Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: cBs9yTAKOkmP7CfP5mf873cLRp/C5lMxC0QSpMdry0Q=
Subject key identifier: 8F:DC:4F:A2:97:DE:B7:7B:F1:1F:B4:B1:AE:0E:61:C0:D2:6D:2F:1F
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 019D27042875CCDF47C1117270D04EF9262D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 14FE
Signing time: Wed 25 Mar 2026 22:01:17 +0000
Manifest this update: Wed 25 Mar 2026 22:01:17 +0000
Manifest next update: Thu 26 Mar 2026 22:01:17 +0000
Files and hashes: 1: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: xkQ6zAafjCYCRuM+CM2eVyL4At8x5Yer0uMjC9mn6is=)
2: HumGUcM3JA5WttmoWk-JTSCdCgM.roa (hash: HnfAs+SxCScsW89JwwIoJO2V9u8mCg1vCQuYyQrU9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:28:75:cc:df:47:c1:11:72:70:d0:4e:f9:26:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Mar 25 22:01:17 2026 GMT
Not After : Mar 26 22:01:17 2026 GMT
Subject: CN=8fdc4fa297deb77bf11fb4b1ae0e61c0d26d2f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:24:79:4f:ea:5b:fe:14:4b:fd:15:0e:d0:
d1:52:02:10:ae:5f:5b:af:62:9b:4f:e9:d6:e6:b6:
c8:bb:8d:65:8b:c2:9a:0b:b7:98:06:6a:08:a5:82:
a7:96:84:3d:3f:c3:a8:33:9a:3d:03:8f:5d:74:45:
f8:9c:04:83:01:2f:31:f7:9b:54:8d:bd:8a:a0:19:
a7:7c:22:e0:a8:82:b5:af:77:b4:89:42:cf:8b:f2:
08:7c:08:65:a5:38:d0:14:e1:0d:8a:ac:6e:ca:36:
8c:47:34:f6:04:62:f3:a4:0d:30:2e:e2:bb:1b:85:
f9:c5:30:5a:2b:01:ae:18:a5:1e:c8:f6:59:f5:da:
9a:ef:e5:2f:ca:41:73:a5:1d:e2:fa:f4:ed:dd:f2:
41:89:1d:3b:ef:f3:9a:fc:17:fe:4c:4f:0e:7b:7f:
8b:b3:d0:c7:40:ed:cd:2a:07:39:2c:d7:4b:48:76:
6d:a5:7e:85:d5:55:e3:a6:86:09:50:2f:f0:1e:53:
2c:8e:de:22:a9:26:59:f2:77:72:d8:73:03:13:14:
8d:2d:1d:01:20:0a:f4:00:9b:bd:b5:9c:78:c7:58:
3c:57:af:07:21:08:2c:14:55:1c:58:ca:c3:50:b5:
d4:f5:ca:8a:b3:c0:08:5c:1d:26:50:cf:0a:d8:83:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DC:4F:A2:97:DE:B7:7B:F1:1F:B4:B1:AE:0E:61:C0:D2:6D:2F:1F
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:49:de:b3:c1:34:1e:81:51:63:12:91:c7:bc:7b:c9:c5:40:
ca:76:7e:8b:fe:bd:69:33:54:55:1d:95:45:e2:78:f3:7e:a6:
9d:69:81:8b:14:44:19:51:eb:66:e8:ab:bd:03:3e:9d:b2:f9:
01:5e:0a:17:56:40:d4:e2:bc:cd:e5:f5:e8:8f:af:fb:d5:b3:
fb:45:f8:21:f4:cf:94:8f:7e:5a:4a:55:41:be:af:e7:27:fb:
d0:8b:f3:da:e4:71:3c:0d:ab:09:a3:8b:de:a0:16:12:e1:23:
11:27:bc:36:24:3d:20:ea:cf:9d:48:08:42:1f:77:7d:ee:59:
11:e7:0a:ac:18:bd:c9:4d:29:05:6e:58:66:fe:39:75:ed:ef:
f5:fe:58:a6:56:28:e2:1c:11:fc:44:97:69:55:bf:c1:80:5e:
81:43:73:3a:fd:f2:21:cb:49:5d:1b:6b:8b:60:07:50:05:f6:
38:66:e2:74:4a:48:a8:13:a7:d8:7e:18:40:6d:d5:1e:23:a6:
05:1f:6b:79:46:f7:d2:dc:98:2f:97:5f:51:53:37:4e:61:61:
b9:80:b8:0c:f5:18:6a:fc:3f:d2:ee:d0:3b:3f:b9:13:d5:e6:
36:96:ca:dc:5b:cc:65:bb:fb:e9:6a:c2:9f:6a:b2:3f:c1:3f:
21:b6:69:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:03 2026 by rpki-client