Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
File: D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json)
Hash identifier: wim4b9g5Ca37DT7a4+HgWgcPj+jBR/l3iofa+zLPVDg=
Subject key identifier: 3A:A2:15:C0:F5:4A:A4:83:D0:81:BF:32:C8:4E:D9:EE:A1:C1:58:12
Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Certificate serial: 019D992B8D2DCFCF88169E9305376573F9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
Manifest number: 0872
Signing time: Fri 17 Apr 2026 02:01:01 +0000
Manifest this update: Fri 17 Apr 2026 02:01:01 +0000
Manifest next update: Sat 18 Apr 2026 02:01:01 +0000
Files and hashes: 1: 5XJcsA0Yt7Zdff_LSEdl66W_iVs.roa (hash: b2S+2HR2gX8LbhzerywHZG+Oq0Xjm9O6862mVOPJiR0=)
2: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: 4UZJMKxyW8VuH+akFsQFOB2RjFt+yJoupE/55G6ocO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:8d:2d:cf:cf:88:16:9e:93:05:37:65:73:f9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Validity
Not Before: Apr 17 02:01:01 2026 GMT
Not After : Apr 18 02:01:01 2026 GMT
Subject: CN=3aa215c0f54aa483d081bf32c84ed9eea1c15812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f7:4c:c6:ce:a3:64:0c:5f:24:f8:94:40:43:
67:32:de:83:24:d1:d3:56:5f:54:d6:69:c9:ca:bf:
18:d0:3d:65:37:01:05:7e:b1:10:6d:f2:93:04:19:
2c:3f:97:4d:57:5b:b3:6b:30:d4:55:90:fb:2a:90:
d4:e5:0d:db:4b:93:9a:6b:51:42:57:10:b1:71:f5:
69:7f:37:40:2d:a6:ec:01:c5:41:7e:09:3a:85:50:
f5:46:c4:e8:b6:e2:4b:2d:24:e6:12:b9:be:a5:42:
24:15:bf:3b:6a:40:3b:32:70:c3:f1:fd:5c:cc:f3:
2b:48:83:3c:29:9a:bf:e2:08:bf:d2:cf:c5:fb:54:
39:40:7e:85:cc:a0:7b:30:7d:0e:65:f4:d9:fd:81:
fa:6f:7e:1f:4b:2e:16:90:7b:54:91:9f:07:89:00:
cc:40:0b:09:72:d2:91:2e:43:5d:36:43:18:7e:07:
d6:af:6e:ad:89:d4:62:aa:25:d6:b6:6e:9e:08:30:
3e:79:3f:ac:4c:30:7a:82:a0:36:f1:47:2f:d2:c5:
22:67:f8:f2:ee:29:89:84:ee:8c:64:39:90:ad:51:
e8:a0:40:0b:72:2c:4f:bf:6f:9c:7b:3c:bb:83:2a:
40:44:87:de:0e:07:f8:02:e6:e3:fe:c1:fd:11:5a:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A2:15:C0:F5:4A:A4:83:D0:81:BF:32:C8:4E:D9:EE:A1:C1:58:12
X509v3 Authority Key Identifier:
keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f0:e3:38:c0:cd:1e:22:2b:03:51:e4:b0:69:bf:99:42:40:
67:80:ac:11:58:41:12:23:b0:20:dd:1a:01:16:44:81:b2:d8:
64:b6:01:49:b8:b3:f0:dd:92:47:44:42:28:a8:2f:4b:f0:1e:
0f:32:b6:04:bd:c4:ec:99:6b:18:a6:b7:8e:1a:8d:a2:d0:06:
89:18:e9:ff:e6:a0:8c:2c:2e:d0:17:75:1a:a3:94:ec:97:a8:
46:ee:6b:74:fc:6f:ae:95:fd:bb:fb:b1:29:0a:74:fb:0f:7c:
31:38:4b:1f:a1:80:61:7c:71:d7:f2:e9:29:68:2c:0a:21:39:
9a:4b:ff:78:b5:a7:ad:77:9b:30:d7:64:aa:59:b9:84:ff:2f:
3f:bd:d2:aa:13:23:f0:2c:d6:f4:51:81:66:b0:2e:14:52:c3:
9f:c3:c8:4c:ec:49:a6:77:b7:6f:13:9e:cf:15:10:e2:72:e3:
17:06:b3:1d:4c:3c:ab:98:f4:33:77:47:b9:a5:32:93:62:c8:
31:86:1c:4a:4e:6f:ee:b3:0b:62:b5:99:df:dc:9b:ec:21:4c:
77:58:65:04:eb:62:1a:d6:ac:f5:7e:8e:5c:a6:e0:67:08:38:
5f:4f:7d:05:bd:e5:9e:ca:34:3b:b7:fc:11:b4:4b:32:47:c2:
03:d1:18:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:35 2026 by rpki-client