Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: eXE3Al/Pz5wHYHJ1/IQsRpB4JMXhtQ55j3vetVaLpiI=
Subject key identifier: E4:DE:E3:9B:1E:1E:40:2C:08:96:29:9B:50:E5:51:BB:22:01:7C:3A
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019D2703F7F4BD0C1812D9B6014D10CD62C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 22:01:04 +0000
Manifest this update: Wed 25 Mar 2026 22:01:04 +0000
Manifest next update: Thu 26 Mar 2026 22:01:04 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: V00Ea6wlDIduaeRAODVI6Rkkcso/a7P8hPq3ISLE4dU=)
2: xRmmdqH1-j--sEXPtnNY3Z-R5Zo.roa (hash: 3OUa7VjiPRdUyQdSMo547+vkOocCdI86key02w1U7/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f7:f4:bd:0c:18:12:d9:b6:01:4d:10:cd:62:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Mar 25 22:01:04 2026 GMT
Not After : Mar 26 22:01:04 2026 GMT
Subject: CN=e4dee39b1e1e402c0896299b50e551bb22017c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:ac:8e:93:fe:00:20:80:a7:2d:0f:4b:2b:
53:d7:35:50:06:7b:49:0c:72:89:a1:34:cc:18:80:
3a:80:3e:0d:e9:81:6c:c3:b2:89:16:e4:db:7e:0b:
f6:8b:5c:4b:33:dd:5f:b9:16:87:00:dd:af:f8:61:
1c:d2:6a:10:ac:80:cb:22:a3:cb:8a:e9:ab:62:d3:
0b:48:d1:e1:2c:d2:28:12:ed:bd:3c:c6:68:91:78:
ba:e2:07:38:34:fe:66:e0:b6:3d:e4:6f:03:a1:6b:
71:08:25:78:86:31:40:02:4c:4c:fd:1b:09:46:dd:
18:f3:0e:0f:c5:5f:df:cf:e1:0a:92:d0:fe:59:bb:
88:61:01:7f:53:c7:6e:83:b8:7e:47:af:76:a1:c1:
c9:ea:0a:e1:43:bb:24:2f:b4:f3:bf:fd:bb:cd:8c:
dd:5f:77:7a:bd:41:b0:5f:97:71:13:96:14:5d:76:
c5:f5:82:f7:0d:d9:dc:ec:3b:f0:0d:6e:f6:68:64:
5a:c8:37:bd:9b:c8:ad:d7:1f:63:72:d0:9f:a6:6e:
0d:9f:0d:c8:f8:2f:c0:ea:67:4d:25:80:92:bb:1b:
36:a0:61:fc:e3:f1:31:df:36:59:48:37:6e:0d:8b:
ac:34:c7:7b:a9:b3:71:eb:98:ab:86:b1:ac:80:7d:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DE:E3:9B:1E:1E:40:2C:08:96:29:9B:50:E5:51:BB:22:01:7C:3A
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c3:5e:1f:37:a2:16:a7:8d:04:1f:33:7a:30:fe:be:63:6b:
ce:2c:43:39:64:5a:0a:ab:91:18:96:e1:1a:1f:e1:d7:86:07:
d0:77:57:06:f7:69:07:e5:be:40:ea:e8:f4:2c:31:69:39:a3:
b6:fe:f5:46:f6:1f:f3:e3:d9:c2:ca:a7:b4:43:1e:bf:3e:6e:
f9:73:4b:09:2e:70:91:3c:dd:ff:95:75:ed:85:12:11:a0:cb:
52:89:29:8f:2a:79:a8:13:b8:c1:f5:66:9b:b9:50:14:97:f5:
18:00:f0:66:d5:0d:ea:e0:9e:84:fb:62:3c:0b:26:70:c4:a5:
31:15:cc:0e:59:0e:48:78:24:5f:27:39:45:62:45:06:ab:6d:
61:83:7d:37:ae:80:7b:0f:11:0b:8f:7a:fe:31:5a:10:20:2f:
70:48:70:16:48:0d:71:d5:e9:c1:eb:aa:cc:3a:e4:c0:54:88:
f7:5c:9d:c8:57:6a:10:ed:53:09:7f:af:65:2b:04:31:71:fd:
70:49:1e:cd:ea:5e:1d:d2:b2:64:84:f1:0e:99:2f:a6:2a:bc:
de:0a:70:bd:ae:5c:4e:0c:94:81:56:aa:cf:b7:9c:f2:42:20:
70:b3:40:9a:59:bf:2b:32:0a:d1:62:09:c5:3d:1a:97:01:e7:
cb:a6:bd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:46 2026 by rpki-client