Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: keyY7+RSebPhOf82Tiq82B8CLnWVkSC2MT9Hoo7hiTk=
Subject key identifier: EB:E0:4D:22:A3:91:04:FF:62:B5:B3:A3:6E:75:0B:76:04:36:ED:F1
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 019D28F2238273C0BD5A92A60DE643E2F0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 07:00:50 +0000
Manifest this update: Thu 26 Mar 2026 07:00:50 +0000
Manifest next update: Fri 27 Mar 2026 07:00:50 +0000
Files and hashes: 1: 1TwtEwBMlCxF8zqgEDzuBJ_MkQk.roa (hash: TD25ePA+FEqAqKpKYIGbiC60SkZANZcldOpqjTjdHRs=)
2: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: JCpbRn4eULg7qYcnRciK6qyg1tkhHrVXW4lOIJxZ18I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:23:82:73:c0:bd:5a:92:a6:0d:e6:43:e2:f0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Mar 26 07:00:50 2026 GMT
Not After : Mar 27 07:00:50 2026 GMT
Subject: CN=ebe04d22a39104ff62b5b3a36e750b760436edf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:3e:ea:22:3e:5d:39:bc:bc:93:f8:95:72:
5e:cd:72:6d:29:ef:64:0f:f5:14:47:8a:91:94:23:
b9:df:f2:15:65:8c:1d:4f:ad:76:76:e5:1d:db:33:
c3:73:25:b2:d0:00:5e:96:c9:f1:5d:64:81:dc:c0:
c0:16:81:c8:01:39:87:a9:99:9e:a6:3b:f5:25:41:
75:9c:0f:8b:b8:71:4e:f5:7a:7c:c1:f0:94:f7:eb:
95:54:d7:da:51:69:71:b3:87:a3:a1:b3:7c:4c:72:
2c:ef:c2:5f:40:69:6d:2d:ff:a1:26:10:ba:0d:21:
23:43:e8:18:9a:30:b2:54:b7:6d:f9:89:9f:d6:b5:
12:7d:c2:3c:78:4d:30:14:76:a2:d8:eb:b9:56:13:
f1:41:37:c5:cd:5a:b3:89:8a:c1:44:f1:44:ce:9d:
23:34:f7:25:46:96:c4:0a:51:01:df:a8:1a:29:e1:
43:cd:d0:00:63:2c:d8:05:7f:4c:86:54:6d:04:17:
95:9a:22:a1:51:c1:99:e1:a3:5b:4e:c0:20:1c:af:
67:d2:08:de:e5:e8:41:23:d4:e4:ed:ea:0f:cc:86:
af:f4:9d:1c:0f:82:b1:43:ed:21:d0:62:76:61:d4:
ac:86:88:12:24:62:47:20:de:37:2b:8d:00:40:de:
6a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E0:4D:22:A3:91:04:FF:62:B5:B3:A3:6E:75:0B:76:04:36:ED:F1
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:72:ff:87:79:38:ae:ea:ab:0d:18:c2:72:63:b2:84:a6:d4:
3b:f1:0d:70:a1:e0:d5:f9:55:4f:e9:34:1e:75:57:f5:7b:52:
03:35:2f:c8:e8:02:a2:9d:fc:3b:bc:62:9f:68:7b:77:61:92:
e4:4b:68:5d:6f:7e:dd:a4:1b:7e:10:2c:ca:51:c2:5e:ca:73:
1f:a7:c5:de:2c:f5:56:29:d0:d1:7d:b1:7e:28:0a:bb:56:44:
04:69:04:f8:56:e0:43:95:b2:58:1a:c2:33:85:29:e3:f3:19:
b9:77:0d:b5:9f:29:d2:9b:f2:90:58:22:39:73:fa:9b:8a:c3:
8a:70:43:80:d3:ad:4d:02:b3:95:93:ca:86:d0:48:d8:81:19:
d5:46:3b:63:b9:52:68:61:1f:7c:df:6c:ea:45:47:1a:bd:be:
5b:f1:1e:a8:06:fa:6c:3e:ef:b6:10:84:45:a5:d8:2a:dd:dd:
ce:6d:dc:09:16:89:0d:fa:01:2c:94:10:63:1e:a0:4c:e0:3c:
66:f8:3d:47:38:d8:c1:3b:43:90:c0:e1:2c:0c:ba:e1:43:b9:
67:47:0b:5a:83:0d:1d:81:c0:2a:59:bd:fb:f2:09:e5:85:71:
7f:df:8e:f1:b4:2f:6a:df:d7:12:5b:48:e2:7d:1b:c5:12:d4:
d3:75:b2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:27:24 2026 by rpki-client