Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File: d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier: bLZH1nkhrV4zjaLcOe6nmLXjDzdmKX0Jz5OmXC6U450=
Subject key identifier: 7D:E1:FF:79:9C:A3:2F:80:7F:E4:88:17:EE:A7:E8:C9:EE:75:AB:BE
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer: /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial: 019CAA8F4E40F98A857F6D293021EC134A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number: 156C
Signing time: Sun 01 Mar 2026 18:00:44 +0000
Manifest this update: Sun 01 Mar 2026 18:00:44 +0000
Manifest next update: Mon 02 Mar 2026 18:00:44 +0000
Files and hashes: 1: WIBc-XhxOnD5f9bCQ8Jz0ZuTnGc.roa (hash: BEfaJedvpJl8LX0jJodXnPNHqf67lfg9OTd8BTanSlQ=)
2: biWMyLPxPMl5FtQJTRrTfAxg-wg.roa (hash: pNDoD30C6cU3KpMd8R/7fMFpHc25Pe1LLUHjt0eH4ZA=)
3: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: 3jB7e8vRhdn2R3Ssw2lLRwuwULeTXuujyHq2uLlvim4=)
4: pInkCUNgtUwuBuyF0FBGq4Od_LA.roa (hash: 84LwnqiXuuACgBX/nkeDGPUuwEvED3Wv0F8ikRwy6Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:4e:40:f9:8a:85:7f:6d:29:30:21:ec:13:4a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Validity
Not Before: Mar 1 18:00:44 2026 GMT
Not After : Mar 2 18:00:44 2026 GMT
Subject: CN=7de1ff799ca32f807fe48817eea7e8c9ee75abbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:10:8f:70:29:b0:39:d8:37:e8:1f:53:93:a1:
12:39:f8:36:3d:54:62:48:5d:0c:49:8e:90:9d:f3:
61:7f:0c:9d:78:4c:fd:b4:3d:02:5c:40:91:e6:d9:
8e:0d:93:6c:fe:0d:ed:83:d9:56:f4:e9:38:ce:89:
6c:67:70:c7:39:9c:4b:40:11:8f:2e:14:d0:af:d2:
77:26:57:b9:29:94:fb:41:73:0d:27:70:ea:fe:45:
4c:f3:34:61:83:58:df:cd:62:d6:78:21:47:31:ad:
74:da:88:9e:06:a0:42:db:65:b7:64:a8:63:d8:4b:
a5:33:6a:d0:42:47:c1:71:47:4f:ba:d1:ba:63:36:
a4:65:f5:39:04:04:e2:5b:ed:95:7d:0e:7b:c3:7e:
24:ab:db:a0:3f:5e:ea:54:66:a9:2a:a5:cc:82:b2:
10:69:a8:42:bc:17:b0:50:ad:35:9e:ab:23:fd:53:
9c:01:12:e4:05:0d:28:59:cb:b4:17:4b:4b:43:dd:
d6:44:0d:7d:d9:c4:66:4a:ce:98:d0:eb:6a:0b:b9:
4b:c2:06:a5:0c:4a:17:94:d8:76:3f:d8:89:62:5d:
44:10:12:89:9f:73:a4:e7:ae:92:a4:09:a5:c1:62:
f4:af:bd:55:0f:7a:00:2a:dd:97:bd:e7:f5:d6:cb:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E1:FF:79:9C:A3:2F:80:7F:E4:88:17:EE:A7:E8:C9:EE:75:AB:BE
X509v3 Authority Key Identifier:
keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:de:95:cc:16:a8:f2:71:c8:55:86:17:35:8b:e3:ab:c5:d1:
ce:a1:88:5a:13:82:3e:7e:d7:e5:3a:c1:e5:72:f1:8d:5a:53:
93:7e:e7:3b:60:7b:ae:64:63:e5:99:9e:4f:22:cc:73:d3:a2:
28:ba:63:7d:6f:75:71:c7:f5:f7:f4:2f:b5:ea:cb:8d:43:ff:
a0:b5:06:bb:0a:a9:ae:d2:df:c6:e9:22:31:a3:a0:bf:6d:92:
3b:da:62:30:a9:c8:83:2a:65:60:57:d1:1d:d8:6a:bc:ce:00:
a5:95:39:28:bb:c3:c3:a7:26:ee:9b:8f:d7:bc:10:bb:8d:82:
90:6e:11:83:6a:f7:06:e0:95:f7:08:7b:f8:32:92:20:55:65:
56:ad:5a:5e:16:9d:88:92:fe:92:0f:f7:f7:dc:a6:7e:6f:bd:
eb:ca:5c:bf:14:0d:cd:48:69:27:c7:25:f4:78:a5:ca:86:01:
e0:b4:9b:25:3f:d7:26:c1:9d:3d:62:5b:70:47:7a:4b:fa:22:
31:be:79:d5:94:21:69:84:b4:9f:d3:f5:1b:a7:6a:37:6f:4e:
ff:c8:e8:b4:2a:72:f8:bd:bc:83:82:a4:d1:08:bb:e5:fb:04:
40:5f:e6:66:e8:79:9c:5d:f7:2e:1b:16:03:33:e5:79:48:4b:
97:86:13:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:33 2026 by rpki-client