Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier: fezqdJ5VJ1wl6QtBbiMfK/mut6xcDJB9aBLJMnce0ow=
Subject key identifier: 28:01:D0:F3:F4:7A:11:D9:02:AB:EB:46:F2:56:C9:47:7A:CB:D9:95
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 019D29973445A250554973157AEC34869B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 10:01:08 +0000
Manifest this update: Thu 26 Mar 2026 10:01:08 +0000
Manifest next update: Fri 27 Mar 2026 10:01:08 +0000
Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: CjjBpPaX6tNKDL7Psx5BVWGUKLfNLpKg0dbU2TXsLTw=)
2: UHX8LoJItxLXbSSkLElmcrzzhts.roa (hash: j+K6pcnA4SNCVnoj07hqtnhu76mvNIjpIA6tG3zdI5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:34:45:a2:50:55:49:73:15:7a:ec:34:86:9b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Mar 26 10:01:08 2026 GMT
Not After : Mar 27 10:01:08 2026 GMT
Subject: CN=2801d0f3f47a11d902abeb46f256c9477acbd995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:47:f1:db:01:42:32:55:e3:35:87:07:70:
df:3f:53:87:4d:9e:8b:1c:e6:e0:2e:be:99:36:63:
ae:63:48:84:24:61:34:40:46:22:29:40:c2:76:6a:
86:19:54:37:f4:8e:84:c8:ac:f4:c4:79:f5:34:70:
75:63:1c:af:6d:5e:74:bc:d2:5a:cc:a1:74:ff:86:
3d:f9:53:7c:aa:93:e4:70:f1:2d:09:c7:b5:02:78:
8f:98:a2:93:06:e1:cc:38:95:76:d6:e8:47:9e:de:
0d:81:dd:83:65:ad:f8:3e:f0:33:a6:b3:57:77:e6:
50:54:6a:2f:f0:aa:c4:a8:e5:61:44:10:b8:2a:2a:
45:b1:c0:09:75:4b:9c:33:e1:17:07:31:56:c6:3d:
bb:18:5b:3a:07:9d:c8:1b:53:c9:ed:d2:f8:d0:a2:
a6:b4:ef:fc:ed:ce:60:dc:32:65:46:9c:e1:74:92:
65:7d:ef:9c:98:c4:8b:25:76:ee:af:78:79:85:61:
72:59:ec:b7:12:9f:07:6c:1a:28:77:f9:a5:d4:cd:
03:e6:b5:0e:c9:f7:22:af:bd:d3:72:b8:1b:bc:fe:
7f:ef:55:c3:6f:3f:0b:46:26:ae:5c:ec:aa:68:9d:
17:a5:9e:eb:f2:15:4a:a5:43:6c:2a:d3:69:ca:d0:
54:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:D0:F3:F4:7A:11:D9:02:AB:EB:46:F2:56:C9:47:7A:CB:D9:95
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e5:22:0b:a3:11:60:30:4f:b8:cb:5f:6c:9a:04:73:67:3f:
35:7f:2d:02:7f:de:57:6e:6c:6d:35:e7:ad:1d:fb:d5:a6:d9:
b5:27:89:d9:f1:eb:2d:44:42:a9:a8:30:02:7b:18:0e:69:32:
e8:83:34:6c:a0:88:69:9c:ec:18:0f:59:eb:1d:a9:2c:4e:fc:
26:cf:37:5f:df:2e:23:17:2c:68:67:b5:9a:83:53:cb:b3:8f:
12:30:ae:7a:b1:47:31:68:97:22:21:3f:57:a4:00:5e:d9:6f:
fd:5d:5b:53:f1:cc:9d:75:b7:38:95:c1:7b:d8:1e:1d:be:4e:
48:cb:fd:1f:89:c0:05:36:17:cd:06:bb:49:1a:fc:86:6a:ea:
9e:66:96:1f:69:e8:af:5c:d5:2c:a7:98:5c:df:ec:f2:c1:ac:
a4:69:61:4b:f8:58:1b:a9:1b:70:12:d1:2d:ab:61:2d:c3:5d:
91:98:71:cf:b0:db:89:bb:47:4b:c7:b0:28:c5:44:16:3a:03:
97:29:11:73:ef:a1:9c:0d:00:4a:23:69:4f:40:19:79:c1:8a:
09:ab:50:e9:d0:ce:2e:9d:87:6e:7f:18:5c:3b:2c:a1:c7:3a:
da:d7:8d:c3:07:ca:a8:17:e7:ff:68:81:86:e1:bc:2d:b2:c9:
0a:df:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:52 2026 by rpki-client