Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json)
Hash identifier: 0FKoTrMiN/s8DP2R9csc1rqh+F8jo6LrSN8iKRbf66Y=
Subject key identifier: D0:D6:67:0E:96:49:96:FD:5E:F1:86:BD:13:74:9D:08:53:67:83:B6
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial: 019D25F15511F5261D7E1E61C5720E92AA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:01:06 +0000
Manifest this update: Wed 25 Mar 2026 17:01:06 +0000
Manifest next update: Thu 26 Mar 2026 17:01:06 +0000
Files and hashes: 1: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: r8i1MPjcQZkyAms/f7Noa+lG9zcKEj6ptLMEBEGcNsQ=)
2: etj0sShjec2CBR92UCLlU4OhoHU.roa (hash: T3WyGa+EDgJcqKV7smiXEGZnclSaocbCUmsz9FP6vjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:55:11:f5:26:1d:7e:1e:61:c5:72:0e:92:aa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Validity
Not Before: Mar 25 17:01:06 2026 GMT
Not After : Mar 26 17:01:06 2026 GMT
Subject: CN=d0d6670e964996fd5ef186bd13749d08536783b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:13:31:c6:91:3e:75:d1:37:47:aa:e9:96:
69:dc:a5:f7:15:53:ce:a3:df:bc:1a:20:f4:a5:68:
a8:43:a9:95:e0:20:bf:39:fb:18:c3:09:57:bd:17:
58:0f:2b:76:55:77:72:fb:0f:18:16:9a:8b:15:2d:
81:69:08:bc:2d:74:8f:ba:20:9f:bc:ee:e7:d5:b5:
df:e4:61:fb:1c:6c:a5:ae:b1:5b:b0:6f:df:17:ad:
6e:56:f5:16:29:67:7f:28:24:f3:6b:ca:cc:a4:19:
30:ae:5f:9a:01:e7:ea:a0:a2:05:3c:24:04:e4:bb:
af:46:ea:31:2b:15:68:0a:2c:dd:e8:20:2f:23:26:
2c:07:9e:17:04:67:56:b2:22:c4:e0:9e:79:89:b7:
64:11:2b:bb:05:31:57:24:6a:5b:dc:5c:bb:93:37:
a5:e2:69:19:fb:ad:18:8d:ce:4e:c2:15:b2:0f:46:
91:55:83:2d:d3:87:98:07:1a:ad:ed:ea:f8:81:72:
e9:fd:7b:28:04:02:8f:29:52:e9:12:62:22:ee:4b:
72:32:1b:92:ff:d6:7a:58:a1:97:03:98:67:e0:99:
46:4e:73:ed:4e:40:2c:8c:a1:6b:77:2d:a5:3b:7e:
9e:fd:b2:73:e1:99:22:21:43:40:42:ee:0c:1a:95:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D6:67:0E:96:49:96:FD:5E:F1:86:BD:13:74:9D:08:53:67:83:B6
X509v3 Authority Key Identifier:
keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7e:2e:ed:8c:16:02:20:f7:d7:67:91:10:d8:64:09:2a:d1:
75:56:97:23:79:ba:86:59:86:7e:77:f9:aa:88:9d:68:a8:07:
59:81:94:51:11:78:05:16:80:ed:86:17:92:3c:07:6b:a1:6e:
ff:fe:94:8b:77:c9:68:a2:6d:17:40:26:27:54:31:1a:bb:bf:
f1:87:fc:aa:30:c6:a6:05:a3:15:14:ed:ad:19:1d:b5:5d:18:
c9:4d:9d:35:2d:27:b3:ab:0a:5f:86:77:ba:b1:be:d6:1c:4f:
76:b7:27:1a:8b:33:24:43:2f:9f:47:39:01:3b:44:da:bf:13:
4f:0c:b2:21:58:13:32:7e:b6:d9:00:1a:7c:f5:fc:76:7f:8d:
01:0a:5f:4b:fd:f3:70:f9:25:1b:b8:dd:1f:a8:cf:4e:ed:36:
35:e5:ce:5f:c4:90:98:4b:52:01:8e:a3:09:23:c7:5c:84:11:
4e:2c:81:10:43:61:f4:84:c4:83:ca:32:c6:76:43:e2:30:3e:
10:34:cf:e8:36:45:60:dd:e4:04:fb:ff:b0:8d:b3:1a:7d:f8:
66:88:f3:93:fc:ec:e2:3e:e8:49:96:32:20:c0:de:50:42:8f:
fc:e1:6a:fa:dd:95:f8:db:09:11:00:08:c7:27:87:ed:78:3f:
e1:96:a1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:32 2026 by rpki-client