Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
File: dIZPUCPsYmPvnxb5AYf18oBh0RU.mft (raw, json)
Hash identifier: beJBHu2KHop/7PnjbGWLCcmtwxq3sprGp6kpOUXL1Ho=
Subject key identifier: C5:46:39:15:96:FB:F9:42:6C:24:07:D8:F0:76:4A:BC:1E:C1:BC:68
Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
Certificate issuer: /CN=74864f5023ec6263ef9f16f90187f5f28061d115
Certificate serial: 019D262853B6B707BC96C882D6351A87DD33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
Manifest number: 0E73
Signing time: Wed 25 Mar 2026 18:01:10 +0000
Manifest this update: Wed 25 Mar 2026 18:01:10 +0000
Manifest next update: Thu 26 Mar 2026 18:01:10 +0000
Files and hashes: 1: Tk-54jiMCl3pRob8Ol0GyqafcTo.roa (hash: ogGPBYJpK3ICA3MgJGI7aFtZAb3lcTgOcAes1dNC4Q8=)
2: dIZPUCPsYmPvnxb5AYf18oBh0RU.crl (hash: Pcy6ERgv5Fvpqr6IReXGuJBbpk67vGpFmdFdiFd8Cyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:53:b6:b7:07:bc:96:c8:82:d6:35:1a:87:dd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115
Validity
Not Before: Mar 25 18:01:10 2026 GMT
Not After : Mar 26 18:01:10 2026 GMT
Subject: CN=c546391596fbf9426c2407d8f0764abc1ec1bc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2d:a5:8f:f7:63:72:79:16:5a:0a:23:f7:fd:
a3:0f:93:de:4a:de:a6:fe:20:ad:70:b1:ee:c2:b5:
e4:ca:61:f0:63:a4:10:d5:ac:d1:e1:c7:4c:46:69:
f5:ab:58:1e:2c:c9:ed:7c:ca:38:65:d2:da:e9:a8:
92:c1:3f:c3:a0:97:2d:d0:df:22:11:00:05:fb:c3:
2e:f9:4a:8d:1a:e2:1b:6b:99:cc:07:3d:2c:44:35:
b0:f0:aa:a6:3c:a6:00:33:00:f0:06:52:bc:24:f7:
8c:4a:6a:dc:da:2f:5d:31:8f:e8:3c:19:49:74:cf:
b1:68:01:ba:c7:c7:06:aa:6b:91:79:1b:32:59:07:
25:bc:99:9c:fe:ff:a5:7a:33:f3:63:8d:ad:46:5b:
b1:db:04:f9:a1:1e:48:70:6a:b5:ab:ab:c2:02:65:
fa:c1:dd:44:40:e8:d3:90:d9:70:77:62:b8:4a:5c:
39:db:56:84:cf:39:ec:81:b1:88:a5:fb:cf:72:e8:
8f:f8:45:a2:df:7b:8a:11:66:fb:22:38:96:85:2a:
13:ea:68:49:3d:81:f9:d0:89:d4:dc:c3:70:64:c0:
77:f2:ef:8e:b9:ba:b3:c9:98:cb:fe:bb:20:fd:37:
52:32:71:fb:80:4d:b5:df:87:80:08:ef:4a:88:78:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:46:39:15:96:FB:F9:42:6C:24:07:D8:F0:76:4A:BC:1E:C1:BC:68
X509v3 Authority Key Identifier:
keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:50:52:c1:20:8c:01:3b:32:b4:ef:15:67:0a:b0:11:4d:db:
05:6c:79:29:89:20:7e:18:aa:b0:d2:60:7f:53:fb:25:4a:cc:
60:4b:e8:11:2c:3a:0f:9c:c4:43:a8:2a:bd:2a:63:1b:89:f5:
54:d7:42:31:74:f3:1a:95:20:19:0e:76:ea:b1:d3:51:43:b4:
2f:0a:58:61:57:15:a2:69:c8:1b:89:db:e0:4a:85:84:ee:92:
05:ad:5c:37:84:17:92:6a:5a:df:bb:f5:95:f2:c8:cd:06:8e:
65:6a:f2:74:ae:fe:c9:78:17:f8:87:b5:5a:82:af:0d:4e:40:
c6:21:51:bc:92:e8:08:5e:b2:41:b3:68:65:dc:a3:0a:0b:b2:
34:f7:b4:32:c9:63:30:7f:60:a7:2b:aa:11:9f:e3:97:ef:80:
2d:8a:5c:3b:78:2a:1e:2c:9a:50:27:59:ec:f2:80:3f:d3:fe:
45:50:30:29:5c:b2:4d:3c:1c:ff:e9:6a:14:2c:7b:14:6b:30:
88:71:e6:22:9f:38:3e:b7:92:d1:13:73:f3:ad:bf:f9:3a:8f:
f9:f7:f7:39:91:18:f2:b1:14:ae:9e:72:ee:d9:63:7c:7f:bd:
83:17:d0:ff:5b:da:d3:52:51:c6:1f:33:1f:18:4d:7a:32:e8:
16:0c:59:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:41 2026 by rpki-client