Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
File: D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json)
Hash identifier: Vbx0hc7gOi6YRAzSyvh2+af3doL/MA9toCRiXWJ+6+M=
Subject key identifier: 8E:90:2C:E3:51:FA:AB:A5:94:7B:9D:71:3D:9A:F0:DB:DA:E7:49:64
Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Certificate serial: 019CACEBC3521D10D51CD41BF823F65236FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
Manifest number: 0831
Signing time: Mon 02 Mar 2026 05:00:57 +0000
Manifest this update: Mon 02 Mar 2026 05:00:57 +0000
Manifest next update: Tue 03 Mar 2026 05:00:57 +0000
Files and hashes: 1: 79yWfe1C0oJyorvH1Ndj5_ksS2E.roa (hash: VEEzicoUwIVdfyy7u/W5/zZAs5snmAOXbsnXFY4gVR0=)
2: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: Lh0TAAxoFT8WO/F8s8JDOldrvEl1738QJZhRL5Jgjuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:c3:52:1d:10:d5:1c:d4:1b:f8:23:f6:52:36:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Validity
Not Before: Mar 2 05:00:57 2026 GMT
Not After : Mar 3 05:00:57 2026 GMT
Subject: CN=8e902ce351faaba5947b9d713d9af0dbdae74964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:49:21:81:e5:dd:27:fa:9e:75:0c:fc:e4:
5d:ca:a5:03:90:47:34:90:dc:58:07:86:d0:87:9e:
a6:63:4c:56:70:c5:0f:e2:79:cb:89:f4:2a:07:ed:
df:46:e1:92:04:11:91:56:fa:d0:c7:bd:b6:eb:cc:
a2:b2:c9:29:f3:bd:91:a4:e4:2a:25:fa:e8:ff:ee:
d7:08:a6:7f:b8:14:e8:a9:12:d0:ea:dd:7e:b5:c3:
f8:69:ca:fb:c4:f3:93:e6:74:83:ec:a0:6a:e1:f7:
ab:fc:a5:2d:79:f2:d1:f1:f5:a3:89:45:8f:b8:25:
e8:ca:6f:e4:b4:bb:aa:2e:87:6b:3a:7d:2e:11:bc:
6c:f0:0b:36:83:93:d1:8d:3d:a4:96:32:07:be:2f:
a4:a6:fd:8e:79:33:aa:07:97:b6:7c:b7:68:17:e4:
1a:a3:74:17:2b:7b:01:4d:75:00:d4:dc:4f:46:b4:
1a:05:d6:21:9e:92:6d:1b:d7:75:5d:52:fc:1a:f7:
a2:4a:35:16:6e:e2:8f:87:c9:ae:05:ed:8b:ab:54:
ba:f2:03:fb:a0:83:49:bf:be:85:36:0d:bc:04:05:
29:6e:99:c4:87:70:d9:6c:3f:12:63:ab:c4:c1:14:
7d:6e:42:b1:84:c2:aa:a7:db:db:74:c1:e7:6b:ea:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:90:2C:E3:51:FA:AB:A5:94:7B:9D:71:3D:9A:F0:DB:DA:E7:49:64
X509v3 Authority Key Identifier:
keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:22:4f:59:68:a1:64:e4:01:f4:c8:69:3f:08:25:0d:59:fd:
3c:1d:4e:f1:3b:42:af:31:a7:50:97:17:c2:87:e3:59:99:1f:
77:48:ab:98:12:87:27:d7:aa:c6:83:a9:64:9a:ff:ab:88:1b:
65:ec:2e:86:44:c9:8f:a8:15:08:b8:8d:ba:62:02:45:74:a3:
7a:f2:df:10:bb:bc:67:e2:eb:1d:93:78:6a:b9:53:bd:c2:01:
b7:5e:df:21:fd:a4:a6:86:39:1b:f7:fe:c3:e7:63:a1:b3:51:
7e:0c:af:d0:6c:8f:96:0d:eb:bf:5c:80:20:32:f0:78:15:9f:
61:37:82:d8:2d:43:d2:c4:3a:a6:a4:36:69:f3:77:89:31:f0:
48:67:5b:47:86:ef:3d:e9:93:88:0d:73:bc:ca:96:7b:74:e7:
a2:0d:0e:00:03:7f:36:d4:da:dc:08:7a:e4:8f:fe:8a:af:ea:
52:bf:44:bf:da:a7:4b:80:ec:87:28:75:95:cf:4d:5a:51:c0:
9e:14:6b:3c:ca:df:cf:2e:a2:67:3f:a7:a2:50:f5:bc:e4:12:
a0:36:6b:56:20:59:30:30:a8:96:60:0d:32:df:4e:60:00:ae:
a1:31:fc:ea:02:fe:ce:59:20:63:98:0b:f0:c2:e6:de:7d:e8:
e1:a8:4f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:07 2026 by rpki-client