Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: N+ilKVTWETfw5+r5UIsVzcB9FgvI460/XzsYdb9kYtQ=
Subject key identifier: 4A:58:3B:3E:67:C9:FF:0A:62:FE:6D:5B:D1:6F:48:A4:95:37:D3:EC
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 019CABA21E2BA1224ED4DCB6956525FCD1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 06F9
Signing time: Sun 01 Mar 2026 23:00:54 +0000
Manifest this update: Sun 01 Mar 2026 23:00:54 +0000
Manifest next update: Mon 02 Mar 2026 23:00:54 +0000
Files and hashes: 1: 1ULsjrhU_Mgs_8Mvd-oE1b7ANaE.roa (hash: BPqaZcuEdD+lQrMI+iPU/GW6APEbwg38yW1mZjGwXr8=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: JbcgoOhfVuVHWNpUzOXtyvPijFhKyHNLves5oSWWEGQ=)
3: pXo0ZUaV-y6EDCcUoSCUhqpPURU.roa (hash: EuVKLvC6yGpoLeqj+M0pu9788Rfc943eOWrQgVLBCHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:1e:2b:a1:22:4e:d4:dc:b6:95:65:25:fc:d1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Mar 1 23:00:54 2026 GMT
Not After : Mar 2 23:00:54 2026 GMT
Subject: CN=4a583b3e67c9ff0a62fe6d5bd16f48a49537d3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c8:ec:51:78:e2:41:b8:e4:2d:4c:94:3c:98:
6c:e6:8b:0c:58:d6:a0:d2:a3:54:ca:d4:4f:ca:96:
c6:56:24:a3:34:4c:e3:13:91:92:f0:5b:d7:61:53:
66:60:c4:69:dd:61:02:86:9c:1a:f1:a9:37:da:9c:
d2:65:28:9b:bb:a9:09:10:eb:80:af:8b:6e:f6:66:
7c:15:2a:ed:84:a0:19:c6:6c:43:09:66:58:2b:6d:
5b:47:33:e3:be:ac:59:59:96:0a:46:75:d6:06:95:
a2:15:fb:ea:68:e0:a4:6a:6d:14:d3:06:b1:cc:5b:
1b:3e:00:64:82:9b:70:4c:54:38:f0:64:ad:66:2c:
00:d7:09:ae:82:64:90:e3:43:d1:27:67:69:5b:6c:
66:f0:af:35:45:49:e6:0c:95:07:de:02:a9:e3:a9:
71:83:06:5d:fa:83:c0:33:b4:bd:49:70:83:c1:21:
51:a5:22:52:a3:d3:20:c3:7a:74:55:6e:e7:ab:36:
a0:de:59:9e:ff:48:80:ad:2b:8e:56:54:d8:9d:16:
96:3e:2b:25:49:b2:e3:47:0d:79:7a:73:f9:73:e9:
66:ce:e4:7e:b5:2d:df:47:9b:fb:22:db:77:df:2e:
7a:99:b3:a5:18:96:75:1a:e9:8b:b1:05:4b:8c:ea:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:58:3B:3E:67:C9:FF:0A:62:FE:6D:5B:D1:6F:48:A4:95:37:D3:EC
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:21:47:04:5a:a5:8b:83:d0:ae:f7:bb:40:9a:7b:78:4f:9e:
b4:11:87:6e:3f:b1:8d:a4:1e:4e:34:97:4b:30:4e:94:e9:a3:
23:ea:1e:5e:af:3f:2a:63:ad:32:b0:fd:9d:2b:2a:47:ff:59:
2b:19:ec:9a:13:30:5d:f8:7b:ca:d1:14:ec:ed:69:72:34:ec:
81:70:94:ea:3d:0a:9f:28:02:f2:9e:f6:af:f5:56:51:0c:41:
39:73:e5:40:3c:dc:bc:26:32:01:68:d2:b2:fe:03:cb:12:63:
3f:cd:5c:c9:1b:a2:3f:fb:04:9c:f4:34:d0:9f:52:d1:6f:51:
70:69:0b:aa:b6:8c:de:12:d6:3d:60:ab:71:73:ff:48:94:53:
f1:1b:31:00:e5:cf:82:7d:2b:80:98:d1:0c:bb:84:ed:ae:fd:
84:80:d6:ba:67:48:20:cb:4c:3c:1e:b3:f7:0a:7a:a7:a3:ff:
08:11:90:65:68:c6:f5:53:e7:97:8b:98:89:19:ed:ca:ea:b8:
bc:24:91:75:2c:35:a8:80:4e:40:f3:95:2c:52:9b:68:55:0a:
99:9a:bb:d8:6a:3e:d5:36:5c:54:b0:a4:fb:af:43:1b:4c:44:
6e:e6:c1:8c:c4:3e:f8:5a:81:09:b6:e3:39:a0:29:4b:f6:95:
6f:a9:41:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:21 2026 by rpki-client