Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
File: dI6Zox81gkAKtd-nd8YNFqyu3bM.mft (raw, json)
Hash identifier: Jdwn50Hw/6yXE0B8rcarlhs3Zdgj/dug1znN/suFeZg=
Subject key identifier: 42:9F:88:45:B9:9F:30:C0:67:47:69:A3:5E:2C:09:C8:07:C2:5D:3E
Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
Certificate issuer: /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Certificate serial: 019CA9B3849E139B47388F8CDD484290027D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
Manifest number: 0A15
Signing time: Sun 01 Mar 2026 14:00:40 +0000
Manifest this update: Sun 01 Mar 2026 14:00:40 +0000
Manifest next update: Mon 02 Mar 2026 14:00:40 +0000
Files and hashes: 1: WQjl92RW0jdBTqM0hadCVWAMXP8.roa (hash: CIaHkNR2G65+9/3FHuVOGVz2ojdxwlcnxwiCYecNZcg=)
2: dI6Zox81gkAKtd-nd8YNFqyu3bM.crl (hash: gYtl/jKiAWLkWP8KlJv3QNO4Kb3PG6s6gw99hjVTteo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:84:9e:13:9b:47:38:8f:8c:dd:48:42:90:02:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Validity
Not Before: Mar 1 14:00:40 2026 GMT
Not After : Mar 2 14:00:40 2026 GMT
Subject: CN=429f8845b99f30c0674769a35e2c09c807c25d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:48:e6:85:13:ab:2c:0f:70:7d:3b:f1:00:
27:53:f5:69:84:07:f8:41:56:90:43:e2:0c:32:9d:
1c:08:d4:f8:ed:2f:4b:f8:8b:08:95:6a:3e:81:cf:
b1:6b:ef:40:d2:c3:ce:22:f5:3b:14:f9:7f:12:3a:
6e:ad:b7:b9:1f:21:78:c9:8d:a5:03:02:02:43:11:
bb:03:e2:ed:34:08:f7:24:f5:91:a7:5a:35:2b:e2:
ae:8a:56:96:06:70:8f:22:d7:03:55:fb:e4:e0:a4:
6d:89:6b:b1:5c:39:1e:8c:c6:28:33:cc:65:d2:f7:
0c:77:69:bf:5d:46:d5:82:98:a0:d5:1f:d9:9d:09:
f1:18:96:1a:c2:a4:a6:80:2e:a3:ef:69:34:41:3b:
83:bf:62:d4:b2:d2:95:6b:41:0f:de:51:0f:92:46:
84:2b:cc:66:a9:8e:af:fd:56:1b:06:01:95:a3:13:
b7:73:ea:90:5b:4f:60:95:07:18:e2:0d:2d:42:4d:
14:f7:c5:35:e3:1c:37:1f:ca:5e:48:6e:53:8b:5e:
1c:b9:df:0e:ed:fd:f3:86:8d:ae:ea:2c:83:e1:80:
86:7f:5f:9c:5d:f8:15:e8:29:29:c9:c9:6b:0e:f3:
d8:8a:a7:f6:bb:4a:73:42:05:19:47:63:e7:5c:e7:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9F:88:45:B9:9F:30:C0:67:47:69:A3:5E:2C:09:C8:07:C2:5D:3E
X509v3 Authority Key Identifier:
keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:39:e0:d2:d8:15:59:15:c2:9d:2d:46:45:f0:43:47:e0:a1:
a9:b1:8c:8c:8b:db:c8:b1:0d:ec:a3:34:b2:81:08:1f:f3:be:
bc:a0:15:70:ad:e4:73:4e:58:d3:a9:c9:36:b3:fe:b7:9a:0e:
1a:8f:47:34:19:0b:8c:c3:70:86:8c:4a:fe:a2:d4:4b:b0:9a:
f6:20:de:0f:22:c1:ba:3e:69:bc:9b:67:3b:3d:42:83:f8:02:
d9:54:dd:a8:86:27:bb:57:68:11:d0:dd:99:04:d5:d6:76:dd:
89:17:11:83:5b:80:63:9f:e9:37:bf:2a:5d:ed:41:13:74:c2:
59:61:60:9b:29:f8:94:41:5b:45:fa:9a:aa:79:db:4d:cd:ea:
35:ff:3f:18:13:80:e1:8a:1e:a6:9f:cd:65:5f:ac:80:95:77:
39:b1:a8:5c:aa:07:ae:7d:bc:33:73:4e:4a:79:b9:44:ca:35:
19:a8:1f:61:af:a9:54:de:f9:46:c0:6b:94:f9:d3:d7:a7:68:
4c:d4:0c:46:a1:a3:84:3b:e5:b6:20:52:86:7d:33:71:40:2f:
9e:2b:34:9c:ae:db:a8:a2:f2:fd:be:24:1d:d9:69:2b:cd:cd:
fb:6f:79:a7:d2:97:20:0a:77:99:dc:18:fb:ae:92:f1:94:38:
aa:a6:d7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:32 2026 by rpki-client