Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
File: dtS8ie60qcifEAXqrSJ8EyXtFWI.mft (raw, json)
Hash identifier: nSvxSnfm3a/EEj7WcyFzJn1HbtDvxjYvYsh0J1SMcHg=
Subject key identifier: 43:F6:06:80:7B:6D:1C:31:28:E6:DA:7F:E7:19:C5:D1:8F:AE:DA:D3
Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
Certificate issuer: /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Certificate serial: 019D2A725D4D33C4DBB0D576BAD8357398B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
Manifest number: 0BA3
Signing time: Thu 26 Mar 2026 14:00:31 +0000
Manifest this update: Thu 26 Mar 2026 14:00:31 +0000
Manifest next update: Fri 27 Mar 2026 14:00:31 +0000
Files and hashes: 1: 6pce1ex-9vMX3hxl4PHX2_iHdWU.roa (hash: 3DNO1VoVFCiygl4uZClSk2LR5+gj2SCI6v1gbjKpRWE=)
2: 7uEWRZhuKrrLrbz68WNBnRtyak4.roa (hash: lE6tlE6mE+L1kYKEpT6B92Zv+jxsgj3WHZA7o8EE7DM=)
3: dtS8ie60qcifEAXqrSJ8EyXtFWI.crl (hash: CeflqhW4dargv2EWCy0zhDbEVRCgJ1z3TXxSsFUePxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:5d:4d:33:c4:db:b0:d5:76:ba:d8:35:73:98:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Validity
Not Before: Mar 26 14:00:31 2026 GMT
Not After : Mar 27 14:00:31 2026 GMT
Subject: CN=43f606807b6d1c3128e6da7fe719c5d18faedad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:d6:0b:cd:b6:09:41:d0:e1:41:42:fa:b0:
28:25:de:a6:6d:76:10:08:e2:59:ab:13:d9:24:b4:
09:7d:8d:bb:40:87:82:ad:e1:4d:3b:d4:17:78:74:
41:a3:37:83:d0:89:d3:6c:16:6d:0f:5c:5a:7b:05:
8d:9f:ee:2e:0c:2b:9f:62:78:a1:4a:f8:25:47:9f:
0b:06:ab:f1:cb:b8:a8:20:75:6a:87:d8:6d:dd:1b:
a8:54:04:ef:7c:48:da:62:bb:ff:44:1f:70:0b:c7:
02:0b:68:ba:0e:c6:b1:52:44:17:ca:46:ad:e5:8f:
d4:e6:f9:6d:0b:11:93:52:ed:07:4b:c4:4c:c4:75:
17:01:28:ba:1f:2c:38:08:5d:79:b8:e8:6f:11:b0:
f2:37:20:c7:06:92:b2:72:1f:c8:5f:91:e0:54:10:
49:ae:b0:14:24:77:c1:12:69:4a:de:59:3a:4c:8a:
5a:87:1f:1b:0b:e1:54:93:fb:de:e7:8b:88:b7:d0:
6b:2b:a2:51:4f:83:1d:2c:64:f4:fd:5c:23:36:1b:
dc:a8:07:56:00:1c:4e:e7:f8:93:c7:11:2b:c0:ad:
d5:a9:20:2b:f0:0e:cc:f5:40:ce:fe:f1:5f:fa:14:
a5:96:d7:6f:80:07:45:67:47:f3:a3:5e:72:9e:b9:
8d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F6:06:80:7B:6D:1C:31:28:E6:DA:7F:E7:19:C5:D1:8F:AE:DA:D3
X509v3 Authority Key Identifier:
keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:fd:5b:f5:78:39:63:29:c8:5a:0c:58:57:56:f4:b8:18:21:
79:7d:af:7c:76:de:96:10:e3:d9:c0:84:a4:5b:d0:33:49:9b:
b6:40:16:4d:43:ad:4c:a5:0c:9a:9f:18:a1:ad:e1:85:cf:2c:
28:a0:b6:e0:16:63:02:be:23:04:15:5e:c3:a1:b8:c8:2d:1a:
c5:49:44:a7:d1:8d:ba:ef:a6:92:fc:00:fd:84:df:a5:f8:cf:
84:0d:25:71:90:5e:62:db:d8:a0:4e:3e:cd:bd:3d:da:86:39:
ed:c0:3e:bb:13:c4:5a:af:68:f3:ab:ea:03:b4:b7:48:a6:64:
af:5b:0e:65:7b:db:35:8f:6b:bc:0f:7b:85:b4:c9:2f:3a:38:
a6:5b:6a:22:2c:8c:3d:b5:38:81:05:18:18:c3:f9:f3:f7:88:
16:f8:74:00:73:c8:4c:af:d3:36:55:10:60:8b:ca:d5:0c:c9:
0c:71:0a:bd:5f:80:7e:b4:dc:d3:fa:da:0f:db:59:34:c6:84:
ea:a0:95:b0:e8:df:04:c0:3f:4e:a0:69:e4:87:d1:f4:77:28:
64:9f:93:f7:de:18:4d:d9:54:ac:ff:a9:d5:b6:3b:5e:67:aa:
5a:ee:1f:56:bc:3c:66:82:14:4d:94:8f:55:41:0e:d2:da:71:
2b:19:aa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:56:04 2026 by rpki-client