Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: kb/YQWY4OKbzHBuQtEVDHyZ+e5rEInxuNIlEBKuQ2gI=
Subject key identifier: FE:BF:12:A6:39:86:80:7D:49:00:EA:A7:22:30:BF:60:41:C0:E5:01
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 019D273ABBC9B5F7F832F26E0FF177CAEE74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 0D42
Signing time: Wed 25 Mar 2026 23:00:53 +0000
Manifest this update: Wed 25 Mar 2026 23:00:53 +0000
Manifest next update: Thu 26 Mar 2026 23:00:53 +0000
Files and hashes: 1: KMvjq5V4Ksx01k9TjiIKtXCe5pA.roa (hash: 1beuOrWqdA+O+erqVb2gqs5tEOIpMoZMwqBtE6QzSbA=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: z24PJ7krnY33gyrMIk1XTHWSrI5Q8SNQhfVAV6z72C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:bb:c9:b5:f7:f8:32:f2:6e:0f:f1:77:ca:ee:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: Mar 25 23:00:53 2026 GMT
Not After : Mar 26 23:00:53 2026 GMT
Subject: CN=febf12a63986807d4900eaa72230bf6041c0e501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:9c:4f:d7:e3:e7:50:28:bf:df:01:2d:9b:
a6:d3:95:35:9d:59:b3:49:de:8f:82:58:02:c8:b4:
75:61:4c:8e:4b:48:d7:b7:0d:84:a8:8f:44:59:7e:
73:89:3e:4f:51:75:ee:e6:07:1f:4e:66:18:af:a8:
3c:60:02:09:76:d3:86:fb:fa:d8:45:29:a9:0d:3a:
1e:c4:62:07:38:a3:84:17:5c:11:ea:4c:5c:25:ed:
c9:73:c9:e5:95:2f:1d:40:72:f0:70:85:a7:22:99:
ac:cc:71:36:dc:c3:87:c5:d5:3a:d2:68:39:37:e9:
9a:09:55:2f:98:e5:74:93:d3:d6:0c:77:ec:8c:25:
67:a4:7d:39:50:1b:a2:eb:fd:95:18:61:0b:e4:54:
39:cc:fc:c0:0b:cb:9c:ab:b3:9a:03:42:4e:d6:c6:
1b:30:b8:67:4f:92:aa:d2:0a:4f:37:a1:09:7b:ec:
85:23:44:fd:f5:d6:b2:2f:76:56:e2:0a:b2:37:cd:
29:30:0e:78:39:17:e8:7a:da:13:88:24:f3:d4:79:
4c:92:0f:de:71:70:4d:1c:ef:c2:21:c2:0a:d0:29:
0e:22:5a:61:4b:ef:55:79:3c:f8:6f:c6:c5:e4:9a:
27:79:f1:85:79:14:6e:e6:ca:8d:08:a3:91:7c:0e:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BF:12:A6:39:86:80:7D:49:00:EA:A7:22:30:BF:60:41:C0:E5:01
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:78:e4:fc:d5:11:c6:52:64:38:25:e1:4f:c5:a6:37:7c:19:
e9:99:3b:3e:6e:86:fe:93:c6:d7:b4:e8:a9:88:4e:50:1d:d4:
65:df:bb:9e:35:c8:c2:cc:10:6e:70:0d:53:96:ea:25:c3:0c:
e7:c3:8c:34:aa:a4:a5:90:bf:06:e0:42:b4:98:5c:eb:db:6f:
a7:a4:59:9a:a6:e0:63:67:e5:ea:fe:1f:46:95:d9:16:65:a4:
80:22:b8:d2:8c:a7:68:31:2a:86:a1:d9:d1:04:e7:39:31:5b:
c9:88:90:4f:c7:06:20:75:5f:77:0e:0f:b9:1b:2d:b3:09:d2:
61:ac:ef:9b:df:d0:52:af:a5:cb:78:36:0a:97:a2:e7:d2:51:
ac:a1:7d:2d:ae:59:1b:b6:61:fe:1d:f8:4b:fe:6a:ba:23:ab:
d4:7a:a4:1a:15:08:40:8c:b4:c9:c7:7a:ab:f3:ca:4c:9b:4d:
67:b7:b4:cf:4c:45:48:08:b0:93:92:7d:22:ec:8e:fc:df:d3:
50:fc:28:87:83:40:9b:76:18:13:30:8c:7c:fe:fa:c5:75:8b:
b2:da:af:e7:5d:0a:42:64:a7:a6:cd:f1:8f:2e:f1:10:42:03:
7c:c2:f5:3f:f6:bb:f2:36:11:2f:f5:2c:eb:9a:f3:d1:ca:bb:
b1:74:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:26 2026 by rpki-client