Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
File: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft (raw, json)
Hash identifier: 8kaXifhonmqbuXo33P2+P4FZJwR+KM52XVwZcLZi5V0=
Subject key identifier: DA:1A:B6:0B:72:E0:79:95:0B:46:62:AB:59:1D:70:EE:08:22:06:91
Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
Certificate issuer: /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Certificate serial: 019CAC0FA244FA17DEDF0FD4E7436C3F8320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
Manifest number: 1118
Signing time: Mon 02 Mar 2026 01:00:31 +0000
Manifest this update: Mon 02 Mar 2026 01:00:31 +0000
Manifest next update: Tue 03 Mar 2026 01:00:31 +0000
Files and hashes: 1: O0WFOQ5F0adp9CIdcAP4Tkb9e78.roa (hash: 2t8GAUYJVh4IihKnWbix0KGV/ekdr74eFxI1zTcuA2c=)
2: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl (hash: DCBIg74lJsHFYua581wDYTJT/KtgqenEz/3+jvRWM44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a2:44:fa:17:de:df:0f:d4:e7:43:6c:3f:83:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Validity
Not Before: Mar 2 01:00:31 2026 GMT
Not After : Mar 3 01:00:31 2026 GMT
Subject: CN=da1ab60b72e079950b4662ab591d70ee08220691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:60:f3:67:59:5e:9d:b7:87:72:7c:ce:a6:
5e:ae:63:3a:ec:16:ea:77:16:db:2c:70:f8:31:62:
35:ac:00:34:a8:21:d7:c3:99:4e:e7:88:1c:85:f6:
71:e3:75:d4:7e:4a:61:64:01:62:88:fc:3e:82:d9:
8d:24:fb:36:42:10:ab:5a:fd:83:86:01:70:d5:5c:
d6:1f:0b:69:b2:fe:f7:3c:77:ab:3d:bd:8f:45:42:
85:3d:51:18:90:0f:ca:e2:bc:72:a2:c1:70:3e:e3:
7a:73:ad:e9:66:1a:cf:19:c8:d9:09:5d:0f:63:74:
3c:6d:70:11:e6:6b:41:e6:9d:2a:89:54:b7:77:5c:
99:ee:15:a7:7c:80:29:57:a9:2a:e1:f7:25:ca:bf:
1e:cb:a0:dd:53:0b:cf:f4:70:80:ea:73:6e:56:4d:
eb:ae:f6:29:0b:20:39:01:6f:c6:ef:8f:a9:60:60:
15:b9:47:06:96:34:41:b5:87:a4:50:fa:f4:a6:8b:
9f:03:34:89:a1:cd:3f:e5:82:b1:53:9b:e0:3c:fe:
5c:2d:30:b2:2a:80:c0:ce:f6:ad:e8:65:5d:96:ac:
3e:72:0c:5c:c6:39:23:b6:d9:13:b7:82:f4:13:f2:
a6:e2:ec:bd:9a:d7:09:98:d3:5a:03:2f:90:73:ef:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1A:B6:0B:72:E0:79:95:0B:46:62:AB:59:1D:70:EE:08:22:06:91
X509v3 Authority Key Identifier:
keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:cb:cf:52:28:ff:67:16:fa:48:4a:d6:d6:3c:f7:1f:c8:1e:
10:6a:31:f5:35:83:d0:94:5f:8e:cd:e8:c9:28:72:9b:4c:9a:
64:62:b4:dd:c7:61:22:60:2d:36:87:86:11:a5:f3:c5:a2:ae:
27:f8:44:ef:f9:93:03:42:2a:a0:a8:20:13:3f:e0:9b:a5:17:
e8:c6:df:23:02:f5:da:81:97:af:7c:ce:5a:a4:d0:fb:06:39:
a2:20:59:7c:2b:b8:dc:99:00:32:1c:2c:1c:5a:02:dc:35:1f:
46:95:7c:4e:e6:b2:e8:ac:1e:15:f6:eb:c5:cb:c9:c1:7e:af:
20:fb:26:14:a7:b2:36:8c:72:e2:a3:ff:c7:cf:c1:bf:c5:e2:
91:5f:04:fc:65:95:a4:c7:cb:44:d2:5f:e3:2f:bf:db:61:03:
ce:5a:75:f2:5e:00:bf:95:85:08:35:8d:25:33:55:b2:be:11:
98:e6:a4:a4:fc:0b:47:f6:7b:bf:5b:3b:f7:b4:41:7e:ba:4f:
cd:65:73:62:a1:f8:b8:ec:f0:b9:49:aa:25:de:60:36:f1:3c:
84:ad:d9:81:ed:a0:e0:30:57:ce:6f:fe:26:69:88:ce:a3:73:
d9:16:03:7b:5a:58:47:b4:dc:fa:7a:94:80:1e:0d:51:e3:d1:
3a:c0:a2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:54 2026 by rpki-client