Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier: m2q97SxGwwbpyruaQ9u49nwlbSLp5ClMm+/JhrJlBWY=
Subject key identifier: 2E:7B:23:0C:80:09:C5:48:B9:0B:61:55:57:BE:69:29:9A:60:A1:32
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial: 019D27A88B91F63ED3E260D67276D45D14B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 01:00:50 +0000
Manifest this update: Thu 26 Mar 2026 01:00:50 +0000
Manifest next update: Fri 27 Mar 2026 01:00:50 +0000
Files and hashes: 1: DkVdvbXhpbo9CQqVcVFBg1LNoNE.roa (hash: qaF1R+er71d5hFs2KTiNhXAjh56KPYgioy+6tvssIEE=)
2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: QFMF0dOMublHhLu7jxsL37wJlTQXfHYN6KS+i5meGlw=)
3: WIQ88PUyl0Wn69b9mzqB92sF45M.roa (hash: ATP8ajAQ0MqjrK6hyWC+m5lGC/lxKRtV3XstqqIRErs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:8b:91:f6:3e:d3:e2:60:d6:72:76:d4:5d:14:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Validity
Not Before: Mar 26 01:00:50 2026 GMT
Not After : Mar 27 01:00:50 2026 GMT
Subject: CN=2e7b230c8009c548b90b615557be69299a60a132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:d2:60:6c:c5:be:68:68:e2:13:a3:cb:b1:
11:68:ea:44:01:4b:eb:53:ee:57:25:78:e3:74:e8:
dd:da:6c:69:33:d8:4f:50:07:6d:85:6e:4a:b8:50:
c2:d9:56:12:a6:3d:50:9b:69:06:b8:5b:81:97:f6:
4f:94:bc:f5:00:45:45:80:f5:ff:86:c6:f8:f5:36:
07:1a:d9:8a:68:34:8f:b2:f4:0d:69:b4:cd:24:fc:
20:12:7e:f4:8b:c0:fe:66:1c:dc:6a:99:07:5e:20:
2b:3d:28:41:72:e7:05:8a:9f:69:12:9b:75:1e:cd:
51:7c:4d:12:4e:37:c1:4e:09:7e:7e:64:22:9d:0e:
d8:94:56:1f:4e:88:6e:91:20:91:ad:4a:52:f4:7d:
5b:0b:47:cb:e0:2b:6a:16:5e:fa:4b:a5:92:64:62:
b0:8b:24:01:6d:02:23:1e:17:e0:29:83:23:42:a6:
a1:bf:f3:34:2f:5d:e8:2d:8f:38:05:5e:7c:46:69:
f6:96:60:59:7c:55:24:ca:95:60:15:10:ef:df:3b:
1a:bc:36:0f:0a:41:0d:d2:1b:a3:23:83:23:f6:b4:
12:26:3e:90:c3:8e:2f:40:7e:df:bc:52:84:38:c6:
84:ee:75:14:5e:7f:ba:fc:11:49:b0:23:07:46:eb:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7B:23:0C:80:09:C5:48:B9:0B:61:55:57:BE:69:29:9A:60:A1:32
X509v3 Authority Key Identifier:
keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9c:e7:61:db:dc:ba:08:60:07:77:f5:96:27:bc:3c:58:93:
21:74:1c:8e:56:dc:8d:95:f5:77:df:f8:a3:9c:b3:b8:f0:2f:
f6:2f:02:b3:60:68:a2:2a:0f:9b:e5:1f:5c:51:37:e1:b4:3d:
30:4b:c7:fd:f7:b3:34:bf:57:fc:e8:d0:52:f2:8b:c8:94:c6:
74:55:57:22:1a:c8:1f:2d:1f:5b:d7:32:3d:8b:b9:32:d2:fc:
6a:a0:0b:22:24:8c:eb:e0:33:c4:b1:f4:0e:93:65:dd:83:aa:
0d:ab:f4:d3:d9:e4:62:ce:d2:9b:09:0b:c7:5c:92:9b:39:4d:
24:9c:af:74:aa:6d:08:eb:8b:3a:01:be:98:be:37:81:88:af:
3d:2e:24:6e:25:83:67:a0:3f:2d:b9:76:70:ee:c0:1f:dd:13:
09:c0:57:56:89:9e:1e:d8:d1:ce:8b:79:2b:1e:75:be:de:2a:
b7:93:0e:a9:4a:28:9e:84:30:9a:f2:3b:5b:22:19:17:d2:ae:
6e:f5:f0:d0:29:19:27:0e:0a:01:24:fe:d5:5e:ac:ae:0a:1e:
70:2a:f1:70:d3:70:bf:3e:78:90:10:87:e5:bc:c5:af:f9:0f:
e0:75:6e:11:1f:e7:45:18:95:e5:eb:f8:fd:36:51:b5:5b:f0:
0a:ee:c8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:23 2026 by rpki-client