Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json)
Hash identifier: 2Kdx7dljVV1ZMIXX6QLxz5cvnsD3uh0qPW/L2yMfhe4=
Subject key identifier: E7:D1:9D:C6:72:C5:85:ED:1B:67:C6:6B:D8:1F:3D:FC:8B:F6:DD:19
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 019D27040549E4B334B68338674ED19D77C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
Manifest number: 189B
Signing time: Wed 25 Mar 2026 22:01:08 +0000
Manifest this update: Wed 25 Mar 2026 22:01:08 +0000
Manifest next update: Thu 26 Mar 2026 22:01:08 +0000
Files and hashes: 1: X6yij2F2wCS9SNyg0X2W1evj5UY.roa (hash: NA6kYJC1nLmQ9K7t2tSV4/j0mb+VEM1Maf4SLgSq/gU=)
2: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: kqRCRQu5Lj3IOr1cvdp7ZrEJY31QlIL/aAXELPOvj+0=)
3: cMI6xFuuN3kOOUkjFl-dw7vQpxk.roa (hash: QMhkNofXWtqJpzrnd1DVBgskNLYUlXU/ZSYppiY4PcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:05:49:e4:b3:34:b6:83:38:67:4e:d1:9d:77:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Mar 25 22:01:08 2026 GMT
Not After : Mar 26 22:01:08 2026 GMT
Subject: CN=e7d19dc672c585ed1b67c66bd81f3dfc8bf6dd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:d7:dd:de:b1:0f:47:07:43:75:c6:f3:1f:
17:cf:bf:7b:f5:4a:52:87:0f:51:12:3f:54:5e:14:
65:03:8e:a4:f1:b9:41:7a:64:72:a3:ae:72:cd:10:
7b:5f:79:c7:08:af:ee:dc:22:88:5d:be:8e:dd:53:
a7:b9:8c:29:38:62:de:ba:70:fe:5a:12:96:f0:1a:
70:e3:e0:92:11:78:fc:b1:03:9e:2e:ff:74:7c:66:
5d:a3:17:29:53:ca:71:0c:71:69:ba:24:cb:64:e0:
05:36:7c:ba:38:d0:71:38:17:a4:c8:af:48:e8:b0:
e9:d1:73:e6:5e:de:57:8c:b0:5c:30:66:de:f1:47:
c7:d9:72:6b:96:0b:ba:9d:96:c4:a2:af:9a:8b:0b:
02:47:10:5c:74:2e:a7:95:4c:b8:61:9d:52:db:31:
f5:c7:38:ba:f4:b3:3e:be:78:6e:3f:81:85:15:4e:
04:3b:45:21:ae:0e:4f:58:94:a7:1e:8a:61:5e:dd:
a2:ad:9d:5f:fb:0b:e2:16:4b:d8:c6:8d:9e:a6:c7:
db:58:25:53:03:30:db:67:90:b6:1c:87:ce:cd:d0:
96:20:2c:49:50:8f:91:9a:32:2f:50:4e:12:29:00:
e6:d4:4c:58:eb:cd:cc:8e:bf:c0:14:5d:9a:3c:80:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D1:9D:C6:72:C5:85:ED:1B:67:C6:6B:D8:1F:3D:FC:8B:F6:DD:19
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:57:24:30:fe:0b:13:a6:2a:77:67:5a:b4:fe:dd:42:2d:52:
51:1c:6c:d3:a9:f4:9d:89:48:0a:d5:00:c2:68:88:5a:01:48:
e4:0e:87:51:2a:65:68:69:3d:7c:c7:67:b7:d4:d4:85:45:52:
a4:32:4d:46:32:c1:32:c6:50:c9:13:20:c8:5f:e8:43:74:ab:
76:e6:b8:52:3b:8a:6f:df:35:0b:b0:eb:00:81:04:4f:63:85:
d3:c5:10:c8:c1:3d:8b:dc:00:9d:af:72:cd:07:c1:33:87:10:
ef:e2:a8:30:c4:58:76:47:a9:86:f8:f0:b9:6f:00:91:04:4b:
c9:cb:f1:43:ba:91:7a:aa:b7:f7:f1:a9:84:3a:30:45:8f:f1:
22:79:46:da:b2:59:66:3a:a3:df:5f:4a:6a:d4:f4:ce:40:f2:
ed:ff:f2:3a:da:79:96:8f:ea:41:e8:50:ff:ea:1a:e7:fd:ba:
f8:df:b1:e9:28:3c:ae:2b:a1:0d:9d:f9:67:a4:58:4c:ac:d0:
46:c9:e7:c4:63:54:6d:b7:ba:e1:07:3a:93:09:98:ce:15:d2:
ad:47:8c:3e:a0:c5:d6:c8:f9:f7:d0:c1:d2:f0:d0:4f:6e:42:
d6:f5:2a:d3:f1:68:b4:34:0f:a8:ab:23:64:d4:e9:ef:79:a1:
9e:48:5b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:34 2026 by rpki-client