Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: suKtsIMsObu9z5iMtt6yz+Qi0z+ti8Q86lDX1LkZERI=
Subject key identifier: 06:9A:EA:B0:82:A2:45:D0:28:09:AF:0C:A4:71:75:8A:7A:32:13:2E
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 019CA8D85676360992CEB25F5FAB156C2229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0D59
Signing time: Sun 01 Mar 2026 10:01:15 +0000
Manifest this update: Sun 01 Mar 2026 10:01:15 +0000
Manifest next update: Mon 02 Mar 2026 10:01:15 +0000
Files and hashes: 1: SzookzV0kvbV2uV2WuzBzsdzDN0.roa (hash: 305744fYy853yhsc/+Jcw6ozr6ihNDOG9TribOS/z2s=)
2: dL52a-JSQC-00Ko98mQkGc0Xvzo.roa (hash: 2r+wEDTFQg2vugNKxVL/EHxSgKFbqV3jiVEPhPaqb/k=)
3: n_DU8ayGMsHeUdkTrzuKYMpaU_Q.roa (hash: KHioroc4KbkqEBK4timMsuRiTYXUbx4dAfmekQJR2xY=)
4: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: 2ysdb4xz6ifn8t7JoLwADTWNTwWXf0Im2yXKhPNXRzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:56:76:36:09:92:ce:b2:5f:5f:ab:15:6c:22:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Mar 1 10:01:15 2026 GMT
Not After : Mar 2 10:01:15 2026 GMT
Subject: CN=069aeab082a245d02809af0ca471758a7a32132e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:db:29:fc:bd:67:14:e8:1c:21:c2:4f:92:
2b:7d:79:57:a2:8e:14:0e:3c:aa:bc:03:75:be:f7:
95:5b:a7:6c:19:ad:15:72:c4:da:df:db:52:fa:fe:
76:aa:1a:44:0a:c2:9b:81:6b:9b:a9:36:3f:4e:0a:
56:04:02:8b:f3:2c:8e:d8:d7:b7:da:67:a8:15:b7:
1c:4d:8a:dd:0d:9b:fa:06:50:ea:5a:fc:69:a0:7a:
63:80:c3:b0:c7:fb:02:e2:a3:9d:4a:84:d1:76:ce:
c3:f3:89:89:1f:16:5b:7d:16:8c:0e:be:51:88:7c:
77:47:09:dd:5a:50:c1:48:4f:ed:95:23:99:44:88:
2b:26:51:69:45:a5:4c:d4:e0:66:29:e9:96:2c:35:
4d:7a:1a:b7:7b:22:da:c0:e8:bd:ba:8f:e7:a1:4d:
d3:77:ab:9e:dc:f2:fa:1a:8d:65:a4:c8:df:e0:00:
16:94:bf:aa:71:98:8d:e1:9b:ed:e7:57:2c:13:4c:
39:b1:9e:83:0b:11:8b:4c:d3:58:93:62:a3:40:62:
9a:c0:d2:a9:1e:bb:2a:4c:c8:c8:0e:a9:f6:83:29:
95:d6:bc:63:a8:fd:38:af:a0:38:ad:de:ed:59:8b:
94:ba:9c:eb:15:8e:a2:81:35:af:cf:6a:bc:45:ec:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9A:EA:B0:82:A2:45:D0:28:09:AF:0C:A4:71:75:8A:7A:32:13:2E
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d9:3b:39:63:ba:8a:e0:50:2d:42:7a:6d:91:e2:99:3c:5f:
d3:d7:72:7b:9f:42:82:4f:0c:28:84:70:1b:92:31:84:9d:52:
08:ca:19:1a:41:12:ed:e7:11:59:25:2c:9d:46:99:8f:3e:1c:
10:2d:0b:d2:c7:a5:93:78:32:b9:dc:07:bd:5d:4a:33:f4:e7:
ee:24:b9:91:ab:b2:fe:c0:3b:7a:17:a3:37:be:16:00:af:31:
f9:5d:0f:1c:d9:c6:70:17:01:13:40:f4:c7:2e:cb:70:87:88:
fd:aa:1b:06:9a:e5:8a:52:78:51:0f:36:0d:90:3c:f8:df:03:
71:41:e8:2f:67:8a:ed:e5:ce:82:08:c5:f4:1c:84:b9:e5:30:
b6:03:1f:29:5d:51:93:f2:61:9e:2d:04:ed:5a:36:c1:cc:b1:
79:9b:59:a3:ba:73:5a:a6:1c:ea:d3:28:62:05:21:48:b4:44:
5c:c7:d0:8d:ee:49:0d:76:8c:68:31:af:01:02:c4:93:10:08:
94:e6:1c:99:b5:3c:24:e9:0d:69:e3:8e:01:44:9f:15:2a:6f:
5e:49:a5:c3:89:d3:31:05:5f:ee:45:ba:10:70:f1:c1:cc:a4:
bd:50:9e:18:2e:90:01:39:d1:81:7b:ce:38:8f:0c:c6:0a:3a:
ab:23:f6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:00 2026 by rpki-client