Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: 8dEV7kCupEVCGpaGx3qDmu13h9oAwNO4/zg82uRE6l8=
Subject key identifier: 68:43:97:20:DF:27:48:F1:F3:AF:08:12:70:D2:3A:98:FD:A8:FB:AE
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 019D329A9BF2AAB2F90302419B8A5C95A9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 152A
Signing time: Sat 28 Mar 2026 04:01:26 +0000
Manifest this update: Sat 28 Mar 2026 04:01:26 +0000
Manifest next update: Sun 29 Mar 2026 04:01:26 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: vatwrv4Ja1j5l1TFWHbIuilLglwIXEuIWg8ymtcIMu0=)
2: iYtloRWl9kFypd8JJUfmPgfj4cA.roa (hash: S73CmXUZ6HVY4mwA83JVTETkq549rHQpfRMzqNjQiJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:9b:f2:aa:b2:f9:03:02:41:9b:8a:5c:95:a9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Mar 28 04:01:26 2026 GMT
Not After : Mar 29 04:01:26 2026 GMT
Subject: CN=68439720df2748f1f3af081270d23a98fda8fbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:c8:46:d0:c7:37:82:fd:31:ea:50:7b:88:
ae:de:cd:07:0d:24:2d:ca:78:3b:7b:b0:03:67:05:
45:ea:ab:2c:ae:5e:d5:5b:df:ba:f5:18:43:33:a4:
10:09:1d:4d:54:ce:c5:fd:cf:b0:79:a3:9f:c0:c6:
5b:a6:31:18:6e:75:58:1b:cc:52:e0:06:ab:ef:0b:
90:a3:91:4f:5d:a9:6e:ca:32:99:62:4c:4a:85:40:
58:e1:41:e7:b8:45:1a:2a:8f:f6:b7:e7:1c:c8:50:
61:f5:e4:39:c7:5a:f6:25:84:58:6c:80:83:4b:b4:
ed:cd:b0:ee:ea:80:c9:d8:3a:92:93:7e:b6:c9:be:
c0:22:93:fa:40:20:96:f1:d2:87:b6:11:79:7c:86:
05:96:57:7f:ed:a8:df:87:a2:4d:dc:02:69:40:6f:
41:86:03:c6:1a:88:de:59:ac:64:ee:0f:75:c5:8b:
50:ae:ae:4f:ee:11:9d:fc:f9:4f:df:83:11:e6:c6:
ff:33:18:e9:db:69:51:89:8b:1f:1a:80:c0:00:20:
d4:fb:21:7e:46:f9:ab:c6:50:ea:5f:f7:17:7f:4a:
87:55:e6:92:0f:24:4e:d9:87:50:cf:56:2d:91:6b:
1c:f4:63:2e:5e:81:a1:d7:f8:fe:22:5c:c0:2d:4a:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:43:97:20:DF:27:48:F1:F3:AF:08:12:70:D2:3A:98:FD:A8:FB:AE
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d6:40:c5:29:4d:a4:45:ea:9e:65:0a:b1:68:2c:7a:0d:2a:
65:b9:09:33:b2:24:ee:08:6d:06:03:4d:b8:0a:6b:54:8a:b7:
be:22:44:00:98:e3:c8:a7:52:6f:d6:23:b9:b4:3e:73:fb:66:
67:0d:66:7d:6e:4d:63:59:a8:2a:4c:3a:7e:cb:f4:7c:d3:4a:
9f:40:89:71:83:6e:09:ed:f7:44:fc:2b:59:31:7a:c1:7d:e9:
03:26:3a:20:fe:66:e4:90:61:93:5a:26:58:60:64:57:ad:7d:
11:ce:78:06:c4:bd:3f:be:5e:b3:a4:0b:77:40:e5:0d:d5:84:
81:c1:ea:1f:95:ee:83:aa:35:44:b5:24:4a:a3:ed:8c:74:a6:
45:15:8f:10:a7:a9:e2:06:64:96:07:22:e5:0a:9a:cd:8a:63:
59:17:8f:17:b5:9c:f9:d3:2c:51:ff:a1:5d:6b:52:a3:53:a8:
31:8c:2f:b2:47:bb:30:87:77:68:b6:c8:0d:36:db:27:b8:fb:
ef:c5:4e:e1:a3:a5:0c:5a:4e:ba:e6:66:8a:08:b6:0a:9d:e3:
d4:0e:00:95:75:1e:75:1a:67:7b:b7:5a:8c:fd:b1:3c:5d:50:
0e:75:87:b1:42:55:7c:23:2c:02:1e:1e:d6:a9:92:7b:a2:35:
76:3b:7b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:25 2026 by rpki-client