Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: V+PUcRS1Rg4M0liCeu22Zx+3stpio1ariFu/UjMNYLM=
Subject key identifier: B1:A8:D1:5B:05:DB:53:8E:90:A3:35:FC:31:62:3A:6B:42:43:83:47
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 019CAD22626608A60FD030D27AA6154AF7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 0CE9
Signing time: Mon 02 Mar 2026 06:00:37 +0000
Manifest this update: Mon 02 Mar 2026 06:00:37 +0000
Manifest next update: Tue 03 Mar 2026 06:00:37 +0000
Files and hashes: 1: KfM_Z_Z-SNR188s2cAL37I8urEE.roa (hash: UID52aiMOKJSN+qhsE3djfMdcKj7BbWtDHOsP/vEFqQ=)
2: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: 084DxyZIpnYrrPfZlPgK0QD4N1wc2+81TB7/RmGeNeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:62:66:08:a6:0f:d0:30:d2:7a:a6:15:4a:f7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Mar 2 06:00:37 2026 GMT
Not After : Mar 3 06:00:37 2026 GMT
Subject: CN=b1a8d15b05db538e90a335fc31623a6b42438347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e2:ff:bd:1d:1b:fe:dc:77:62:ae:15:8a:aa:
4f:34:70:90:83:16:b0:1c:b7:05:ad:97:e6:1c:62:
ea:fd:63:7f:74:78:fe:e8:ce:ca:25:88:cd:5e:df:
71:b6:2e:3e:16:26:78:00:6d:eb:e4:31:4b:a4:75:
61:91:5b:34:8f:a3:dd:b8:40:bf:02:c2:c3:55:9b:
9a:f7:de:b9:d2:3e:5a:ff:7a:56:de:3a:00:65:b3:
21:8e:c6:64:3d:a1:05:f0:3e:4d:e3:2e:eb:b8:0b:
a1:07:f3:77:44:8f:cd:6f:15:20:4f:94:65:87:f4:
bc:ca:2e:50:d2:3d:c1:9e:6f:94:bc:06:31:c4:ee:
17:01:b8:45:23:20:0c:12:01:0d:12:86:ba:99:f4:
d6:ba:1f:4d:69:32:ff:a0:73:7e:8e:58:df:13:71:
c2:c6:74:66:49:95:18:b9:bd:a0:4b:50:b8:a3:55:
09:03:d3:df:62:2c:b6:0a:a4:44:d4:c3:ac:21:c8:
47:ae:8a:a7:50:61:a5:0c:9c:a8:7e:3e:29:dd:b2:
b7:34:de:8f:6f:b0:d2:de:a4:d8:ef:e6:95:19:81:
ee:5b:51:c4:61:bd:43:62:25:48:31:7f:b8:1b:4e:
de:a2:aa:c0:93:31:3f:62:33:8e:6d:81:cf:81:68:
01:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A8:D1:5B:05:DB:53:8E:90:A3:35:FC:31:62:3A:6B:42:43:83:47
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:66:2d:e3:12:c6:86:eb:cb:f8:96:2e:8d:cd:4c:be:24:ae:
cd:63:5d:05:e6:57:02:7c:01:02:28:6f:ec:58:d1:f0:cd:ad:
35:27:ee:b6:0d:40:9e:68:71:88:ae:fa:f3:22:25:6f:1a:e2:
6b:59:dd:1c:7a:2b:a5:a1:38:c1:36:ba:d0:86:cf:e9:ff:e8:
4d:48:86:91:7b:f5:39:b1:a9:2d:1a:ab:8b:2e:6d:63:01:c0:
27:62:d1:7f:6e:d0:13:30:bc:8f:cb:4e:1a:06:14:ab:c2:13:
76:f8:f3:88:2a:73:41:d5:5c:f5:48:ed:2b:05:52:ca:1e:d1:
a6:02:0d:a6:5b:2e:55:34:57:f2:46:dc:11:1b:03:3e:f0:0c:
f6:21:b4:7b:30:59:fa:90:a1:10:f4:bb:fb:83:8a:16:31:96:
28:4c:52:35:83:1f:62:01:b1:10:33:86:c7:2e:10:fa:02:41:
92:d3:c6:04:48:15:b7:08:cf:86:bb:fb:08:00:34:26:11:d5:
b0:a6:9d:97:c7:a7:b4:38:89:1b:aa:59:cd:0f:8e:6e:df:69:
60:d9:9e:cf:a9:1d:79:d5:60:90:2c:a7:ea:6c:9c:37:04:43:
b9:35:b6:8c:06:1c:0c:a8:4d:27:c6:a5:e8:45:79:8f:e5:38:
f7:cb:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:41 2026 by rpki-client