Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: 7lVfYXcL8uBV3w9dkLX43gWJ1Dg9tMTkmv4a2GmBSos=
Subject key identifier: 17:0B:0A:AA:16:04:C1:D9:FE:9F:4A:A6:4E:7D:AD:62:68:A3:9C:28
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 019D2771D238A564EB8032727D669CCF895F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: BzyRKVh8G6MxV92pq1WYXw5su3Y.asa (hash: 3hX1G/8KfCcJykl9PaVXJ9wMH1P2QICFRRtGllgYDUo=)
2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: XDu6hvhvL9zRdPTYuRXiCfF+cw+EwNPr/o86m8iOr2A=)
3: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (hash: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d2:38:a5:64:eb:80:32:72:7d:66:9c:cf:89:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=170b0aaa1604c1d9fe9f4aa64e7dad6268a39c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:d3:60:6a:79:37:8b:00:2c:3d:dd:18:8b:28:
0b:3e:8a:af:3a:8b:49:93:3b:e6:45:c0:2b:e5:75:
42:04:3c:29:0b:bd:55:0c:9f:40:cd:be:8a:b1:5c:
5c:10:4b:8e:75:5f:e1:d0:f0:41:02:8d:fb:8f:53:
08:cc:c5:32:a8:a8:50:2b:db:31:d5:91:6b:a4:e2:
b6:37:af:b8:dc:8b:3d:89:23:9d:d9:d5:02:cf:3f:
bb:d7:f8:3f:1a:9b:7f:05:26:51:56:9d:df:1c:41:
49:4e:ac:df:8c:d1:5b:0d:ab:08:e1:ef:e7:e5:de:
62:7d:5f:33:55:8e:f3:f9:4f:5f:b4:93:e8:6a:e8:
9f:3f:3c:62:3a:f5:88:33:56:2d:0f:be:e1:44:2a:
9f:11:52:27:d9:c6:99:48:36:fe:70:3c:fd:62:36:
5b:8b:b8:2a:8c:01:2b:45:45:28:c8:43:d7:48:49:
38:a8:d3:93:16:a4:1b:43:85:57:d6:34:8d:bb:e1:
56:78:5e:2b:d8:4e:89:ce:ba:29:3e:8b:c8:6a:12:
1d:7b:eb:44:df:4e:28:9a:0c:f0:5a:b7:85:97:0c:
10:5c:be:83:bb:e0:3d:d4:f2:0e:81:94:88:b6:40:
d7:dc:5b:f3:03:2e:55:8a:92:31:97:15:ec:74:a1:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0B:0A:AA:16:04:C1:D9:FE:9F:4A:A6:4E:7D:AD:62:68:A3:9C:28
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:51:f0:f7:06:c9:84:d0:9a:6e:07:d6:09:ef:ae:eb:b3:f8:
06:5f:e6:01:0d:37:ef:c3:f7:ef:a9:e5:86:99:c4:d3:39:1f:
4f:12:84:93:c4:0e:ca:df:a0:64:80:15:eb:9f:1f:45:8c:1f:
b6:9c:b7:cc:f0:f1:fa:86:2a:85:b7:74:47:21:91:f4:54:81:
37:86:49:c6:37:68:11:21:d3:eb:c7:4d:e0:d9:ee:63:a7:bd:
3f:8c:e6:42:85:83:b3:64:8d:00:2c:59:25:20:d8:f6:07:0b:
e5:c7:31:29:b4:97:2b:a9:c4:7f:db:fc:7c:6a:cd:af:fd:3d:
9b:ed:f0:f5:e8:c9:e0:c2:15:7a:c3:15:af:b4:f0:35:ce:f4:
d2:87:13:3c:ea:b9:22:d8:6c:b4:0c:86:08:63:50:d2:3f:77:
cf:b2:fb:3c:86:11:d5:42:b4:57:1b:0d:2a:17:61:3e:96:ab:
32:01:f0:55:b7:ff:6f:a6:52:e8:9b:d8:58:d6:97:2b:d8:b3:
90:77:50:66:e2:86:5b:76:f4:1d:c5:5d:43:78:2b:45:a3:18:
c8:38:ff:43:bc:8c:00:9d:14:3d:36:f5:56:5b:8e:13:ae:d3:
92:d5:ee:3e:01:97:79:25:e5:b6:00:64:5d:9d:32:8b:fa:83:
7b:06:2a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:46 2026 by rpki-client