Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
File: Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json)
Hash identifier: h5QzKIVQiASCVhGgFFj/K0RsPjzkfmuZw5Y8OrpljuY=
Subject key identifier: 78:39:3E:2A:4B:8B:E1:0B:E1:B3:29:BF:94:76:53:C9:86:CF:A3:0E
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial: 019D2929045381EF9C403F9271A210EFB41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
Manifest number: 0E83
Signing time: Thu 26 Mar 2026 08:00:47 +0000
Manifest this update: Thu 26 Mar 2026 08:00:47 +0000
Manifest next update: Fri 27 Mar 2026 08:00:47 +0000
Files and hashes: 1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: 3d4HPdT1g6cdFzC5FoJKI3jdXC7Eev3xlLS1/5H7jP8=)
2: Ync302nWoIDxqRaEpHli5zPb-l0.roa (hash: CuUUdJvVMWZ1G3401/kid+n0FU2EaOY59WBjrBRwy1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:04:53:81:ef:9c:40:3f:92:71:a2:10:ef:b4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Validity
Not Before: Mar 26 08:00:47 2026 GMT
Not After : Mar 27 08:00:47 2026 GMT
Subject: CN=78393e2a4b8be10be1b329bf947653c986cfa30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:04:b9:d2:28:8c:82:2d:cd:70:1a:86:11:
20:ce:55:8a:89:b1:be:5d:9f:33:f9:cc:13:85:af:
35:42:93:1e:5b:61:f9:30:b9:05:aa:04:6c:b6:c7:
43:d9:4c:0a:8d:a5:6e:9b:2c:00:ee:34:8f:08:27:
23:cd:e6:6f:61:fc:c8:29:78:9b:d5:ac:42:11:9d:
0f:cf:fd:23:27:b7:aa:9f:b2:32:d8:41:cd:a1:25:
b6:8f:77:32:18:2a:71:e7:d9:6c:ea:71:5b:b1:6b:
cf:d7:ea:32:7c:08:4c:8d:19:0d:ec:09:18:ad:18:
71:d8:de:56:e6:6d:d3:e2:04:b6:11:a9:8e:f6:9a:
12:be:e9:4c:09:47:9d:90:7d:98:4c:57:27:3e:f5:
02:b4:d8:e4:a9:0f:56:40:d2:73:39:6f:f1:b6:ac:
ce:5f:4f:3c:b7:c2:ea:26:89:72:ea:74:eb:e1:67:
65:35:34:0e:df:f6:f3:39:97:92:0d:c9:39:84:09:
35:49:38:67:09:98:f8:28:d0:b3:69:97:da:bf:e4:
d8:02:54:78:a7:7c:78:4d:e8:ef:e5:a1:62:34:0d:
0f:93:c9:eb:38:ed:4d:bf:e3:40:5c:e8:7e:7b:d2:
68:49:97:f7:1f:91:ab:9e:59:6a:23:65:a9:c0:39:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:39:3E:2A:4B:8B:E1:0B:E1:B3:29:BF:94:76:53:C9:86:CF:A3:0E
X509v3 Authority Key Identifier:
keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e5:ce:68:c5:c4:78:a6:4c:d1:84:2d:f1:b8:0a:b9:f9:b2:
42:da:cf:cc:a4:51:0a:96:64:da:d9:f6:db:60:2b:0f:a3:ad:
7d:44:8a:f8:21:5b:df:81:5d:8a:de:1b:f0:ce:60:40:04:8a:
65:87:89:b4:0b:6c:39:4f:e4:cf:31:94:fe:b1:d8:ab:7e:05:
40:58:ca:34:90:c6:ef:6b:bf:b2:42:be:43:58:54:eb:67:93:
61:70:af:a5:2d:3d:23:03:34:9f:c9:1b:d5:e9:b0:6d:83:bb:
b6:cf:6d:14:07:7f:85:f1:88:ec:ce:0e:5c:b5:24:3c:03:cf:
a1:3a:ed:18:2b:0b:26:8a:2c:c9:df:0a:39:18:d6:27:88:df:
eb:b2:ea:d7:d8:b3:aa:27:3e:8d:24:d8:81:09:c0:be:e4:24:
0d:d3:37:fd:fa:f6:0b:01:58:3a:7a:55:a9:53:f2:1d:7c:2c:
c2:f2:c2:fe:1d:5b:a3:1f:86:66:d9:55:74:3a:7f:9d:11:cf:
99:f0:8d:58:2f:f9:47:89:ee:e5:d2:cc:bd:d7:20:8d:b6:b9:
d9:3f:8c:fe:23:df:6e:b8:06:30:8f:5b:d9:f3:75:36:0a:e6:
ec:e3:28:7c:b5:fc:34:3e:eb:7b:ad:3a:95:ee:fc:85:f1:aa:
aa:f5:eb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:45 2026 by rpki-client