
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
File: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json)
Hash identifier: xTJRCRDxrhs5sH4tmoZ2MalGLfbrOoa4vmykmaWeAQU=
Subject key identifier: D6:1C:52:10:D3:A3:52:37:43:F3:86:BD:B4:95:8F:9E:78:99:C0:0F
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Certificate issuer: /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial: 019D27A8FC046D2C749B56411D2CF0B72B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
Manifest number: 09B7
Signing time: Thu 26 Mar 2026 01:01:19 +0000
Manifest this update: Thu 26 Mar 2026 01:01:19 +0000
Manifest next update: Fri 27 Mar 2026 01:01:19 +0000
Files and hashes: 1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: etdnGdEGW7uNfk7XSciLf8AMlxC4WQHiuvqnc8mScLk=)
2: eIMZBtMcWMvFB1hL6z_nOfKcJpw.roa (hash: fpooL7KmV8Sp+0vA+7uC8WsK6RO/CGya0r0FndhdjC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:fc:04:6d:2c:74:9b:56:41:1d:2c:f0:b7:2b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Validity
Not Before: Mar 26 01:01:19 2026 GMT
Not After : Mar 27 01:01:19 2026 GMT
Subject: CN=d61c5210d3a3523743f386bdb4958f9e7899c00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:66:c5:4a:61:54:cb:5a:11:0d:36:ff:6b:24:
8e:70:a6:a4:83:bd:0c:e6:78:07:8a:69:65:03:29:
d0:f5:3c:68:65:f6:0c:81:44:04:2b:03:43:08:f6:
cf:b1:62:eb:2d:a6:28:9d:02:16:e9:34:b6:d8:d8:
40:c1:b3:0b:9d:d5:65:67:8c:7c:b1:9b:32:07:70:
15:a9:4a:42:67:b7:31:92:3e:c2:94:f0:ef:b1:b2:
c9:d4:b9:9c:21:78:85:05:ba:dc:7a:fe:51:59:43:
52:61:a1:59:b6:96:56:d4:c2:23:f1:4f:c2:6d:33:
0c:8e:7c:c9:43:db:47:32:87:10:29:e7:80:28:d4:
9a:cb:b7:ef:51:b0:08:f1:6c:60:15:e9:6b:53:a4:
85:97:37:93:2e:51:56:79:34:d8:35:a2:98:51:17:
29:20:e6:5d:54:36:e2:11:64:7b:3c:2c:a8:14:c0:
be:8a:0c:f1:86:5d:4c:89:1e:05:3f:b1:77:02:43:
e1:2d:1a:e3:87:e1:1f:aa:25:54:a4:94:5e:3f:f1:
28:38:70:d2:ca:65:ce:5c:b9:6e:f7:ef:ee:2e:d8:
33:27:a2:94:ab:25:34:07:0e:67:a7:02:af:f2:bc:
d1:76:ef:fb:56:d8:f2:26:bd:f2:af:98:83:3e:15:
c5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1C:52:10:D3:A3:52:37:43:F3:86:BD:B4:95:8F:9E:78:99:C0:0F
X509v3 Authority Key Identifier:
keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d6:4f:f1:f3:b9:ed:96:44:e5:e6:c0:cb:cc:63:94:3b:fe:
0d:cf:77:bb:6a:cf:d5:bc:d4:64:48:9b:5b:0f:62:50:b2:80:
70:47:df:a5:3c:7d:b0:42:96:d0:12:9c:97:1a:7e:45:a0:b5:
ef:31:7e:f5:45:35:40:da:d5:5b:d0:ab:ff:26:7e:fb:dc:1d:
df:6f:3e:1f:5c:01:b5:fb:61:94:06:eb:b8:30:d5:fd:d8:19:
d4:65:21:94:b9:e1:48:a1:1b:d4:b4:4d:8f:d0:f6:77:c4:51:
25:ac:ae:31:d3:c5:46:de:f8:d1:2f:37:37:d3:25:1b:88:7a:
64:3c:61:1f:3b:c9:94:20:fc:2e:bc:85:37:7a:07:4e:1a:29:
a6:df:c0:1e:54:9c:ef:40:e3:cd:39:c9:ff:ce:e7:fb:20:7a:
8c:bf:6f:99:4c:f1:2c:e0:62:0b:2e:c7:79:f2:0e:96:d3:68:
c1:a7:56:e9:6b:63:f1:ce:b5:3f:3a:e1:54:e5:0a:a3:83:2f:
bd:46:bc:67:b2:fe:1b:36:99:5a:10:32:37:7b:ac:17:1f:1b:
a6:59:ca:76:bd:9b:00:06:78:7c:30:6a:ea:62:19:91:f2:55:
cc:0c:0e:fe:21:3e:89:55:72:b8:28:8c:78:3f:ba:ca:c3:99:
79:39:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:37 2026 by rpki-client