Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
File: DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft (raw, json)
Hash identifier: WqQvGdGT55Mvk4W7BtI/2XjImeQATNBl5sd13gSb9/I=
Subject key identifier: EB:6A:E4:AC:F3:43:57:F7:80:C4:34:BA:3A:0F:BE:55:3A:E6:56:EE
Authority key identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
Certificate issuer: /CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Certificate serial: 019D2B4F1CB4B4A0F6B217049164CE2BE470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
Manifest number: 83
Signing time: Thu 26 Mar 2026 18:01:38 +0000
Manifest this update: Thu 26 Mar 2026 18:01:38 +0000
Manifest next update: Fri 27 Mar 2026 18:01:38 +0000
Files and hashes: 1: Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa (hash: iX6v9+WjPW25JV4dSQdrR9Ylqr6/LIAKembF0Rx+4SM=)
2: DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl (hash: LhhjYgrUZpUV8VE33dYMCD4G9HkalknkynbXzui7YfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4f:1c:b4:b4:a0:f6:b2:17:04:91:64:ce:2b:e4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Validity
Not Before: Mar 26 18:01:38 2026 GMT
Not After : Mar 27 18:01:38 2026 GMT
Subject: CN=eb6ae4acf34357f780c434ba3a0fbe553ae656ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d0:1a:08:fe:f2:e2:f1:5c:31:8b:8b:7e:93:
ce:dc:46:2e:e9:e4:0f:2e:96:3c:3f:d7:19:13:69:
30:41:9d:bd:e6:c4:4b:82:7d:8b:bc:79:55:c7:50:
5e:2b:7e:6c:32:2e:ec:93:fd:f4:fb:7b:19:c7:18:
65:15:09:d7:1d:d9:50:db:52:53:a2:50:3f:e9:b1:
f3:21:08:93:ec:f5:f5:cd:0e:01:9d:dd:38:ba:31:
4b:e5:96:80:29:1b:0c:dc:87:48:75:5c:f0:25:83:
a2:2d:33:0d:ae:c5:2b:4e:da:58:f5:9d:28:77:31:
f2:1c:bb:8d:6d:f5:69:71:c9:c3:0e:95:8c:9e:f6:
1e:dd:20:d8:92:85:79:52:a3:e7:b5:8e:3a:81:3a:
dc:d5:a1:1b:27:8d:7e:5f:a7:e7:cf:75:75:19:f8:
3f:65:85:0f:6c:b8:07:10:f8:7c:46:e1:e9:d2:f4:
47:8d:1c:5a:15:eb:4b:83:53:aa:42:db:73:06:38:
b6:6a:37:ac:1a:4d:13:b9:9b:5a:cd:10:3b:8b:b6:
db:72:34:0f:e9:17:66:a8:30:2e:34:4f:ae:c3:32:
9d:d2:4e:82:e1:c2:bf:21:53:c6:9d:ea:0c:d6:d5:
39:db:f1:4f:5d:81:b3:65:56:1f:cb:6b:ab:95:68:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6A:E4:AC:F3:43:57:F7:80:C4:34:BA:3A:0F:BE:55:3A:E6:56:EE
X509v3 Authority Key Identifier:
keyid:0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1b:0b:88:01:fe:f7:27:01:6d:8f:9c:69:d1:55:a5:08:04:
3d:30:82:93:11:9d:5a:22:5e:53:62:7b:ae:57:64:c0:e4:88:
b6:56:a4:b2:3d:48:d4:ce:0c:00:d6:de:7a:6d:4d:20:b9:a5:
cd:1e:79:e3:86:84:83:20:07:5b:89:21:05:20:3c:cb:a7:4b:
89:20:04:9f:5c:e2:0b:7c:6e:54:79:29:3f:30:0d:d9:88:a6:
dd:19:48:b9:ba:49:80:d6:d2:47:2e:2a:85:d5:dd:05:96:d1:
72:b7:30:26:4e:19:65:c3:72:67:99:ad:ed:eb:3c:1f:7c:8b:
48:d0:e4:57:26:4f:d2:15:cd:62:58:06:8c:af:81:d9:b9:1f:
b8:d6:72:f0:8a:dc:09:b9:d2:e4:e3:b3:ae:c1:3f:49:9d:7d:
8b:f0:f1:d7:01:07:af:f8:6e:99:82:98:f4:8f:5c:db:35:9b:
c7:97:b9:9f:12:37:03:83:4f:1b:58:36:8b:e7:f6:7d:80:d2:
5e:61:3d:52:03:34:27:8c:3c:8b:9f:3a:d5:75:e7:c7:86:e3:
9a:ec:b3:e4:ae:4e:90:09:0a:22:0d:d9:5f:91:67:d5:83:82:
f3:bb:2e:f5:97:5e:1e:2e:f6:67:ee:cd:21:47:c9:11:05:aa:
0b:64:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:07:36 2026 by rpki-client