Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: dOLKc4wrr0KvcRzuMOBY5Nij2Fc4yPZNUM9pCuIpyfU=
Subject key identifier: EE:E9:0E:B6:9E:B9:A5:67:92:21:37:B5:1E:A6:B1:D8:B4:77:37:A2
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 019D28BB9914B1964B0D464B3AE339BBFCC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:16 +0000
Manifest this update: Thu 26 Mar 2026 06:01:16 +0000
Manifest next update: Fri 27 Mar 2026 06:01:16 +0000
Files and hashes: 1: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: oJvtoINdzk8y9il19jmGWwFxuR5vQ6VQSjqoeKJnC1U=)
2: LINYNse5gTnQTaGpDC4P2orwLNw.roa (hash: jwdJGzlRoAppijnlgLmKSEl5CMBxNzYsYm+HHhXiWR0=)
3: Wu-LPUMqwocBNlt5ypkyRQ-BcG8.roa (hash: udr6u/rjNC9kwCUZ4fpiUpE5gr+CoJtYznz4JyS606g=)
4: dpzibW71BafVtewDmI9jnKwB0PE.roa (hash: Lb6hcW86Ys7t4OSo9igJpzp6AC9QU/RfmTo/e1nf/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:99:14:b1:96:4b:0d:46:4b:3a:e3:39:bb:fc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Mar 26 06:01:16 2026 GMT
Not After : Mar 27 06:01:16 2026 GMT
Subject: CN=eee90eb69eb9a567922137b51ea6b1d8b47737a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:0a:e2:06:02:8a:fe:f8:42:bc:42:9b:03:
e7:1a:e9:37:e7:5c:11:8a:7c:0e:d5:2a:8d:0b:a6:
3a:e8:4a:d4:aa:11:7a:92:df:80:b6:55:71:8f:0d:
fc:9f:bc:01:d4:96:3a:bc:25:e8:1e:a9:4f:d7:bf:
0a:84:59:fe:a1:4b:f0:21:46:bd:70:ab:36:d1:69:
45:31:82:c5:91:cd:6a:9c:44:6c:ed:f6:54:3b:53:
63:26:44:fc:1d:f1:88:af:3f:a7:88:0c:e7:b3:29:
26:04:a6:d1:56:14:fa:ba:9a:29:52:da:08:0c:15:
ed:c9:a4:35:41:ed:b0:b2:f3:9a:ba:d2:a4:4d:49:
40:33:2c:3a:42:5b:ed:36:f4:e9:1a:99:6d:f8:c4:
25:cf:04:13:dc:34:e6:fc:9a:c5:d0:ae:1a:5b:63:
96:fb:a1:48:a8:a2:3d:81:6a:3d:32:09:94:24:b2:
d0:24:ef:44:db:4f:25:e9:d3:59:17:69:99:8a:53:
84:8c:e5:f4:29:3d:14:48:c1:67:81:78:77:a4:83:
bc:d2:5b:17:fc:0d:76:71:61:44:98:83:af:ff:a5:
f4:06:df:07:41:5d:cf:c3:76:e9:84:30:00:de:4d:
c0:65:b3:cc:15:c3:da:fa:62:07:ca:ef:35:f0:b4:
91:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:0E:B6:9E:B9:A5:67:92:21:37:B5:1E:A6:B1:D8:B4:77:37:A2
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b8:bf:31:de:7f:4c:ad:04:d6:66:3a:07:2e:4c:d9:98:e5:
10:8a:8a:e8:1b:5a:df:0c:5a:63:db:33:c5:9b:89:9d:93:99:
6f:1d:38:2e:fb:eb:18:2d:e5:8b:ce:a7:f1:14:93:ec:03:01:
00:2d:4b:b4:60:df:d5:95:ed:88:cb:68:51:7d:14:5b:6d:21:
87:8a:83:9a:58:9b:da:f1:1b:a5:47:a7:da:c1:75:f5:37:db:
92:b6:bc:47:3d:7e:09:34:3d:6e:f1:0d:fa:6b:47:7b:1f:20:
33:1a:cc:d8:7d:40:26:ea:83:2c:3e:37:a3:7b:b4:81:5e:97:
d9:ce:ff:df:80:14:4b:e4:3f:f3:57:5e:5f:50:eb:23:bb:a0:
ee:0d:e0:75:6d:f3:94:19:9e:c6:ef:ec:d2:a7:8e:b8:f0:42:
20:98:c9:d6:c8:6e:ee:bf:0c:34:a4:6a:f6:83:4f:b3:0b:a3:
71:c2:3c:27:1a:73:56:1f:d8:2f:a4:3a:26:6a:af:01:ba:15:
b5:28:e0:00:1c:d9:f1:80:b7:ba:90:1f:e8:89:17:9f:c9:b6:
ca:69:81:ed:24:46:91:75:02:78:00:84:8d:ca:a1:19:2d:5e:
a1:f6:42:d9:b6:3d:d1:f1:f0:f7:b0:7d:e1:3f:e5:52:b8:b8:
fd:ca:fc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:50 2026 by rpki-client