Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: 3wyFe4D/LFyo2+P3L0DO6kG+JRHgmcnI+VadoE2IfLc=
Subject key identifier: 6E:3D:03:2D:B2:D2:26:7B:91:FF:8D:7B:B2:60:C2:E0:91:F3:0E:41
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 019CAC7DC95967E4500895465611FD6911F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 12DE
Signing time: Mon 02 Mar 2026 03:00:50 +0000
Manifest this update: Mon 02 Mar 2026 03:00:50 +0000
Manifest next update: Tue 03 Mar 2026 03:00:50 +0000
Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: DY2wQ5OA2dzr53Ho5RbZ+QNCgkeEqMFdSDEZoqJv7vs=)
2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c9:59:67:e4:50:08:95:46:56:11:fd:69:11:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Mar 2 03:00:50 2026 GMT
Not After : Mar 3 03:00:50 2026 GMT
Subject: CN=6e3d032db2d2267b91ff8d7bb260c2e091f30e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:72:eb:1a:c6:4c:7b:dc:d6:48:0b:e0:4f:
f5:12:d2:8f:19:8d:8c:03:d7:83:d4:be:fc:30:c9:
2e:dc:6e:3b:7e:60:4d:9f:b9:8b:b6:5e:ad:48:c5:
67:dd:85:9e:f2:be:75:e2:d6:aa:b1:97:f4:6e:36:
81:7b:b3:03:9e:e7:7c:f8:ec:e2:14:b0:94:af:5d:
30:48:ef:74:0d:09:af:2d:67:2b:a1:a5:45:e3:78:
70:56:11:0e:e8:e0:67:41:a1:85:a3:0d:79:43:b4:
70:0a:3a:d9:08:30:2e:3d:d3:8d:2a:cd:98:1e:37:
e5:d8:b6:29:58:81:79:a0:f5:b5:c0:10:39:54:79:
04:68:c0:2d:75:2c:0a:e3:ae:78:ff:b9:68:55:7b:
60:f7:26:a4:28:37:4d:22:de:5f:1b:7e:6b:5c:85:
d7:94:5e:ed:01:56:3e:be:a6:5a:9b:51:82:c2:c0:
88:f4:4f:4d:a7:f3:20:c5:9a:4e:12:90:bf:29:a7:
5d:66:c9:23:c3:ad:3f:6c:a5:ff:ed:10:29:1b:2e:
79:17:0c:b7:7b:05:52:b9:26:90:c5:79:ad:db:6f:
ae:7b:a8:f2:90:9f:cf:06:81:76:a7:cb:87:fa:f9:
8a:2e:82:0c:8c:1d:7a:c0:90:5f:92:81:6f:93:92:
89:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3D:03:2D:B2:D2:26:7B:91:FF:8D:7B:B2:60:C2:E0:91:F3:0E:41
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7b:d3:3f:77:0e:d4:59:1c:59:9d:65:66:3e:50:7c:f6:83:
51:de:fd:f1:dd:76:91:01:b1:03:91:81:8a:07:c5:20:e4:ab:
ae:a6:dd:20:d8:f8:55:22:06:61:6e:98:08:b1:ed:ff:ff:43:
28:eb:7f:ea:77:d4:be:76:9c:67:6e:a8:1e:f2:c4:01:59:65:
75:50:b6:eb:1c:bf:04:5e:0e:e9:78:7b:f5:8b:f9:8c:3a:74:
76:54:ce:70:d1:0b:70:51:9d:bb:65:99:14:bc:67:2e:31:e0:
83:15:84:bd:d2:c5:8c:0e:86:9a:9f:46:c2:d0:a5:dc:d4:cf:
35:59:53:a2:68:3a:7c:cb:20:d4:1a:5b:a5:a0:e3:1c:a1:a8:
c8:aa:ac:7d:93:45:f0:2a:10:60:95:54:76:6e:b7:9f:d2:65:
8b:69:a2:f1:16:99:98:01:ad:b6:fe:9f:09:f9:62:c6:5d:aa:
81:88:47:11:23:a2:49:a7:8f:96:80:dd:f1:ad:e7:14:85:06:
08:1e:cc:17:1b:1d:0c:ed:e2:91:28:8b:c4:49:ca:3b:75:d1:
96:4d:98:a9:51:63:c9:56:99:c3:0b:5d:09:c5:da:17:81:11:
98:cd:e4:42:ae:58:6e:25:c6:6f:01:23:5d:e3:f1:7d:f4:ef:
11:b2:29:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:17:11 2026 by rpki-client