:b9:c7:4a:1e:eb:8b:2e:2c:ef:51:83:87:b1:60:
b8:6f:cf:2a:98:6a:c4:34:1e:e4:41:85:e3:ae:63:31:5f:a7:
f6:df:b0:ee:42:5b:9b:79:ae:10:d1:05:30:40:5b:b7:b4:04:
fc:31:bc:6b:2a:02:bd:cd:ba:af:c4:84:cd:93:8b:56:10:65:
29:33:f5:40:ce:16:bf:aa:01:08:10:64:41:18:37:d6:61:9b:
32:d3:42:24:02:61:23:34:19:17:68:54:03:f2:1b:b7:a1:b6:
97:34:e0:d3:24:95:5e:4c:39:1f:47:93:2d:05:5a:c0:6f:b1:
0c:e5:70:fa:0f:4d:9b:33:0f:79:b1:55:75:a5:bd:d4:2a:6a:
1d:d4:7c:34:dc:2a:78:b4:93:fd:74:12:b9:24:e8:bc:f4:b0:
20:39:90:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:17 2026 by rpki-client