Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: Qpsz4OHm5URAVoCkS1T/x1OBhP3vaOBMD0lHauwfjFw=
Subject key identifier: 6C:5B:3D:E4:6D:D2:64:FA:61:E9:96:01:3E:4F:66:9A:BC:44:B1:DB
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 019CAC468310AE24D649FCA2F16053BB726D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 1725
Signing time: Mon 02 Mar 2026 02:00:28 +0000
Manifest this update: Mon 02 Mar 2026 02:00:28 +0000
Manifest next update: Tue 03 Mar 2026 02:00:28 +0000
Files and hashes: 1: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: gbkdpbA6n7No4eovYwqLx1ZxlvY4QJG6wZq661TpH08=)
2: gM2StpLZVmvayJcUvILE4XZXuLw.roa (hash: KQMOAlvZrGCc1yTty62TEDax5SGCNvxrkbvizSS1atc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:83:10:ae:24:d6:49:fc:a2:f1:60:53:bb:72:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Mar 2 02:00:28 2026 GMT
Not After : Mar 3 02:00:28 2026 GMT
Subject: CN=6c5b3de46dd264fa61e996013e4f669abc44b1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:a6:3d:38:5d:20:79:ed:3b:75:9c:1d:7c:
25:32:de:71:14:56:fe:c2:a0:7e:f6:b9:69:f7:b7:
66:ce:bd:71:b7:e8:be:a4:c9:d3:a7:b9:88:08:5f:
99:ee:a6:a4:2c:00:9e:68:4c:1f:c7:35:52:eb:fe:
9e:63:98:c4:94:02:84:e7:10:d3:97:43:e4:83:14:
99:93:2c:47:d0:58:5c:77:20:f9:e3:4e:0a:7c:47:
8e:43:39:4b:83:c1:ee:18:1a:76:ca:b5:e8:0c:a3:
ba:3c:d4:a0:6c:6d:bb:1a:f3:62:19:ab:5d:5f:b1:
4b:7e:1b:04:93:61:7a:2d:15:9a:c2:5c:f9:68:dc:
1d:67:3b:de:6c:ab:37:78:6e:6a:d7:69:81:59:88:
08:30:01:49:7a:17:d5:9e:fc:be:70:8d:91:e5:d6:
63:49:c2:cb:a4:7e:a1:cf:ff:1d:1b:11:69:f4:89:
b3:23:e6:ed:f8:db:55:c6:b1:85:e5:f7:ea:22:a5:
44:86:71:49:d6:23:1a:61:5f:f4:34:13:60:e4:e3:
ed:2f:26:ee:75:d7:36:f5:75:c3:0f:be:1c:b0:83:
62:4e:f5:f6:cc:13:11:3d:8c:f3:60:00:2a:1f:85:
2a:a7:85:88:d9:5a:b3:b4:fb:49:8f:27:5f:a5:36:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5B:3D:E4:6D:D2:64:FA:61:E9:96:01:3E:4F:66:9A:BC:44:B1:DB
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d7:53:bd:69:c9:d1:b6:6e:0a:0b:95:69:b8:f5:bf:59:94:
e5:e0:ee:cc:53:ad:b0:3d:05:28:8f:e4:c8:8c:60:58:04:82:
58:6b:1c:a3:ee:53:e2:15:3f:ee:c0:6b:6c:ca:49:1c:4a:6b:
c6:a1:1f:69:f2:22:fb:6c:4b:f7:41:93:88:5e:e6:69:f2:63:
3f:3e:4b:93:e2:f5:c6:42:2a:a0:df:80:ca:0c:b8:26:4a:87:
6f:ff:f0:e1:58:c2:dd:d5:d8:8a:38:b8:7d:3e:35:6b:43:47:
2f:ed:fa:f0:f5:c0:97:50:a7:fa:08:89:54:1c:72:e0:6a:3d:
d2:b9:e0:3b:ca:23:24:83:10:5f:81:94:4a:a1:81:02:ee:6e:
56:f4:ff:74:6d:2c:6a:f4:ea:66:61:f1:8e:67:81:f5:6e:a3:
c6:ac:76:bb:6c:c1:c4:ee:39:51:bb:2a:dd:ed:4f:94:bf:f7:
a9:20:3f:5c:cd:04:76:f3:83:00:50:8e:98:cc:98:ae:9e:0d:
05:19:e7:2d:08:88:22:e9:a2:10:26:8c:3f:8c:98:14:b9:20:
e4:6d:e8:8f:fa:72:26:37:a8:9e:f9:17:6e:83:b6:a7:8f:66:
75:b8:2d:65:7c:80:ef:c0:9b:99:6c:fc:b0:7a:5e:42:61:b1:
69:9e:23:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:38 2026 by rpki-client