Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier: QXzB3xu5UIBEfvR5tXgSseCYtJk8z0UZC0cqkALwYkA=
Subject key identifier: 75:B8:4F:AC:C6:D3:91:BE:78:FC:AA:1D:46:A7:60:3E:26:BE:99:52
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial: 019E1ED9F292756EA08BD24ED651B99D6A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number: 190C
Signing time: Wed 13 May 2026 01:01:00 +0000
Manifest this update: Wed 13 May 2026 01:01:00 +0000
Manifest next update: Thu 14 May 2026 01:01:00 +0000
Files and hashes: 1: DkVdvbXhpbo9CQqVcVFBg1LNoNE.roa (hash: qaF1R+er71d5hFs2KTiNhXAjh56KPYgioy+6tvssIEE=)
2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: 0mzuaKiIgH1+esIIpFBPmSN6FFeQVhK7elf/CA2l4Wo=)
3: WIQ88PUyl0Wn69b9mzqB92sF45M.roa (hash: ATP8ajAQ0MqjrK6hyWC+m5lGC/lxKRtV3XstqqIRErs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:f2:92:75:6e:a0:8b:d2:4e:d6:51:b9:9d:6a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Validity
Not Before: May 13 01:01:00 2026 GMT
Not After : May 14 01:01:00 2026 GMT
Subject: CN=75b84facc6d391be78fcaa1d46a7603e26be9952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:48:ea:1d:7e:10:64:57:a3:92:96:40:da:
25:1f:c9:7a:5a:9c:13:a6:f2:cd:03:d2:98:e6:78:
9d:ce:db:56:d2:04:0f:5f:28:12:7e:04:26:99:8f:
37:30:2f:a3:9c:13:23:e7:ff:d3:52:5a:16:18:79:
61:ff:d8:b4:83:2e:df:a4:01:e9:16:2a:43:52:72:
88:12:a6:3a:e2:36:16:2d:ee:e3:67:48:ff:68:fe:
32:b8:29:08:8a:01:5d:98:25:e6:7d:55:87:3b:77:
21:0d:7e:39:e5:d2:a8:09:32:06:60:93:c7:15:0a:
f8:f0:fe:94:02:79:41:ff:3a:e2:91:9b:4e:9b:e7:
77:79:d5:83:dc:3d:1b:00:0b:a6:63:d8:51:2f:bf:
04:11:c9:54:41:4d:88:57:dd:f0:9e:7c:9a:7e:5d:
e0:e3:61:ef:da:8a:67:7b:8a:61:a1:2e:a7:d4:54:
ba:54:cd:82:fe:77:0e:db:93:68:bb:d1:43:65:f8:
bc:f4:04:27:cf:8d:e4:61:0b:d1:b1:af:c2:46:f7:
a1:ed:d8:c6:fc:af:15:37:06:64:de:d0:97:56:b3:
9a:f3:73:eb:cc:a1:c2:03:4d:cb:ec:c5:c2:e5:53:
ec:13:f1:fb:77:bb:8e:d7:21:f7:42:99:a6:5d:16:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B8:4F:AC:C6:D3:91:BE:78:FC:AA:1D:46:A7:60:3E:26:BE:99:52
X509v3 Authority Key Identifier:
keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5f:2c:5d:03:a8:42:18:a8:db:72:59:c9:a7:0d:52:1e:8a:
f9:3d:f0:c5:b8:eb:09:5c:31:c9:52:38:e9:0a:94:05:28:1a:
ec:d7:db:1e:12:f6:1d:21:a3:29:67:e4:17:f7:5c:bd:4c:cd:
1c:a5:77:79:46:21:c8:44:85:31:06:d6:bf:4d:5f:0c:1b:94:
8f:5c:7a:43:61:d9:1a:a9:ee:9c:b1:a2:64:b0:b1:9d:40:8c:
18:f6:97:b5:f8:12:d8:d9:47:19:39:b0:37:34:79:b1:a6:12:
dd:1e:bc:3b:c3:c5:00:e1:d8:ab:37:07:7e:8c:33:9a:97:d3:
0c:e0:59:fa:4d:3d:8e:9a:0d:18:1c:c5:6a:07:0b:43:eb:cd:
93:b6:5d:43:0a:73:0f:73:f9:1f:ce:40:5f:5a:fe:62:59:03:
92:7d:55:a2:c1:65:1d:cb:5d:39:89:28:4c:c2:77:68:66:10:
9b:c5:a9:21:03:25:49:30:95:8d:0e:2b:eb:e7:cd:37:86:60:
b6:cd:65:e4:5f:2d:ce:0f:67:fd:a0:81:b5:3b:9c:6f:be:a1:
ce:91:94:89:65:96:a2:55:9e:b9:23:5b:11:ba:80:5b:ae:57:
f2:dc:43:25:92:53:f1:ea:71:a8:55:0a:0b:8d:b9:4e:35:84:
47:b4:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:41 2026 by rpki-client