Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier: tl8FamWu3/DnhcUO/FkmoWxdNsvvFvoo3X1QycknXV0=
Subject key identifier: 14:83:1C:D4:F0:D2:3F:8E:46:CF:5C:D9:50:6C:88:BD:33:62:FC:67
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial: 019D296131AF42FB6175D76636AC1CF5D304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number: 07F6
Signing time: Thu 26 Mar 2026 09:02:08 +0000
Manifest this update: Thu 26 Mar 2026 09:02:08 +0000
Manifest next update: Fri 27 Mar 2026 09:02:08 +0000
Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: gBNnenMcNc2Ffj5FJBVJOW/UeZJz0yX8ZgoyT3cpRqg=)
2: fe3bi-doKDNu4dmU6DR8DAdVKZc.roa (hash: OoARVSCOyCQLc2Hu8VCrhllOD8R6T0zZ8zONXrdJeEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:31:af:42:fb:61:75:d7:66:36:ac:1c:f5:d3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Validity
Not Before: Mar 26 09:02:08 2026 GMT
Not After : Mar 27 09:02:08 2026 GMT
Subject: CN=14831cd4f0d23f8e46cf5cd9506c88bd3362fc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:dc:3e:a4:cb:27:e3:0f:b5:c7:77:3f:af:
b4:9f:be:ae:be:33:3b:57:e5:be:e1:8e:0b:e7:36:
4a:d1:fa:a2:3f:52:1c:a1:69:d6:3e:e1:bf:f4:fb:
7f:3d:48:91:8e:1d:f4:75:c3:44:85:c9:cb:7e:5b:
3d:6b:7a:bb:8a:7a:61:5e:d3:7b:43:da:4d:a9:ce:
af:ec:f6:d6:25:84:ca:f6:6f:cb:b6:f5:05:18:7d:
7a:aa:43:b0:77:8f:17:04:5c:fb:89:5b:98:c7:56:
9d:e8:8b:a1:9a:3f:ba:f5:85:7d:0c:0a:df:fa:bb:
db:37:2c:4d:30:57:99:97:f1:95:d6:f8:96:a2:69:
35:dc:ae:e8:b3:b8:68:41:c4:c2:36:47:12:f0:1c:
ad:f6:b6:f1:9a:38:60:90:a5:27:45:b5:f5:c8:b7:
4f:60:99:22:80:c7:49:20:0b:7c:eb:5c:c1:6a:6c:
88:0c:d6:0a:72:8a:ab:e5:0e:09:29:23:d3:e4:e7:
8c:89:85:d8:df:2c:6e:14:ad:81:ce:bd:a7:dc:79:
7d:57:0d:b7:90:24:a1:89:43:e8:fb:00:2e:79:cc:
a2:b7:d9:6a:4a:9a:49:05:b6:d9:72:bd:09:4d:5e:
23:f2:bc:28:dd:a2:7f:b4:75:44:ee:e3:19:f9:84:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:83:1C:D4:F0:D2:3F:8E:46:CF:5C:D9:50:6C:88:BD:33:62:FC:67
X509v3 Authority Key Identifier:
keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:38:a3:2b:1f:87:c6:41:8c:22:8a:c6:bb:08:40:cb:25:cb:
0b:64:3f:ff:d9:8d:9e:3e:11:b3:b4:6f:c7:3a:d0:59:14:58:
92:a1:ce:3f:af:d4:0d:46:b4:15:2c:10:67:e7:1e:32:ce:80:
44:15:1e:3e:a2:1d:f6:f0:8c:f2:9d:c7:3b:1d:f9:ea:b8:ae:
89:82:68:89:1e:23:0f:9e:6a:c0:07:75:96:5d:cf:80:61:c6:
7b:0f:50:94:b7:57:28:06:60:fd:6b:7c:2c:d2:f1:33:8a:e8:
ac:be:47:69:84:e3:e7:67:40:04:77:b5:08:b8:03:e7:41:fd:
be:c5:c6:e3:9f:d0:f3:b3:94:1e:e8:46:8d:b5:d7:65:5d:97:
54:c2:c3:f1:5a:1e:2b:16:da:e0:b6:84:4a:1f:aa:87:e9:ee:
72:32:fe:aa:46:0d:34:b8:a7:74:a6:77:2e:56:d0:f7:b1:8a:
0b:6d:5f:00:ea:fa:73:97:7b:47:a0:89:bc:f1:28:93:5f:d9:
95:7f:b2:21:15:0a:7b:67:1f:9f:df:24:c8:c3:b5:47:ba:a9:
f8:81:52:f7:ea:eb:68:31:54:c1:0a:47:97:37:a2:7d:88:b7:
29:ac:1e:ed:5b:2b:72:4f:0b:cd:e0:53:85:10:a2:df:f8:82:
a3:45:3b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:45 2026 by rpki-client