Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
File: DVX6KmKDfbmv5EI-TBGelJmyG0M.mft (raw, json)
Hash identifier: f1ueC02X6bMAiJb6ml5CPRlsiU8quUX4CjievRiNed8=
Subject key identifier: 1C:DE:74:01:00:C6:EA:B5:65:54:21:4F:23:6F:2B:4E:5B:00:3E:68
Authority key identifier: 0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
Certificate issuer: /CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Certificate serial: 019D273AC4664475FC34E637ADA42A926523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
Manifest number: 09F1
Signing time: Wed 25 Mar 2026 23:00:55 +0000
Manifest this update: Wed 25 Mar 2026 23:00:55 +0000
Manifest next update: Thu 26 Mar 2026 23:00:55 +0000
Files and hashes: 1: DVX6KmKDfbmv5EI-TBGelJmyG0M.crl (hash: VXnvKJVR8XWq5zrao85dioNK25hnnn5eizDA1kYFrdM=)
2: HIeW7jOEPndBeoT23uEj81ZTZBg.roa (hash: JJnVSxNA1ixWdqqkWmZ7PhO+qpLJouZei+s+CRfBSYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c4:66:44:75:fc:34:e6:37:ad:a4:2a:92:65:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Validity
Not Before: Mar 25 23:00:55 2026 GMT
Not After : Mar 26 23:00:55 2026 GMT
Subject: CN=1cde740100c6eab56554214f236f2b4e5b003e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:42:fb:4f:22:97:79:13:9f:f1:2d:1d:63:
e3:8b:d7:b3:6d:d4:0d:c9:0c:8e:86:a5:e7:be:e4:
66:96:37:2a:0b:7f:8c:12:55:a9:50:52:eb:0f:73:
ca:ee:16:4b:7e:01:54:ce:98:58:18:1c:a2:34:f6:
0f:92:72:94:95:da:86:99:ad:14:c4:66:40:e8:b6:
6c:1c:d8:c4:a4:d7:65:36:75:1c:57:7b:86:c3:38:
85:3d:ae:c1:26:13:bb:5c:49:95:b7:1e:69:f3:94:
1a:5f:0b:dd:41:2a:3a:e8:61:c6:26:fa:7c:9b:af:
54:b9:42:fc:ed:1a:f0:e7:0d:b7:97:b3:ee:84:ff:
5d:db:2a:ca:0c:de:02:97:02:e5:e1:53:45:15:a2:
15:df:c3:fe:97:63:a2:3e:ed:5a:fd:56:20:fd:5a:
01:03:2c:ce:de:f8:3c:df:0c:2a:95:3c:62:82:72:
d6:85:94:ad:28:33:7b:d5:c0:d1:1f:f8:d4:c6:e8:
6c:66:d3:00:b7:84:33:45:c6:7c:21:a6:e0:08:ff:
ef:9a:4c:f4:64:d2:88:ab:f7:1c:0b:80:05:29:f2:
9e:5a:8b:66:b1:d7:96:55:3a:0e:65:79:93:86:bd:
9b:14:e4:b0:0e:c3:12:40:c9:19:de:3e:cc:38:39:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:74:01:00:C6:EA:B5:65:54:21:4F:23:6F:2B:4E:5B:00:3E:68
X509v3 Authority Key Identifier:
keyid:0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3c:2e:c5:e3:de:3b:2a:51:44:7c:63:6e:93:f9:c5:84:23:
bb:9f:71:90:cc:95:65:8e:3f:04:79:a5:d2:4b:23:39:af:b6:
51:54:d5:72:4d:d3:1f:a6:98:f8:7a:35:d8:df:a2:12:cb:87:
1b:f8:38:c0:16:46:b6:25:82:b3:a2:75:7a:19:cb:30:19:2f:
fe:af:c5:58:c3:5d:cc:7f:40:57:a6:77:07:10:0d:c8:0b:aa:
85:44:ec:1a:43:41:1a:9c:e4:f3:5a:42:8f:50:50:5a:d9:aa:
96:be:e9:31:4c:44:d6:91:d0:c5:c3:5c:8a:1e:8a:ad:74:0c:
f2:15:5a:5a:04:65:60:63:c2:4b:a0:bb:86:71:f5:a9:ca:76:
17:d2:ee:8d:ac:9a:9c:96:ef:76:18:5e:51:7b:75:64:56:4a:
cb:4e:39:e2:58:fe:7a:0c:f4:a1:9c:ba:0f:bf:70:ad:2b:e9:
b2:05:0b:c8:f2:55:67:21:0d:44:44:97:e2:a6:6a:bd:69:8e:
df:59:df:5a:e5:6b:20:c1:01:57:53:4f:bc:78:03:4d:83:e5:
d2:65:a6:23:66:1f:e9:10:4a:a3:a0:3c:fd:07:7e:33:89:29:
d9:21:bd:5b:8e:7d:aa:76:d3:2d:a5:84:a2:60:ec:46:48:b3:
29:1f:17:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:10:57 2026 by rpki-client