Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File: 0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier: EWfyRjLKxqJPuPzgDIglEdEpvmBVgbUusZ6y5VjP8/A=
Subject key identifier: F2:9B:3F:AF:FA:A8:2D:F0:79:96:48:34:51:AB:B7:CD:40:57:3E:17
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer: /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial: 019D2A72EEB1BB83AF56D02CCFFA3E64A9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number: 139F
Signing time: Thu 26 Mar 2026 14:01:08 +0000
Manifest this update: Thu 26 Mar 2026 14:01:08 +0000
Manifest next update: Fri 27 Mar 2026 14:01:08 +0000
Files and hashes: 1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: NFNvPU53n/kBylDWB+9QhGJQvM0AEfxseXrGWPNCOgI=)
2: vTP-a1JInjsi0zs43YUjMr0tQhw.roa (hash: AksN4qlHwN45fSCKy9ilLdGULzgppZOt64KCaKI1vlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:ee:b1:bb:83:af:56:d0:2c:cf:fa:3e:64:a9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Validity
Not Before: Mar 26 14:01:08 2026 GMT
Not After : Mar 27 14:01:08 2026 GMT
Subject: CN=f29b3faffaa82df07996483451abb7cd40573e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:24:24:17:36:e9:ba:0a:7f:a3:48:e0:0a:
8f:37:35:60:2a:fd:ea:9b:1b:bb:cf:00:19:16:fe:
89:5e:33:ff:63:ae:16:c1:f6:07:f5:07:95:38:fe:
cf:b2:95:f2:51:2f:70:96:84:7a:39:20:50:3a:85:
42:24:33:0c:91:c1:d8:a9:2d:88:17:c3:e0:3e:f8:
31:48:2d:4b:ea:d6:da:bf:95:30:4d:f9:25:f5:28:
1b:cd:f6:5d:ac:f1:20:85:68:ec:91:b5:99:74:5a:
de:65:2f:5e:3a:ca:75:1b:1f:4a:7f:6e:13:85:87:
a9:7e:e1:08:21:d1:71:ca:ed:33:07:8b:eb:56:6e:
4e:d7:8f:23:c5:46:44:fd:76:ea:46:17:4b:7e:8d:
53:bc:f4:b2:5b:1b:90:52:5b:6a:b5:37:9b:e7:68:
a3:1e:93:8f:f6:1c:be:49:b0:bf:c6:ba:8c:59:e1:
2b:d8:24:f3:3e:4f:10:f3:b8:6b:4a:dd:74:23:e2:
f0:4b:10:e5:84:4a:2b:d9:39:3a:34:34:83:f8:76:
bf:d0:77:cc:4a:8a:14:f5:38:39:a0:56:1c:76:b3:
25:b1:7e:fb:a2:98:a5:15:51:8c:ae:96:63:db:51:
62:bd:e4:cb:ff:d9:7f:ae:e0:f1:8b:14:f8:2f:0a:
5a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9B:3F:AF:FA:A8:2D:F0:79:96:48:34:51:AB:B7:CD:40:57:3E:17
X509v3 Authority Key Identifier:
keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:87:b9:ad:8c:88:57:0e:97:ca:2a:ff:d7:6f:74:a5:77:6f:
4f:d3:d8:8e:63:0e:4b:ba:91:9a:19:8c:54:cf:d5:10:86:c4:
1d:48:dc:46:69:fa:e0:d9:b7:86:f6:e5:9e:46:39:1f:67:10:
ee:50:27:ad:43:c0:dc:1f:36:f9:3e:a2:41:ce:bc:00:93:52:
e7:cb:0e:e4:17:8a:a8:a1:8b:17:ce:80:dd:55:50:2b:94:9f:
54:52:63:50:d0:44:a5:80:97:fa:b2:fe:34:00:fe:ed:06:a3:
47:9c:8c:27:05:ba:d5:1d:66:47:ab:66:71:53:ae:9d:37:bc:
1b:9a:49:fc:0f:2f:b1:92:f8:1f:7a:f8:cb:36:0c:e5:99:ff:
06:fe:5f:a5:03:27:76:33:b2:36:07:2f:98:71:8a:00:41:08:
0f:49:34:b8:3d:68:a2:44:62:ff:c1:35:b5:b9:8c:0d:6e:1f:
76:51:77:2f:41:23:13:aa:1f:f7:ea:90:20:60:4a:44:2a:56:
49:63:85:89:d3:3e:46:31:14:52:14:88:38:82:d4:80:55:04:
ce:b0:ed:40:46:39:8a:e8:6e:64:fd:ab:38:bc:1c:2d:8d:f3:
cf:27:18:b4:ac:7a:31:3a:02:76:b5:19:43:92:cc:15:2e:78:
fe:2d:8b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:27:46 2026 by rpki-client