Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: oH3q7fPlMZSpRBuHmRcXdiHOJcndlKYi+XSAlp83JIs=
Subject key identifier: B3:FA:BC:59:A7:A4:78:93:D8:AE:88:87:3E:F6:EC:AD:7A:21:DB:F1
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 019CAC1055ABD604BA208992E0D08D5C5A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 0655
Signing time: Mon 02 Mar 2026 01:01:17 +0000
Manifest this update: Mon 02 Mar 2026 01:01:17 +0000
Manifest next update: Tue 03 Mar 2026 01:01:17 +0000
Files and hashes: 1: 80qBnu2XnhFRiBmZiF038oU110Q.roa (hash: LIRyJNKQ/3u7PO7ipf6wdyHbe0bKIPQwJsid3/CO5Lg=)
2: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: KcZ1xpYnzkMAgAqaB+PCUmvq//ngtY3lNDQKLWVW2d4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:55:ab:d6:04:ba:20:89:92:e0:d0:8d:5c:5a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Mar 2 01:01:17 2026 GMT
Not After : Mar 3 01:01:17 2026 GMT
Subject: CN=b3fabc59a7a47893d8ae88873ef6ecad7a21dbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:9a:00:8d:48:89:d6:c8:41:71:0d:94:70:
3f:08:7b:a2:12:b1:7b:24:9f:48:00:6a:f8:39:e2:
9c:a9:40:bc:f9:6b:18:f7:5f:94:84:d0:b8:75:de:
ad:21:0b:5b:4e:b2:a4:cb:a5:7e:ec:6c:2e:92:60:
97:16:ca:3e:1e:20:b8:7c:5b:6d:70:a0:b4:dc:33:
f2:ea:17:61:97:c7:a9:2f:2f:99:00:df:2e:e4:fb:
7e:b8:84:87:74:fc:a2:09:06:0d:a3:f5:12:5a:2c:
e7:31:fe:22:99:e5:41:f6:66:4b:5a:0d:2b:90:b2:
a5:25:7e:fb:b4:33:6e:09:24:0f:25:21:ea:4f:1c:
4b:2f:b5:cb:21:a6:35:5c:41:3c:91:87:50:25:4c:
d9:9c:c9:43:40:a8:62:e4:73:03:25:4a:30:8c:d5:
ed:9b:e9:e1:a0:c5:f1:d8:2c:5c:3e:a5:2d:30:8b:
3d:00:ae:fe:f3:97:64:6c:f3:6d:71:27:88:6c:69:
5a:52:0f:2a:07:02:fd:05:64:4c:d7:fa:7a:38:74:
4b:e7:9c:ac:0b:c8:87:f8:57:30:13:a5:0d:27:81:
29:3b:5b:2b:d6:4c:68:b9:31:65:95:51:49:f3:b3:
a1:0d:bf:7c:5e:98:d6:75:fb:3d:09:17:66:7a:42:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FA:BC:59:A7:A4:78:93:D8:AE:88:87:3E:F6:EC:AD:7A:21:DB:F1
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:82:26:47:bd:7a:36:72:96:5d:04:d8:41:3b:80:94:44:b4:
2e:4d:90:2e:0a:f7:59:f5:84:8d:91:b3:17:09:90:2c:03:24:
16:f5:3e:e4:5c:b7:3f:93:3c:c9:b9:8a:43:db:98:b7:cf:b6:
0f:43:12:36:65:20:f8:dc:94:2f:d8:4d:31:1b:60:36:3f:66:
10:6b:db:11:69:1c:77:d2:06:b0:31:76:cc:e1:53:c9:8e:77:
45:bf:f9:1a:50:b5:87:c2:92:85:6d:9e:66:77:ae:81:3f:95:
ba:96:b0:5c:a3:cb:6c:03:07:9f:97:03:99:d0:60:08:6f:d0:
99:8d:5d:19:70:73:60:a0:ca:34:77:f6:a0:89:7e:a2:e8:dd:
68:f3:ac:53:85:a2:41:0a:a6:c1:17:ba:64:34:9b:09:61:4e:
dd:5e:df:18:1c:3e:cc:ce:f6:1a:2a:62:c1:06:42:bb:93:e2:
ae:27:52:41:ca:a2:bd:03:c6:84:a0:cd:d3:a5:50:dc:54:79:
a4:07:55:d9:a3:a5:e4:d2:9a:38:4b:52:e6:bd:4d:db:ae:21:
1d:82:4c:5f:8d:e1:7c:82:49:2e:ce:c0:66:98:14:9d:37:11:
0a:e7:8a:5e:0c:1b:f9:be:d7:6e:a3:16:a1:9f:34:97:47:26:
30:ab:15:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:49 2026 by rpki-client