Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File: Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier: 5OcaNvhATgS4rK1tNntxqe4/17oiiZwyF/CSkoAfHns=
Subject key identifier: 08:16:55:CA:7C:6F:D1:E4:7F:47:BA:9E:14:92:08:2A:75:F8:C4:B1
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial: 019D29CE9B185EB0203DFB1FF5664C38CE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 11:01:39 +0000
Manifest this update: Thu 26 Mar 2026 11:01:39 +0000
Manifest next update: Fri 27 Mar 2026 11:01:39 +0000
Files and hashes: 1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: +e2RA6lMt5JXRfg4R+PfqK+yhvZkMEvFHoTd5995Iog=)
2: SAugkdRYnSv4ry8bG61AtXCsozo.roa (hash: sEeAFM3bNI/ojfTwt1bUnazn3tLdAyJRyAzUqk6sRNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:9b:18:5e:b0:20:3d:fb:1f:f5:66:4c:38:ce:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Validity
Not Before: Mar 26 11:01:39 2026 GMT
Not After : Mar 27 11:01:39 2026 GMT
Subject: CN=081655ca7c6fd1e47f47ba9e1492082a75f8c4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e4:c4:bb:b9:6b:80:38:5d:77:6c:77:b3:0b:
ff:1c:0b:f1:6d:b0:66:cc:f8:c1:91:db:03:56:6b:
40:63:5c:e1:b0:ba:bb:ac:0b:41:74:7f:14:01:48:
7b:ae:dd:c1:63:07:8d:8a:c3:a2:3e:c1:c6:70:75:
c5:e5:cf:65:29:53:2a:b7:e4:e2:6c:72:af:27:b8:
f9:b6:94:80:23:a8:50:b3:3a:33:ea:46:44:b0:a3:
4a:5c:c1:fd:e5:c7:fb:eb:31:3f:14:3a:44:6d:f4:
29:f0:3c:fd:39:49:31:29:a2:37:e7:a3:3e:80:b7:
76:d0:0a:f3:f8:19:4b:87:da:26:08:9b:f4:64:bf:
52:cb:a8:8f:6c:41:14:a9:b9:63:54:2f:a7:25:03:
f4:21:f5:db:25:a3:53:73:37:4e:8c:87:f3:9b:f8:
f2:06:04:4d:ec:b9:e2:c3:b2:02:17:68:6b:bf:1a:
e5:e3:92:b1:a0:3c:04:75:00:d0:75:aa:03:19:2c:
ae:6e:b3:85:65:15:be:ef:45:0e:16:3f:6f:76:a8:
f4:32:a7:13:8d:84:69:1f:28:71:1b:39:d4:dc:04:
cd:a6:e8:8a:3d:7a:97:cd:1c:04:60:94:68:69:2a:
ce:3b:2e:f4:45:89:30:8e:31:f6:5d:44:ed:91:ac:
69:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:16:55:CA:7C:6F:D1:E4:7F:47:BA:9E:14:92:08:2A:75:F8:C4:B1
X509v3 Authority Key Identifier:
keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fc:c3:4e:25:f7:80:a8:da:b3:a1:ef:c8:41:66:14:d8:45:
4b:4a:a9:c3:59:9f:f6:2e:5e:69:4e:03:a8:3a:b9:d4:f5:88:
7b:c1:2e:72:7c:a2:4a:e7:4d:03:47:b9:73:18:89:4e:96:13:
49:f7:f9:dc:63:6d:7d:44:7f:c2:d1:bb:7d:5f:33:5f:40:19:
85:d7:1a:7f:e1:42:50:42:26:34:94:93:3f:83:3a:57:e4:f2:
bd:50:d8:2a:6f:94:94:cf:1c:3a:72:91:fa:70:3c:63:97:1e:
ad:b8:4e:d1:a2:ed:e9:ce:4a:cc:40:bb:0c:31:e8:fb:a1:a3:
0b:51:bc:dd:b3:5b:b9:5d:05:f0:fc:7b:28:39:fb:13:26:d8:
f4:b4:1b:f1:b8:07:cb:31:f6:69:83:73:36:21:4b:dc:ae:b5:
67:0c:13:2b:1b:32:84:0d:2c:06:d2:e4:b5:1a:be:3c:56:14:
e1:c8:61:f7:6d:62:75:44:94:a2:e7:99:9b:b4:9a:3e:f2:6d:
c4:9e:33:ee:56:96:bb:e9:f9:84:66:93:d0:9d:b6:59:2a:8b:
60:4d:6d:38:05:f0:f1:ba:26:10:27:67:fa:d6:3a:67:09:80:
50:52:34:20:e7:9d:cc:bb:ee:2f:eb:ca:c5:2a:95:38:bb:30:
28:c5:45:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:31 2026 by rpki-client