Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: uaeUsIw4zalP9UltnEk78lS/b1qoZ0/jAuw5fbluKOE=
Subject key identifier: F2:DD:43:DE:EC:E9:C7:E8:2A:A0:CC:74:C9:B8:1E:FA:9B:81:48:29
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 019CAE6C1CC79DD7398922B5C7A3F8EF627A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 0450
Signing time: Mon 02 Mar 2026 12:00:46 +0000
Manifest this update: Mon 02 Mar 2026 12:00:46 +0000
Manifest next update: Tue 03 Mar 2026 12:00:46 +0000
Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: ODKzw+7P4LB4g3zZdBc3/RBpn1m2g1BnhQFpQfmE+BA=)
2: kiTvl7qRwBbY6cobkK0xpr1YwKU.roa (hash: ej/OHpg3lUXGkRe1UvCRILNoIypuMG3kknoqujS4cxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:1c:c7:9d:d7:39:89:22:b5:c7:a3:f8:ef:62:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Mar 2 12:00:46 2026 GMT
Not After : Mar 3 12:00:46 2026 GMT
Subject: CN=f2dd43deece9c7e82aa0cc74c9b81efa9b814829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:da:95:39:5e:2c:3d:07:7f:af:66:35:52:
12:69:dd:f6:f4:a1:0a:56:5b:8e:3d:33:7a:2c:e5:
0c:ca:b5:54:51:7a:e0:53:29:d2:f3:19:1a:cc:83:
d8:b3:d0:b4:49:0e:46:d0:d1:52:35:f0:c7:df:c9:
75:3b:ec:4f:f7:00:90:b3:de:7c:e0:df:9a:fc:c5:
8f:44:e4:85:5b:20:b6:89:de:6f:fb:0e:a0:b5:0a:
e4:a7:2a:a3:4c:ef:f7:98:c4:fa:58:18:ce:0b:43:
ba:f4:07:86:8b:0e:54:2d:92:49:1c:a6:d0:e3:12:
d3:b1:2f:ed:b5:dc:bd:86:55:d7:3d:ff:80:6f:10:
9d:23:29:5c:12:52:21:3e:93:76:ad:07:c1:79:17:
04:f5:58:1a:9e:98:45:3c:16:23:3b:fe:10:ca:51:
58:98:fe:a7:77:6c:ac:e8:f8:47:9b:13:a9:a0:02:
07:21:04:52:11:37:6e:48:22:78:3c:9e:e0:5e:32:
b0:c5:e0:2e:f3:61:2c:2c:01:8b:4e:52:e4:ba:23:
47:bf:5f:ae:05:ce:26:56:de:fc:a6:ae:ae:5b:76:
b2:df:4e:e6:f5:55:48:90:60:62:e3:b8:77:8f:d4:
49:52:1b:b3:30:b8:35:c6:41:6f:57:bd:21:b1:9a:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DD:43:DE:EC:E9:C7:E8:2A:A0:CC:74:C9:B8:1E:FA:9B:81:48:29
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c7:6d:f0:70:3b:3e:b3:d4:27:4d:8c:63:18:7b:0b:86:2b:
01:16:23:95:9a:83:96:67:a1:d3:81:a9:28:cb:09:61:67:c2:
1d:a0:07:c8:c3:06:77:c2:c5:d1:2f:74:45:fd:1e:fd:1f:d9:
66:61:a0:ed:a9:99:44:24:0b:16:81:bc:88:90:2a:ca:67:14:
c2:a4:cb:75:5e:5b:b2:3f:e7:30:79:bf:18:39:7d:66:c4:23:
fb:b9:f6:54:14:25:03:88:a1:62:c5:40:84:28:c3:11:cd:ba:
18:05:11:8c:9e:f1:f6:05:de:71:f2:c6:f0:96:a9:34:8d:28:
61:18:95:1a:68:27:c6:52:ae:3f:1c:f2:3f:30:3a:03:cc:a8:
e9:29:51:1e:12:b4:b5:ce:bf:83:8f:bc:80:6b:ef:f8:61:51:
c5:ca:46:0e:82:6d:d2:f3:ec:53:48:a9:a7:b2:64:f3:99:95:
7a:54:7f:43:93:19:b1:1f:4f:4d:1c:7a:2c:bf:ca:da:4d:31:
3d:55:51:d6:80:75:26:bc:d5:a6:7c:7a:ac:12:91:f3:6a:75:
52:42:e5:e5:4d:03:d6:ef:3d:57:18:52:48:0c:b7:60:52:d5:
96:18:51:91:a3:d1:5b:fe:04:1b:32:8e:f6:37:b2:22:41:d4:
62:96:e5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:50 2026 by rpki-client