Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
File: dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json)
Hash identifier: Lhog+P/ODTwlPhdcvsQeLvXd7xJ+xKKCvwDq2i/rYfI=
Subject key identifier: F2:49:C2:47:AA:93:32:B6:42:32:95:1E:B0:3C:DC:7D:37:47:BB:A4
Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
Certificate issuer: /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Certificate serial: 019D33E3A53E1474B07F64999BC5E8215DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 10:00:50 +0000
Manifest this update: Sat 28 Mar 2026 10:00:50 +0000
Manifest next update: Sun 29 Mar 2026 10:00:50 +0000
Files and hashes: 1: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: ocQYK/Un8u4I52YKCMPrhRwYY5ixNxQHF3UxOxoQH/4=)
2: lXioRR_EVL0NPAzIqI7FX4MelJo.roa (hash: S7jrVKRJiz72hirUXIrytitbQsTNlzUASHFJ52S5ht4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:a5:3e:14:74:b0:7f:64:99:9b:c5:e8:21:5d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Validity
Not Before: Mar 28 10:00:50 2026 GMT
Not After : Mar 29 10:00:50 2026 GMT
Subject: CN=f249c247aa9332b64232951eb03cdc7d3747bba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:8a:86:98:79:f6:e0:ce:5d:52:71:44:ec:
de:4e:be:87:d4:4c:cb:d5:c9:57:a3:fe:44:1e:f8:
5b:32:a9:39:47:62:2b:80:fb:91:04:4f:76:6b:92:
c1:3b:50:cc:9a:9b:c4:b1:6d:12:8c:79:ff:c4:72:
1f:2b:22:2b:16:2b:33:bf:a7:ef:80:8a:16:0d:75:
15:6a:e3:48:fc:c0:08:bc:b5:32:c6:f4:4b:80:05:
a1:b5:8f:9e:79:9d:30:61:e7:a6:ec:39:dc:19:29:
99:cd:a8:70:a9:b2:ce:97:d1:66:98:a4:55:c2:eb:
c1:c2:f9:d9:6b:cc:a3:e3:e4:d4:93:8d:40:39:0c:
0f:14:59:f1:bb:51:39:7a:85:ae:79:d8:1a:0b:ff:
8d:28:31:35:3e:ea:f8:70:4c:e5:45:b9:81:f2:f5:
56:a3:8a:03:c1:27:07:46:98:19:3f:7f:d0:80:86:
2b:a3:8f:a8:fe:64:bf:77:f2:b3:b9:ea:27:2a:f3:
f9:9c:2f:b0:52:68:01:8d:6d:45:8b:4c:ef:11:1a:
09:4a:22:1d:00:e5:7a:d4:5d:fe:91:4f:f3:63:3c:
97:f8:02:7a:40:30:ef:ee:0b:39:8a:9b:70:f5:6d:
a2:b8:56:65:d5:04:45:8e:50:f8:5b:2b:43:c5:d2:
4a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:49:C2:47:AA:93:32:B6:42:32:95:1E:B0:3C:DC:7D:37:47:BB:A4
X509v3 Authority Key Identifier:
keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:dc:6c:0b:d3:55:43:bb:26:01:d0:0b:44:4a:66:d1:75:db:
ce:f7:c1:63:1b:9e:fb:ab:4b:c7:0c:76:34:e6:d0:cb:40:a9:
e5:93:ec:55:b0:7c:38:49:0e:09:ee:37:7d:91:cb:d9:01:c1:
e5:3d:6d:ee:f9:79:d2:01:10:4b:87:1b:ec:1e:3f:d9:d1:ef:
a4:82:13:16:e7:56:19:5d:81:cd:16:5b:48:28:80:de:e9:c9:
cc:a9:09:c8:5f:e4:c1:5c:cd:37:d7:72:41:44:1c:d6:f3:99:
4e:38:0a:be:64:d7:30:f8:60:e1:54:64:90:df:c2:cf:35:cc:
c9:99:1c:05:52:d2:73:e7:41:4f:a8:21:05:3b:d4:f0:35:be:
e2:17:d3:0b:f9:25:3e:e7:b0:d7:2c:ae:ae:ee:9e:0a:96:d3:
a8:a3:99:b8:4b:43:cc:44:c2:10:fb:bf:26:ca:d2:04:e4:02:
99:1a:c0:58:26:15:d8:e7:0d:5e:c5:4b:07:5b:e5:6c:e1:c9:
2e:4e:4b:66:ae:02:8c:2a:bb:8d:10:13:1b:7f:1c:a1:97:b1:
77:15:28:92:fc:4d:59:c7:7d:9a:c6:12:df:8f:1b:73:80:16:
86:26:7f:a3:03:4f:a3:08:45:fc:67:d5:cb:36:18:63:42:21:
2f:29:6a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:32 2026 by rpki-client