Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
File: d_u84sIID4H1oPmPJ5Ipgm3khQs.mft (raw, json)
Hash identifier: 8wrbvIbOvdRbwSJ4lo2q1o+ILtq64xoFK9/sowFCcx4=
Subject key identifier: 41:DB:4C:CE:6C:9D:58:97:11:00:7D:B2:79:DD:E7:B4:BC:F2:C9:2D
Authority key identifier: 77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
Certificate issuer: /CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Certificate serial: 019D9A06AC1459DA8500AA1EDE40547126D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
Manifest number: 0FE7
Signing time: Fri 17 Apr 2026 06:00:21 +0000
Manifest this update: Fri 17 Apr 2026 06:00:21 +0000
Manifest next update: Sat 18 Apr 2026 06:00:21 +0000
Files and hashes: 1: 3lFiJAi9xcyPhHbde0XIskVsgIs.roa (hash: qs21NuisUl0QxWCvF+rTCWm7FC1OO83XG3sDyW4a0mM=)
2: d_u84sIID4H1oPmPJ5Ipgm3khQs.crl (hash: YT08QRmcHQYvjjjb/zVRWTuyyNK2MjgG49/e7AVo5PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ac:14:59:da:85:00:aa:1e:de:40:54:71:26:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Validity
Not Before: Apr 17 06:00:21 2026 GMT
Not After : Apr 18 06:00:21 2026 GMT
Subject: CN=41db4cce6c9d589711007db279dde7b4bcf2c92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:02:65:ee:27:67:47:c4:4a:09:f6:31:cb:
d2:3f:da:ef:98:94:8f:46:ef:22:c9:a1:79:7f:4e:
0e:59:2b:db:51:4e:5d:38:45:a6:6e:3f:ca:16:d4:
46:80:5e:54:af:f7:31:79:57:21:ae:76:c3:b5:b3:
4c:63:1c:fb:7a:84:bd:5a:d3:63:f0:4c:51:77:63:
68:15:61:a1:01:95:5f:92:00:14:b1:de:03:50:a9:
17:1f:68:f9:df:20:89:e9:f3:9c:09:b9:53:18:0b:
68:3a:ed:e0:41:14:51:3f:96:08:75:ee:26:85:27:
57:04:be:15:39:d0:7a:5c:68:76:b2:bc:28:24:76:
d6:9e:99:de:1e:3a:1c:4d:9e:4d:aa:6a:9d:40:77:
55:46:eb:40:bb:0e:5e:df:15:ac:37:e4:2c:04:07:
87:f6:d8:b2:fd:cf:48:02:03:9e:ba:64:04:46:d5:
26:e2:01:97:b7:4d:17:a2:25:53:f3:73:11:ae:aa:
3f:ee:4c:5c:fc:c4:85:49:39:15:ca:fe:65:fa:37:
9a:b0:71:c6:07:f4:8b:2b:67:65:f1:8f:f5:a8:1c:
6f:76:e5:03:5b:2a:10:2d:9e:24:fe:9b:2b:48:a0:
a7:a2:d0:49:e4:8e:ad:72:a3:d9:60:c4:2f:a3:f5:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DB:4C:CE:6C:9D:58:97:11:00:7D:B2:79:DD:E7:B4:BC:F2:C9:2D
X509v3 Authority Key Identifier:
keyid:77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d2:aa:ba:49:fa:91:49:c2:55:3f:53:0c:2e:fc:6b:f3:9a:
0b:98:fe:8b:cc:a3:7b:ab:3c:b6:07:fc:b7:94:1d:6a:73:a3:
06:9e:38:ee:b3:4f:dc:a1:7a:a5:73:f7:e3:b1:36:d6:36:a6:
7a:f0:b8:2f:0c:88:b8:a5:6d:7e:10:a6:8f:d1:d3:b6:84:b5:
51:ac:ef:2a:ed:c6:99:2c:f7:92:28:05:e1:59:ed:c7:ac:69:
d8:00:ad:0d:be:5e:c2:bb:af:3a:96:4d:3b:3d:1d:1b:a8:f8:
c2:2a:fb:01:9b:1e:1a:00:7d:c7:9e:26:df:b9:33:22:4d:b2:
0d:7c:e6:41:15:f0:40:3e:dd:27:48:ee:c3:f8:8b:ab:bd:73:
e2:26:ca:50:67:67:e3:24:33:b5:eb:b2:bf:cd:cd:67:41:4f:
21:24:08:c3:fb:dd:8f:26:6a:f1:25:36:38:10:5c:73:75:e2:
97:04:f2:f4:e7:78:1b:fd:b6:cc:96:05:b6:ba:78:e8:68:92:
e7:b0:6c:25:5c:0d:47:37:5b:86:5e:e4:3c:03:dd:00:8d:42:
9d:04:1b:0e:9b:80:9c:13:28:6d:de:80:52:5b:83:1c:ff:bd:
54:45:65:0b:58:c2:ab:66:86:92:0b:53:cd:65:af:49:89:04:
e3:54:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:18 2026 by rpki-client