Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
File: DkGjlotidBs200i-DSyRxdSxM6I.mft (raw, json)
Hash identifier: BLA1itFActdTxFsIonYBx7cC+Ng6GPzwexMUmFU45ak=
Subject key identifier: 38:10:4D:D4:08:FC:CA:1E:69:99:5A:AC:05:5E:DE:53:A8:5D:BF:5E
Authority key identifier: 0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
Certificate issuer: /CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Certificate serial: 019D2A04D43F748E08DEB3CF5265A7403DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 12:00:52 +0000
Manifest this update: Thu 26 Mar 2026 12:00:52 +0000
Manifest next update: Fri 27 Mar 2026 12:00:52 +0000
Files and hashes: 1: 8zauiXBaFMH5VLxzsSvMEUumaxQ.roa (hash: sJvy2vx8n7/hTOLyUNRFHLLiMRYWbPfkI+7/KsQidiw=)
2: DkGjlotidBs200i-DSyRxdSxM6I.crl (hash: WD/F5nl4CQt8MVE19ZBQXCkLjCHDTZ6yPWdTr6AbqrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:d4:3f:74:8e:08:de:b3:cf:52:65:a7:40:3d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Validity
Not Before: Mar 26 12:00:52 2026 GMT
Not After : Mar 27 12:00:52 2026 GMT
Subject: CN=38104dd408fcca1e69995aac055ede53a85dbf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:02:e9:f5:1e:0e:6c:26:3a:67:17:72:d1:
82:4a:b5:7a:a5:61:b5:7b:3a:9f:5e:44:c7:9e:4e:
46:56:f6:a9:79:e3:3c:e5:99:8c:92:05:42:1b:8e:
28:1a:eb:17:49:59:13:e1:19:e6:de:4b:df:75:bf:
85:62:a7:0a:51:21:33:fd:e2:d7:7a:ff:56:d0:42:
07:17:48:aa:26:94:b9:4c:66:6c:33:84:73:01:25:
81:81:9f:25:25:b1:35:7f:9c:a6:a6:06:90:d2:9f:
ee:e7:ac:c2:77:0a:d8:0d:81:b3:ae:fc:78:ef:92:
e4:75:1e:62:31:48:08:e4:94:8b:42:80:c4:0b:a3:
20:02:ef:ea:7d:bc:fb:b4:28:aa:1a:da:bd:78:67:
1f:aa:eb:0c:79:69:f6:ec:07:75:94:9e:d3:d8:98:
7a:81:2e:ea:b7:70:83:4e:18:f2:64:61:8a:ef:4f:
81:7f:ae:fa:66:90:55:60:2e:00:4a:38:1c:e2:f8:
d2:fa:35:c2:7a:79:22:84:b3:e1:cb:d3:00:55:b4:
16:13:0b:ef:60:81:1e:71:31:7d:85:1f:4d:c6:0c:
39:03:a6:32:00:82:c0:7e:20:54:20:a3:c1:e7:71:
db:89:8b:89:b0:d8:10:91:1e:cb:5e:f1:62:cc:35:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:10:4D:D4:08:FC:CA:1E:69:99:5A:AC:05:5E:DE:53:A8:5D:BF:5E
X509v3 Authority Key Identifier:
keyid:0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4c:2f:97:37:ed:ad:c8:f8:d4:68:23:bd:fa:6e:bf:3e:18:
ef:c8:4e:57:69:0e:91:d5:39:f4:9e:7e:39:40:13:44:5c:39:
d3:57:7b:89:1e:a1:39:54:6a:07:6a:e0:f7:29:e7:62:63:4f:
7d:b6:db:66:37:47:a5:24:99:bf:8a:47:61:91:de:37:38:23:
3e:6d:e2:9e:7b:2f:55:f6:1a:aa:44:65:b9:6d:47:c5:00:13:
15:24:12:82:7f:fc:99:72:f1:8b:38:57:2c:1e:74:5a:c9:4b:
b0:8f:ef:1e:a2:8c:4d:3b:cf:41:16:8c:80:57:83:55:80:7f:
50:13:ff:c4:21:3b:ec:64:aa:6f:e3:6d:fe:d0:c7:4f:a1:b8:
8b:d2:3d:76:6d:15:df:ad:29:dc:db:cc:38:49:8e:9a:9f:a2:
e9:96:d4:24:1f:07:13:0e:46:48:7a:a4:7f:71:d0:9c:9d:56:
e0:22:37:dd:40:07:e1:5b:57:96:bc:4d:2e:01:de:1a:17:79:
28:e1:08:38:4f:9f:49:ba:a4:32:c9:40:88:46:da:db:d7:73:
69:5a:72:63:5f:5d:01:2e:4b:77:13:fb:a7:b2:a4:dc:fe:5f:
88:ac:88:c4:b7:c2:c5:79:20:45:0d:19:70:3a:1e:9d:67:fe:
2e:d4:7e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:40 2026 by rpki-client