Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: 9PKfIRDW6KPkP5jDdTJFDNENZbYknKmsDpessob5N/8=
Subject key identifier: AB:D1:16:BD:F2:AF:CD:13:53:E6:2E:78:10:41:BD:A3:F8:C4:0B:A8
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 019CAE6BED44E1E2E11E0B083148766790B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 0A35
Signing time: Mon 02 Mar 2026 12:00:34 +0000
Manifest this update: Mon 02 Mar 2026 12:00:34 +0000
Manifest next update: Tue 03 Mar 2026 12:00:34 +0000
Files and hashes: 1: 96SX2S5aBWouZ5qx7BRgteL4iq8.roa (hash: M3a2yFufjkSiLfAokMv1+05AOpH8jhB4+9skztdJecg=)
2: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: GFVqWmnt/qtnGDL29/imX0BqoDkQIWnh3vV7ODFCBk4=)
3: L6SdCLp_FHvz3o3tKNX0l8WA490.roa (hash: 9JHTUcRidI2GiaDB1BZb9pHbOm8ZJYd9k9gXu4meKKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:ed:44:e1:e2:e1:1e:0b:08:31:48:76:67:90:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Mar 2 12:00:34 2026 GMT
Not After : Mar 3 12:00:34 2026 GMT
Subject: CN=abd116bdf2afcd1353e62e781041bda3f8c40ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:96:04:de:31:5b:23:4a:2b:8f:a3:45:6e:
bd:f3:43:d8:fb:a9:fa:da:c2:bf:37:db:9c:77:58:
a0:fc:ca:bb:93:c8:e8:c7:76:ad:75:36:7d:12:e5:
6e:79:ef:e2:d8:f5:a0:91:3f:6b:69:bb:af:28:69:
45:21:c9:b0:91:4d:34:87:bd:e2:5e:db:ad:e5:9a:
27:1b:05:2c:c5:37:10:05:7d:d3:12:5f:75:47:a2:
2b:2c:2e:46:12:e2:7e:66:52:68:6a:b9:5d:e4:ba:
51:ba:78:fa:e6:f8:0e:b8:6a:c0:0b:25:7b:19:87:
6a:89:8b:7b:53:b7:1b:27:c1:e7:e3:e8:08:ee:a3:
28:fc:50:6a:38:30:fd:2a:42:53:0d:10:73:a7:82:
50:9d:0c:01:f5:c7:66:73:fb:7c:d9:73:65:cb:32:
73:03:81:59:f3:6d:36:e9:9b:d7:30:24:5b:7c:26:
a9:b1:59:37:51:12:ab:da:a4:76:b5:a6:14:e8:09:
9d:e5:ef:55:19:94:36:7c:f7:03:80:74:95:51:5a:
99:c2:6e:8d:ff:fa:4a:fc:eb:ba:44:ec:99:80:99:
e2:3e:ad:7d:10:5d:82:59:86:73:5d:10:5f:35:e0:
0d:2d:b3:b8:ab:b8:3b:ad:60:75:74:6b:8d:74:01:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D1:16:BD:F2:AF:CD:13:53:E6:2E:78:10:41:BD:A3:F8:C4:0B:A8
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c5:a1:4e:29:4a:c8:57:b0:cc:fd:79:9d:cf:bb:32:76:77:
c4:35:d9:b1:2f:36:98:21:98:75:cc:88:e9:7b:39:3f:8e:50:
2b:36:1b:ad:9d:37:47:bd:59:f1:f9:5a:f1:a3:01:31:7d:7c:
3a:ae:31:e7:d4:95:2d:9e:a2:38:a3:69:cc:3a:1a:7e:69:fc:
8d:75:87:f5:e2:62:f5:67:71:40:25:6b:20:04:9b:f9:eb:ee:
04:69:22:9a:e2:10:fa:a1:21:f6:40:2b:f7:1d:89:da:24:13:
d4:5b:a4:5c:15:78:f2:b9:4d:de:4c:cf:28:f3:cd:0a:89:20:
41:66:bc:e2:a9:6b:a0:22:bf:72:d0:81:d8:35:f9:05:0b:c0:
ac:d0:c0:5f:3b:a3:bd:8c:1d:ba:5e:ec:75:43:a2:67:63:22:
11:f4:1e:4a:c8:59:82:9c:61:7f:1c:e0:dc:c4:64:a3:de:5c:
09:d5:3b:e7:2c:75:34:68:73:ac:63:64:53:58:ce:35:f3:2f:
d6:8f:8d:12:14:8b:3a:d1:80:bb:36:32:13:f0:a6:12:ec:75:
a7:91:bf:db:63:24:a6:f9:46:51:09:6a:31:75:3f:7d:aa:69:
ad:d9:08:9b:6f:11:d5:75:03:45:73:56:c1:03:f7:5f:16:97:
77:76:b1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:59 2026 by rpki-client