Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: vt+MCAv6GOxg/8/x0DxzREWx+AMFALaqyddSGeV3J/Y=
Subject key identifier: 77:1E:CD:60:B1:0C:75:B7:8C:F4:C0:9A:76:BA:AB:93:78:31:51:84
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 019CAA8F7B75E7C61703F97F2CA407F28320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 05AD
Signing time: Sun 01 Mar 2026 18:00:55 +0000
Manifest this update: Sun 01 Mar 2026 18:00:55 +0000
Manifest next update: Mon 02 Mar 2026 18:00:55 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: 5fS6ZPJylxFPJ2low40jKSGuaqA1poAQg8cRGen2z8A=)
2: P-p2NxW9TFmZAwW03gw6xGVVFZc.roa (hash: VYJ/qjVSy2HmGtgmvHoLOPXTUBBAf8syxAzQSjcRmvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:7b:75:e7:c6:17:03:f9:7f:2c:a4:07:f2:83:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Mar 1 18:00:55 2026 GMT
Not After : Mar 2 18:00:55 2026 GMT
Subject: CN=771ecd60b10c75b78cf4c09a76baab9378315184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:bf:29:aa:30:15:4d:3c:d4:0a:97:c2:13:
99:a0:b8:5c:c5:73:f8:9f:59:24:8f:f7:26:a6:ce:
8c:f1:dd:0d:08:1a:5c:b8:5e:58:da:49:fc:1d:fc:
8c:c0:b0:f6:42:71:fe:2b:19:b2:71:ba:90:98:5d:
b4:30:05:81:79:a5:08:74:7d:a3:c5:8c:7f:6a:4f:
b9:27:d8:ad:ca:94:c8:c8:da:5d:cd:50:89:f4:e7:
3e:79:8e:d3:0f:62:8a:fd:46:6d:eb:c9:93:fe:43:
ef:12:70:29:78:20:f9:b0:bd:27:bd:51:a8:66:37:
d0:fb:f9:03:a6:ee:0b:26:57:bb:04:89:44:59:ef:
36:12:10:1d:4c:b9:dd:ae:4c:43:65:e4:2b:77:bc:
a0:a7:15:09:95:04:c9:d8:b5:22:cc:78:60:af:1e:
c1:78:47:e0:5e:52:52:bf:7c:25:35:5f:c6:9f:2e:
99:0c:0c:c3:62:91:ef:de:d0:63:1f:22:f6:ef:f8:
0d:d9:4f:b7:fe:2b:4b:34:44:a4:8a:55:54:9c:a0:
0c:d9:cc:c9:c0:61:05:00:5d:33:c1:08:4d:eb:c6:
bf:1e:b6:63:a7:c8:7d:01:38:c2:30:f9:15:18:c3:
99:1b:62:23:7b:cc:42:70:5e:20:90:e5:ac:14:0c:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1E:CD:60:B1:0C:75:B7:8C:F4:C0:9A:76:BA:AB:93:78:31:51:84
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ad:a5:46:b4:bb:63:4e:45:de:d8:0d:a0:f2:9d:26:a7:32:
83:b1:9c:63:66:83:09:94:67:27:0d:1c:3a:e4:8d:8b:fe:d1:
5a:e8:fa:20:d1:ef:d5:f4:0b:1e:66:1d:65:be:50:10:c1:8d:
1f:ca:7f:24:61:ad:a4:a8:68:3d:2c:3a:23:aa:1f:ed:67:a4:
bc:58:2c:e0:61:ea:48:54:00:94:d6:b1:9c:80:51:29:74:10:
f0:eb:9a:15:51:f0:e6:ba:ec:19:f1:a4:69:c6:1d:66:4c:b9:
95:e1:52:69:74:f3:60:62:64:59:f4:c0:41:7a:ba:e1:57:b7:
96:73:9d:b4:68:f2:c0:26:4e:e7:e6:e0:7e:7d:0d:ff:cb:f9:
fb:21:69:96:b0:d1:4b:0b:02:ef:58:cd:af:ff:84:06:43:df:
21:15:23:11:0a:df:78:1e:40:06:d3:fe:6a:24:74:39:e0:38:
63:b7:93:37:57:ca:27:9d:59:82:5e:a1:5a:27:46:41:1e:45:
7f:d8:6e:40:a2:61:74:dc:c1:d6:a4:e6:c0:ae:d7:8b:69:5c:
cb:5e:a5:68:4e:7b:d0:b7:b6:70:a5:04:ac:b6:e1:01:4f:43:
82:e2:3d:30:0d:25:d2:17:e1:b9:61:ba:7e:19:36:cd:6d:dd:
df:fd:e4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:52 2026 by rpki-client