Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
File: du6ffY5dGMUIhPgzeK5Iui_NpuI.mft (raw, json)
Hash identifier: BM5lV6qdiCiMVHbnXSSugU3Pf/6n1QtLnZoKIY97tK4=
Subject key identifier: C1:EC:44:89:71:24:3B:99:61:3F:F1:1E:25:59:03:55:F8:9F:1F:47
Authority key identifier: 76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
Certificate issuer: /CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Certificate serial: 019CACB539B0924F34395074F44B779EA347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
Manifest number: 139F
Signing time: Mon 02 Mar 2026 04:01:23 +0000
Manifest this update: Mon 02 Mar 2026 04:01:23 +0000
Manifest next update: Tue 03 Mar 2026 04:01:23 +0000
Files and hashes: 1: _d8Zo_g7rmhKukVc2_yC6OHo_f8.roa (hash: W4kBrQ5vSikj88DUpuXxRFyq1wVLUOltrf0M4pqOt50=)
2: du6ffY5dGMUIhPgzeK5Iui_NpuI.crl (hash: zOR9Z0L5XTKRUqiMZmZYrYzeZy59POUKw/wlI0ctXJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:39:b0:92:4f:34:39:50:74:f4:4b:77:9e:a3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Validity
Not Before: Mar 2 04:01:23 2026 GMT
Not After : Mar 3 04:01:23 2026 GMT
Subject: CN=c1ec448971243b99613ff11e25590355f89f1f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:10:46:30:7e:fc:23:81:e1:39:79:e8:51:
21:ee:61:00:dd:b2:d9:fe:4d:c1:a2:d7:4c:9f:40:
1c:28:14:65:b8:f2:9d:57:7c:9f:54:78:a7:7b:23:
ed:78:90:a4:07:b6:6d:f2:30:58:16:61:49:c2:d2:
b8:4b:c6:9d:47:90:b5:ee:b3:03:98:4c:84:6b:3d:
0f:73:62:cd:77:a0:9b:0d:79:4f:7a:a7:43:6a:08:
be:85:26:29:cd:c0:7c:56:ab:d7:dd:d3:c9:41:14:
12:d6:35:7e:ad:aa:4d:7a:4d:49:e7:57:dc:3b:61:
df:a5:a8:5a:6b:da:29:63:15:a0:99:f0:c0:ce:f7:
c0:4c:ae:53:10:b7:f0:89:0b:4e:9c:5e:65:84:25:
79:f2:7a:c6:73:24:6b:09:61:e4:46:d2:18:f0:ce:
fc:bd:c6:6a:9d:f5:d4:a9:56:97:75:24:88:e8:8f:
83:bf:85:8c:d0:32:2e:d7:40:89:cb:c6:ce:89:fa:
38:9b:49:56:e2:72:16:3e:ba:9c:d3:ed:f5:5a:1d:
47:e9:c1:ab:07:50:af:ea:04:02:25:d6:9b:ef:2e:
62:a3:84:37:c0:5e:1d:60:93:63:02:1d:49:92:00:
f0:b3:0c:f1:b3:0b:b5:f2:1e:4a:86:a7:94:58:84:
66:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EC:44:89:71:24:3B:99:61:3F:F1:1E:25:59:03:55:F8:9F:1F:47
X509v3 Authority Key Identifier:
keyid:76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3f:61:49:e3:27:8f:bf:8e:c0:5e:9a:04:8e:7f:4d:23:bd:
d7:3d:8f:bf:90:67:4a:15:ea:f0:05:d9:0b:9d:7e:c9:64:9a:
42:e0:cd:ab:6b:dd:e7:91:e9:95:a6:eb:25:94:fd:fa:93:3d:
ce:af:b4:ff:07:e7:06:8e:c8:0f:5a:05:80:c7:e2:2b:a5:c9:
f4:91:47:45:8f:89:fb:b5:6d:61:e4:e3:36:a4:8b:9a:77:06:
5a:a3:4c:0c:7b:2f:97:ef:ce:09:84:43:83:df:2f:62:c2:37:
7e:f5:aa:23:8d:eb:ac:76:33:6d:9c:bc:44:2d:85:93:e6:c1:
ff:c6:2a:25:af:e2:f0:0f:9c:73:18:95:2c:f0:5f:5d:c2:01:
0e:5a:5a:d2:4e:c5:fa:f6:67:a3:ff:67:ff:25:4b:4d:13:ec:
a5:3b:37:f8:37:25:80:af:ff:b2:73:1e:28:b4:80:f3:e6:7e:
b9:fa:1a:fe:d4:36:a6:e5:a5:4d:37:8b:90:82:b1:ab:83:7d:
13:04:86:d1:bf:ef:18:26:75:06:8e:de:3a:b9:e7:46:2e:ae:
ef:7e:07:af:f5:e5:77:ad:ae:1a:63:7c:5d:ca:bc:4e:14:e6:
14:0e:5a:a7:3c:6d:a2:72:49:6b:4e:d4:3f:c1:e8:6d:57:4a:
9f:5c:13:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:24 2026 by rpki-client