Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: EVhuJUlvoqvrumfkImzQzAaUNyx+MPmbs/W9ZDwh71c=
Subject key identifier: FB:75:DB:8D:6F:97:48:22:DE:F1:61:37:97:A9:E2:0D:54:6E:53:FA
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 019D9A07585A4BD644B58BDB7BA5C6D317B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 0629
Signing time: Fri 17 Apr 2026 06:01:05 +0000
Manifest this update: Fri 17 Apr 2026 06:01:05 +0000
Manifest next update: Sat 18 Apr 2026 06:01:05 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: haX0kRD74cY4WeTrbM9OPIxK0FntOGVVT0JTc9RYrUI=)
2: P-p2NxW9TFmZAwW03gw6xGVVFZc.roa (hash: VYJ/qjVSy2HmGtgmvHoLOPXTUBBAf8syxAzQSjcRmvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:58:5a:4b:d6:44:b5:8b:db:7b:a5:c6:d3:17:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Apr 17 06:01:05 2026 GMT
Not After : Apr 18 06:01:05 2026 GMT
Subject: CN=fb75db8d6f974822def1613797a9e20d546e53fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:2b:35:14:b7:57:d9:a1:b4:17:5f:00:43:
0b:ed:1a:14:50:d5:e6:a7:92:d2:73:9c:62:4e:0f:
54:3d:ad:fa:84:b2:95:f7:d6:1a:a8:92:38:af:e4:
24:e0:f1:d7:04:e1:1c:3d:77:0b:10:4e:38:32:a0:
51:b3:d6:f3:5a:07:79:d1:71:2b:ab:32:44:d5:9e:
b7:fb:2d:41:7c:16:8f:6a:08:8e:57:84:2e:64:46:
65:0b:3e:6e:76:9e:d0:e0:2d:67:77:a7:a4:dd:b3:
1d:75:bd:23:af:c0:f3:58:63:8a:92:3f:95:05:40:
7b:00:03:25:b5:09:24:be:00:fb:1c:a4:65:90:b2:
27:63:65:6e:99:7b:5f:cf:bd:ff:15:79:b0:30:9c:
54:29:8d:bf:9f:81:69:a0:cc:5e:a7:9a:de:aa:b7:
2f:f2:27:98:2c:80:0b:d2:1a:2a:b4:49:ea:fb:a7:
2f:c1:80:7d:ea:3d:9f:60:d3:29:84:d0:c5:0f:92:
b4:2a:7d:99:a9:4e:14:96:c8:23:56:67:c9:50:0d:
6d:51:92:cf:8d:bc:7d:f6:fb:6a:a7:df:4a:b4:3c:
c2:6c:b3:b9:5e:21:50:4a:cc:4d:77:09:b2:14:31:
75:14:5d:90:0d:69:03:87:03:15:ac:40:47:aa:d8:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:75:DB:8D:6F:97:48:22:DE:F1:61:37:97:A9:E2:0D:54:6E:53:FA
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ca:ce:3e:7d:5e:a9:f5:5a:a4:b2:4c:ab:7a:64:27:29:bf:
db:5f:5e:fc:9a:4d:76:27:ea:08:03:9a:d0:59:a2:19:f5:70:
59:3a:40:91:d3:82:ee:6b:61:66:00:21:8c:50:8f:c7:ba:6e:
35:46:50:43:f9:ba:cb:90:23:2b:46:42:e7:f9:32:12:9e:22:
5c:05:2a:e7:20:c2:de:74:28:11:f0:5c:94:15:7c:87:03:e1:
3e:94:b2:e3:5c:99:7b:9c:b4:69:8b:71:50:dd:e5:e7:84:7f:
e6:cf:9f:d4:b9:b1:56:13:5a:b2:9e:5c:a6:80:01:62:e9:8b:
a6:72:d1:28:86:1d:7a:80:c4:e6:4c:01:77:4d:10:73:e6:b4:
f8:2c:e6:e5:ee:9b:51:00:2e:9a:bf:73:41:79:4e:f7:b4:7f:
9a:68:44:3e:ce:39:0d:a5:8e:82:f0:e5:c6:53:63:ee:a4:95:
18:36:d5:be:3c:dc:a1:a9:11:29:4d:e9:dc:7e:4c:5d:ac:9b:
19:5e:c5:e1:1f:47:a7:23:83:5d:00:ad:df:5b:c7:28:a9:44:
d4:5b:ac:45:7b:f4:2a:25:52:bd:4d:47:b7:55:c3:8c:7f:8d:
a0:39:4c:3b:ab:36:96:18:bd:cb:3e:d1:ff:07:b6:f9:72:af:
79:8c:4c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:55 2026 by rpki-client