Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier: eDy/amE2yIknoClFdasuy2U+B4TsGh/S8xrujeTyTwE=
Subject key identifier: E2:D9:B0:1C:82:5F:4E:2B:24:2B:DB:1E:BD:B8:12:62:9C:E6:F4:41
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 019D26CCC1F1636A083A214A15CF60BA537D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:46 +0000
Manifest this update: Wed 25 Mar 2026 21:00:46 +0000
Manifest next update: Thu 26 Mar 2026 21:00:46 +0000
Files and hashes: 1: B6KgFpwvViQTEk9Dmhs8MfS-w7s.roa (hash: OhVWCZDoCQizES2xkeCkzPUeD4jK/eG28KZNwsfJC3Y=)
2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: f060HP43rLo0y0w7t/iFiHM+asAB1hRpvc71n9FOq/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c1:f1:63:6a:08:3a:21:4a:15:cf:60:ba:53:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Mar 25 21:00:46 2026 GMT
Not After : Mar 26 21:00:46 2026 GMT
Subject: CN=e2d9b01c825f4e2b242bdb1ebdb812629ce6f441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:7f:d7:66:34:87:bf:23:e3:2d:f8:cd:05:
0e:5a:fc:86:83:18:74:44:04:34:a5:94:9c:12:bd:
76:94:57:08:43:fb:73:7a:14:2e:d7:0d:59:53:58:
67:9d:0c:79:c0:6b:c1:22:15:f5:fa:5a:5f:a3:44:
c0:b0:c5:89:c9:b2:31:e6:26:b4:aa:c6:07:8e:d0:
89:de:17:bf:f2:51:98:f5:30:11:66:b7:10:b6:66:
1b:22:66:2c:77:d2:04:62:e8:41:da:3f:be:44:83:
3a:4c:d0:e4:9c:bf:37:ed:d4:a4:80:5c:14:b9:a3:
9a:17:fa:43:b8:52:3f:ff:8f:a6:08:e5:92:3d:26:
bc:4c:46:0c:94:54:c4:37:d9:e0:b4:78:36:b6:30:
2c:cc:43:4a:13:84:84:aa:4e:28:d8:73:d7:81:10:
58:df:bb:ff:5c:be:e8:5e:a1:50:14:ee:49:a5:3b:
4a:29:b1:6a:b0:63:3a:22:70:76:ef:15:83:ee:16:
22:a2:b0:34:ec:00:fa:b6:ed:30:03:a9:75:59:96:
71:b8:df:8c:55:29:8b:9c:7f:cf:a6:0c:8f:b8:0c:
43:6f:1e:91:62:94:c2:3d:77:72:19:3a:c4:2e:ae:
a8:a6:cb:89:52:e9:53:92:45:60:e1:c9:a0:c1:bd:
7e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D9:B0:1C:82:5F:4E:2B:24:2B:DB:1E:BD:B8:12:62:9C:E6:F4:41
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:01:5e:c1:0e:0f:fb:59:a0:7a:21:3e:a7:d2:69:83:5a:d8:
93:de:19:c5:dc:1d:bd:58:a5:66:81:7d:47:c9:26:32:5f:ff:
64:14:f7:c9:ff:67:78:ad:c7:4f:05:da:49:80:7c:93:7e:ea:
44:31:7f:32:b1:54:3a:a9:24:9c:ae:57:25:c5:13:52:75:fb:
9d:a4:dc:a7:1f:be:d4:6d:4e:25:ff:b8:79:73:d8:95:6f:c8:
20:36:2b:3e:d4:ed:27:29:36:6e:23:d9:c6:ad:bf:94:4e:46:
45:00:f3:81:c6:75:67:f1:87:16:7b:c3:a2:3d:6e:f9:6f:25:
82:78:da:a4:3d:d2:ce:cb:46:b7:36:a4:62:fd:a5:38:b4:10:
3f:32:fc:ba:34:24:6a:20:20:58:04:41:63:77:25:62:b0:76:
fd:15:d9:32:71:ac:00:cc:f9:0f:86:97:0d:eb:03:c3:32:93:
1e:13:da:02:d4:09:29:92:aa:7e:ea:ac:bb:b4:80:4e:ba:81:
07:b5:a4:6c:ae:d6:e3:40:37:65:5d:19:ca:7d:30:b0:b7:24:
6f:58:30:4a:9c:81:37:bf:5e:11:2c:ab:51:91:f4:3d:1a:31:
b0:21:f6:19:0c:89:1c:f3:a2:ed:4e:e3:d6:10:0d:1d:23:6c:
52:d2:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:35 2026 by rpki-client