Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: g48eoma1zqSgcMyF3spK2pulMq5SXzykVEZaEN2fi9s=
Subject key identifier: 17:11:E6:AF:F4:D6:B8:1E:B5:C8:58:22:1E:92:BA:AA:F3:E5:8F:0D
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 019D2772BB38F3F980D34FEEF1F70F64906E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 1065
Signing time: Thu 26 Mar 2026 00:02:03 +0000
Manifest this update: Thu 26 Mar 2026 00:02:03 +0000
Manifest next update: Fri 27 Mar 2026 00:02:03 +0000
Files and hashes: 1: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: SdM5czEQONYRubH/KA8LiUM2PRXFhovvxe5p3jU84Ss=)
2: qZ8aQgjdabGbDv-i6H620T5YhwY.roa (hash: UdXrLbOlQenxMN6hG/0L/eJWuifEwthlbNrK+9DhFyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:bb:38:f3:f9:80:d3:4f:ee:f1:f7:0f:64:90:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Mar 26 00:02:03 2026 GMT
Not After : Mar 27 00:02:03 2026 GMT
Subject: CN=1711e6aff4d6b81eb5c858221e92baaaf3e58f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:86:8e:e5:30:6a:50:9e:ab:c7:84:fc:0a:99:
2b:22:bd:d8:43:7d:f6:c0:dd:de:6e:ff:39:d1:67:
30:fc:01:43:5f:9a:62:36:1e:17:14:7c:0a:c6:25:
77:a2:bd:f4:c1:ff:de:77:0c:02:5b:3b:c0:ca:1b:
43:e2:89:47:c5:6a:87:b1:41:da:43:d8:fc:b7:5b:
e1:1d:9d:23:ec:f0:02:35:46:95:04:8e:80:63:4c:
77:f0:e1:12:5c:c2:03:77:bb:e7:e7:05:66:dc:36:
14:11:e4:5e:92:04:e0:e2:84:41:dd:ab:8a:ab:98:
44:ce:88:20:85:34:d5:d8:85:5c:b6:ce:b6:8c:03:
ab:2a:40:3f:23:22:a8:52:b2:7d:94:29:c1:70:c2:
8a:2d:42:b8:e4:96:b8:68:db:42:28:d0:ed:be:b5:
31:f9:d3:b0:62:6b:6f:d0:15:ea:d0:10:bc:09:ad:
4c:af:2e:1c:56:7f:2f:54:10:1b:50:d0:0c:3e:91:
13:69:c2:f7:8e:54:18:e4:43:50:4a:7d:ed:6f:7e:
c8:d5:58:30:e3:7b:0b:17:46:0e:9d:dc:fb:1f:dc:
2c:1f:95:62:00:9b:e2:72:6a:b6:0d:9c:7b:5e:21:
6f:ac:82:21:e2:00:f0:e0:ec:a9:32:11:4e:4d:88:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:11:E6:AF:F4:D6:B8:1E:B5:C8:58:22:1E:92:BA:AA:F3:E5:8F:0D
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:61:c4:c0:aa:6f:bf:36:7d:4e:21:a4:9c:1c:f8:d7:7e:2d:
c8:3f:4c:f1:ab:f2:1b:fb:f0:f4:1b:24:d5:61:c5:51:dc:d5:
0e:ec:57:7b:58:06:48:92:1f:3d:e2:3f:02:ea:0e:69:12:42:
bc:50:6e:8d:19:0e:61:51:cb:27:dc:f3:44:bc:13:17:38:97:
cf:17:70:6d:02:78:58:a8:a7:13:3d:7c:01:be:ed:27:78:2b:
01:4c:fd:6d:59:e4:50:93:1a:df:d1:54:47:f6:ff:46:31:16:
35:f8:39:f4:d3:7c:c7:d2:e6:fc:95:a4:fb:ff:39:6e:50:1f:
ec:1f:2b:83:cd:38:e5:1c:09:4b:e7:e5:c3:0a:ea:f6:16:a6:
92:e8:f3:33:72:c3:6b:ff:04:31:db:7a:e1:7e:84:35:60:21:
5b:ec:11:7c:e1:48:a3:b6:57:55:e3:ae:a4:a6:5d:8f:d5:f7:
6e:f6:f6:ef:ec:16:4f:27:05:f7:df:95:d8:02:97:52:04:a4:
1d:1f:ed:14:22:82:94:b6:e9:bd:99:27:7c:54:57:ff:fa:26:
17:25:70:38:a9:8d:ac:56:f9:45:24:d2:ab:9a:68:f6:c4:67:
e1:77:61:ae:81:6c:ab:96:a8:10:10:83:ce:25:c9:45:d3:cd:
84:f9:83:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:14 2026 by rpki-client