Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: TWzuP099qvBTAxtPiYTFD7X7UlroxwMQNO1RxpvJ8Dw=
Subject key identifier: 19:C8:C0:52:A6:F2:BF:EA:6B:F2:6A:2C:81:62:6E:D3:5D:2F:0A:21
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 019CABD9D5C722DB058023F200A030F576F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 0952
Signing time: Mon 02 Mar 2026 00:01:45 +0000
Manifest this update: Mon 02 Mar 2026 00:01:45 +0000
Manifest next update: Tue 03 Mar 2026 00:01:45 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: eABaUlc4Qp6a9153iWwc/qp0SEeqeos+Yn/DZ2lmsjo=)
2: bbfdsDcnJI7l8XYTq2CjZ7GXkac.roa (hash: Zz0UmtBUzv4omIdkS3mEovbafENQWuqBsJq69kjW+GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d5:c7:22:db:05:80:23:f2:00:a0:30:f5:76:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: Mar 2 00:01:45 2026 GMT
Not After : Mar 3 00:01:45 2026 GMT
Subject: CN=19c8c052a6f2bfea6bf26a2c81626ed35d2f0a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:d8:51:92:5e:23:a2:59:2d:59:b9:4b:59:
80:ae:9d:ea:19:3d:4d:9b:4d:03:10:77:8f:89:3a:
ec:67:6b:ba:f4:d7:ba:18:4c:21:15:31:ed:b9:39:
27:50:85:3f:bf:59:81:ae:f5:1d:f5:6b:f7:17:38:
e5:f3:45:36:a8:d4:b4:1e:9f:f1:cb:55:47:44:b4:
91:32:05:5a:97:ec:c3:f8:0e:cf:e1:06:48:7a:63:
68:1a:a5:07:ac:eb:13:ed:8b:2d:69:24:07:0b:a9:
69:bf:2b:69:60:97:2a:8d:dd:d7:32:02:6e:bc:48:
81:90:49:51:fb:fd:a7:5e:66:c2:41:fc:8f:e1:30:
17:65:b8:3a:c2:52:aa:95:24:b7:e7:3e:69:af:af:
06:d7:d0:c7:f6:d1:46:ca:9d:2c:38:52:8e:22:0b:
f4:ab:25:96:30:5d:66:88:14:1e:c6:c5:be:72:07:
f3:e1:e7:45:ca:18:0a:c4:ad:e7:2b:4d:bd:24:0c:
f4:11:8b:7e:42:87:f2:7c:e7:d2:04:95:be:65:e2:
66:cb:c5:c2:12:85:50:90:b1:7c:27:5f:a8:63:07:
2a:5d:b4:eb:71:1e:79:ce:bf:4b:16:89:b0:a6:6f:
34:29:60:b3:25:79:48:af:af:3b:5e:5a:7f:d7:41:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C8:C0:52:A6:F2:BF:EA:6B:F2:6A:2C:81:62:6E:D3:5D:2F:0A:21
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7e:c5:c5:7d:e9:ce:aa:13:a7:c8:58:db:a8:5f:14:3d:22:
9b:4f:8e:40:19:db:ce:f4:63:1d:7b:9f:bc:01:85:71:74:fa:
51:a5:05:12:f6:10:76:8c:3e:c1:45:28:68:65:62:b3:d0:3b:
5c:ca:3f:c2:ed:45:e7:f5:ac:4e:bf:b3:90:09:a3:57:93:1d:
42:e2:5d:46:5a:f2:29:5f:3e:e0:9d:90:0f:78:38:41:3d:32:
e9:25:dd:20:9f:1a:f1:a0:75:31:cd:f4:2c:04:41:8e:64:2e:
41:10:1a:2c:38:4a:8c:3e:56:46:65:42:64:96:cf:43:ef:bd:
f4:3d:df:8c:97:11:8d:e4:c1:2f:15:cc:ad:bc:2e:53:4c:71:
a8:1a:ee:cc:95:78:6b:02:b3:f3:3e:d5:76:5d:a7:40:ab:48:
9f:58:c8:5a:d1:de:23:39:d4:95:6a:b9:9e:48:c4:8c:e9:94:
a2:1e:a5:9c:78:90:14:e7:b2:8f:49:41:38:f8:81:0e:3e:81:
8f:9c:be:eb:5a:dd:5b:86:76:21:97:31:bd:90:12:46:f9:9a:
2b:2a:46:5f:ac:ff:a8:ae:92:4c:74:9e:40:60:b0:7f:14:e6:
a8:69:c3:89:cf:ad:2d:9b:d5:5f:d8:e1:32:b0:fb:6a:cb:1d:
a2:8f:5a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:30 2026 by rpki-client