Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: hq3OGLsCszT3aWQdYjfuUUjnn5hypfzWWfljYPO06W0=
Subject key identifier: 32:D3:F5:14:32:73:F8:3D:81:0B:E1:27:60:2E:A9:32:0C:39:6E:AC
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 019D28F2110373F9C9286AC3E5F370816749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 1082
Signing time: Thu 26 Mar 2026 07:00:45 +0000
Manifest this update: Thu 26 Mar 2026 07:00:45 +0000
Manifest next update: Fri 27 Mar 2026 07:00:45 +0000
Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: xxsePdMzof+DKoraN5lrGM+dUfi4HpRzWxZYLivKI0c=)
2: uO0hPRixKdpQ7dRmQ2or2PuLKb0.roa (hash: oMcY71q6qwU4awB+i8utxGyZwUW4XEtlGqfFSQ3WTP4=)
3: x3r5MAGnwo9sJOqgqq7L5j88SZc.roa (hash: PdGQVPWLQTL/E0T0LOBkbwg2HWh9KKOf2sd5PHKTZpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:11:03:73:f9:c9:28:6a:c3:e5:f3:70:81:67:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Mar 26 07:00:45 2026 GMT
Not After : Mar 27 07:00:45 2026 GMT
Subject: CN=32d3f5143273f83d810be127602ea9320c396eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:b5:41:6b:f5:a9:2e:37:97:73:a9:62:15:
f8:6b:76:f6:3f:cd:4c:0f:7c:06:76:c6:49:b2:89:
70:e7:ba:f7:80:75:5a:06:78:bf:7c:cf:4e:8a:3e:
86:c3:58:b9:0c:37:b1:eb:3a:69:d1:29:3a:9e:43:
d5:19:bd:c5:38:d7:16:01:20:5b:83:b3:7e:b5:46:
4e:00:13:2b:1e:39:12:51:cb:a1:a2:0a:6a:62:47:
55:9f:09:86:28:96:5c:b8:bf:ca:56:a9:ac:f2:b0:
5d:65:94:92:7a:97:99:6b:af:15:c7:a1:ef:d9:4c:
a0:3c:37:fa:f1:fe:27:a4:72:98:f6:ee:77:26:3f:
7b:4e:fb:49:1d:d0:ad:c8:c5:2f:89:59:7b:da:d6:
de:15:37:0c:8a:0d:4a:bc:b1:86:52:a5:bc:f1:19:
df:f9:9c:83:13:a1:b5:b8:d6:f3:7f:85:76:83:2d:
4e:ba:82:bf:82:70:a2:9d:34:6a:7e:c5:11:dd:e9:
3a:15:e2:d8:ec:dd:b3:ce:12:b8:43:4d:79:35:1f:
1e:8b:9e:31:22:33:d5:34:fa:03:ac:d1:dd:ed:1a:
20:80:cb:ba:50:a6:2d:8f:de:64:ee:d3:c5:5d:88:
12:5d:9a:21:d2:67:49:e4:9c:2a:c1:fe:0e:92:90:
75:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:F5:14:32:73:F8:3D:81:0B:E1:27:60:2E:A9:32:0C:39:6E:AC
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:de:e4:94:a8:ab:81:d3:9b:94:f9:c8:15:35:3f:32:9d:34:
39:54:ce:55:a4:b8:5b:b8:f8:06:7e:2b:56:ce:52:20:46:9a:
f2:e8:a3:a7:80:97:bf:30:bf:9c:cb:66:a7:c5:62:55:3b:cf:
a7:a6:0b:32:dd:2b:61:14:78:08:d2:df:ea:e2:4d:ab:8e:b0:
53:86:82:3a:7a:7f:6d:48:df:28:d6:d8:29:0a:82:c9:88:10:
12:ca:b1:05:96:8b:4c:b0:4f:47:b1:46:55:23:2f:08:b8:33:
91:28:35:f4:cf:99:0c:a7:f5:5f:a2:15:b1:1d:6b:73:5d:96:
bd:80:de:5c:2a:b9:70:2f:73:45:50:4c:b9:d0:fd:7f:43:34:
bb:23:eb:20:7f:7f:45:ce:b7:a0:23:b8:5a:5d:eb:7f:45:c0:
dc:28:a0:3b:62:af:d5:56:f3:ac:73:f9:f0:3c:b4:48:cf:db:
7b:fc:74:97:4d:9a:66:a8:ef:ac:20:45:be:3e:e9:fc:68:cc:
cd:b1:8c:79:a2:9e:f3:15:08:e3:cf:3d:e3:84:77:fa:8a:0d:
f5:61:e2:cd:99:06:2b:8f:b3:ea:c0:e0:41:4c:8e:0c:da:97:
3a:bd:2d:16:89:9d:9d:08:38:7e:8c:5a:cf:6e:27:27:3e:ab:
3b:c2:da:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:34:51 2026 by rpki-client