Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
File: d0972iMD4D6ANP52MfUEi5mF9n4.mft (raw, json)
Hash identifier: N/SVccACwCTcG42ybSm96uvKSDIFe3zuatDgCAh6Ies=
Subject key identifier: 28:53:58:5B:1A:B9:A2:7E:D8:01:B6:62:3A:29:5E:86:AD:87:61:A3
Authority key identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
Certificate issuer: /CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Certificate serial: 019CAC4763053D00437872F163F4B209E156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
Manifest number: 01A1
Signing time: Mon 02 Mar 2026 02:01:25 +0000
Manifest this update: Mon 02 Mar 2026 02:01:25 +0000
Manifest next update: Tue 03 Mar 2026 02:01:25 +0000
Files and hashes: 1: d0972iMD4D6ANP52MfUEi5mF9n4.crl (hash: ScnC7o68n4G+ZHr9QdstkrAyRtfU5hXNVV7Qx/J0As8=)
2: vr-KcEvzFupIdELOEs6eVsczP7A.roa (hash: sVJX8b77ReEC5s9osN7ZZ4vvNkbfeOM17MUXGpuCdfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:63:05:3d:00:43:78:72:f1:63:f4:b2:09:e1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Validity
Not Before: Mar 2 02:01:25 2026 GMT
Not After : Mar 3 02:01:25 2026 GMT
Subject: CN=2853585b1ab9a27ed801b6623a295e86ad8761a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:cf:da:8a:8a:60:c6:6b:dc:a6:86:5c:44:
09:cc:f7:c0:6f:3f:15:e7:17:c7:4d:40:b5:7a:22:
c7:36:b4:3a:f0:63:23:11:46:2b:b7:24:c2:e9:72:
98:95:0e:4c:87:73:b7:ec:32:f2:02:b5:1f:51:cc:
42:c6:31:85:0b:30:29:66:46:8d:18:89:fe:6e:2e:
73:79:92:30:38:56:4a:dc:1c:99:41:6f:fc:90:d2:
41:2e:1a:e8:f5:e1:a4:36:95:ca:aa:05:9e:1c:43:
dd:ed:ca:38:f7:45:4e:29:89:5e:53:8d:84:35:dd:
2a:ee:43:ac:4a:35:cb:50:a4:a4:22:db:3a:37:fc:
43:65:9f:d0:37:f4:82:1b:68:2b:cd:d9:54:d8:1b:
5d:97:9e:fc:dc:45:09:51:5f:4d:e3:42:bc:52:f1:
6b:58:37:0f:2f:ce:7d:61:b7:06:6d:51:54:a1:cb:
f0:c0:04:6b:91:5b:86:2a:57:c7:e7:73:38:a1:01:
e9:c1:75:ab:48:16:18:cf:2b:f3:18:0d:c5:ec:28:
17:eb:6a:40:61:96:e4:bb:49:1a:ea:52:56:16:18:
9b:26:49:cc:7f:06:ea:7a:59:c9:bd:6d:5c:d0:bc:
0f:f3:c8:43:d3:df:7c:7b:a6:86:c0:fd:90:35:fd:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:53:58:5B:1A:B9:A2:7E:D8:01:B6:62:3A:29:5E:86:AD:87:61:A3
X509v3 Authority Key Identifier:
keyid:77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8d:2b:bc:f7:f8:0f:33:8c:55:33:3d:e4:d4:f2:92:33:a0:
7e:74:b9:d7:02:b0:8a:bc:5e:92:cc:ab:55:00:65:5e:7f:02:
a3:93:c4:a2:e8:dc:05:9a:89:e2:61:7e:90:b4:5f:62:d5:e5:
eb:e5:f4:8f:f1:18:73:3c:bb:c5:60:ca:ba:9f:d3:8e:39:5e:
e0:eb:95:83:5c:99:5d:65:f2:63:65:0a:16:bb:d2:2e:b4:d1:
7a:7f:4d:12:22:12:d1:e3:b6:3c:4b:24:0f:be:28:a4:80:87:
6c:45:65:17:47:91:03:60:8e:a3:c0:92:73:a7:a9:55:98:cd:
93:54:64:59:4b:d2:12:fa:53:b8:4e:3f:00:3a:ed:3f:3c:2a:
73:19:ba:88:d5:a2:a4:ef:60:06:8d:db:e1:a4:12:20:f2:67:
4c:00:93:62:38:89:4f:6f:64:4d:05:fd:cb:49:7b:0e:1f:f1:
d8:79:33:09:05:c1:30:ac:43:05:0d:3a:b3:52:12:de:d1:0f:
56:30:cd:91:ca:cd:33:0b:12:31:71:f6:7a:5a:4e:13:c1:6e:
31:14:f4:c5:89:10:71:27:84:df:e4:7d:6e:ba:e9:0d:05:d8:
1c:7a:e7:c4:27:44:a0:31:22:6a:b0:0e:63:04:19:94:f8:98:
52:dd:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:38 2026 by rpki-client