Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
File: dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json)
Hash identifier: X3lR08lYwPJvlGHA8TfsCa4d1x0oJ3yRYhBEH+prbR0=
Subject key identifier: 96:91:C3:4D:26:77:58:79:07:A6:F9:04:A7:5C:63:50:18:1E:52:E5
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 019D258344595146F4CD1D60EE3E0E675957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
Manifest number: 10CA
Signing time: Wed 25 Mar 2026 15:00:52 +0000
Manifest this update: Wed 25 Mar 2026 15:00:52 +0000
Manifest next update: Thu 26 Mar 2026 15:00:52 +0000
Files and hashes: 1: 17ayZmNEJZqZL9fR72OT6qkcxjg.roa (hash: 7/2bDZui8dv75HjOV3Tw5e3oUnpjj3RxmUGlZrheZ/M=)
2: GFN0Xfo0hQlgS0ud4l1upE2EzNg.roa (hash: y777qRGEhPwlWpAtzq0goRcn8bZ+BbeZhZ9OTAaKg5I=)
3: JEeGJlJzDZv7X5-PTEcchFlbpzM.roa (hash: 4jWqLUKBrgm7XTmYBRKBp3tw/IpbzhhcNF/Uo33+quQ=)
4: T9ukIpeE8FQqySiWWIvM8tmpTMI.roa (hash: ibkl+Urb1bu42K9P8KLmWW1X4v+Ewa8euGPZaFBg1oM=)
5: TJ4d2WYpIjH4mLA1Jef3zbs5h1w.roa (hash: bvpYF9UPs3HZjo44Cry+9B0U6H15yPL3VjfGpzCMqks=)
6: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: Zztbf8+DMyvFl165QAL2NLArnFPOLwbFvi/fXd1lnBI=)
7: kKZw2NkvgOYIk1IkYRQ8k9C-eyo.roa (hash: 7bjk9DIjv1/p8D5/L/JVXvNXm2hIMbNO/Bknu6ms2kc=)
8: zxlNoz3rzQ3-dAnhy_jjif6hTJc.roa (hash: J8qFyCD+0ZUlnXfOJKaFx3pu76rmJ2d6yo1rgVv/jyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:44:59:51:46:f4:cd:1d:60:ee:3e:0e:67:59:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Mar 25 15:00:52 2026 GMT
Not After : Mar 26 15:00:52 2026 GMT
Subject: CN=9691c34d2677587907a6f904a75c6350181e52e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:48:30:e2:90:e5:94:de:2b:f9:47:05:d8:
ac:a5:b5:4d:ee:0c:ab:1d:d4:6c:65:47:ef:fc:69:
63:df:d8:f2:17:f7:22:74:4c:48:b5:32:d4:e6:30:
36:4c:3b:9f:93:a7:31:22:22:d0:a5:4f:84:b6:6f:
3e:e4:24:b5:f1:af:30:b0:dd:48:8d:f5:29:29:d0:
7e:f1:11:2b:d3:e8:ef:7e:5a:6d:0a:80:58:66:43:
e9:83:e1:90:b2:c7:06:ae:8c:24:72:36:1c:60:1f:
af:28:b4:b8:e0:79:c2:8e:87:7e:58:33:1e:91:7a:
e6:13:80:f3:e0:04:16:a4:f6:c9:0d:6e:89:73:f5:
57:a3:cd:b6:4c:4f:9a:68:7b:c3:f5:5b:63:72:e4:
3e:a3:a7:1c:45:6e:d0:ee:c2:55:a0:36:a0:7c:f0:
b1:5c:18:78:f7:34:0c:6a:fd:f7:04:70:80:35:9d:
2e:41:26:41:6f:73:30:0c:66:d3:8a:63:84:96:9e:
80:58:f0:17:aa:6c:38:6e:20:fc:67:58:10:3a:e3:
2a:c6:87:5e:b4:76:a7:11:74:a3:37:bc:dd:77:53:
a2:89:dd:6f:25:5b:22:93:9a:cb:96:0e:5d:f6:f3:
06:55:d5:c0:7b:7f:72:b1:13:81:2b:1a:dd:2e:28:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:91:C3:4D:26:77:58:79:07:A6:F9:04:A7:5C:63:50:18:1E:52:E5
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f6:d5:fe:b1:10:c7:4a:64:12:33:37:5b:b2:32:cf:9c:47:
02:07:1c:3f:fc:75:c3:bb:88:cc:ba:03:8c:7d:15:a7:a4:3b:
cc:92:e3:9e:4c:21:6f:eb:17:2d:f1:0d:fb:35:63:e7:7b:95:
55:1d:c0:70:7b:c1:72:51:46:18:04:29:22:a5:fd:7d:58:77:
7e:55:df:95:38:1a:43:b9:f2:e6:cc:19:34:bc:d4:8b:94:3a:
b7:63:25:43:54:e9:2c:cd:40:e3:c6:29:09:d0:8e:44:6e:7e:
25:22:e7:03:9a:4a:48:61:e7:fc:50:8a:91:08:56:3e:0b:16:
8d:38:de:88:26:12:23:9f:45:9a:1f:8a:f3:03:3b:86:6f:13:
74:7a:5b:ca:c5:a7:d4:c7:7b:71:04:4d:89:75:de:7f:5d:c5:
e8:45:ed:fd:48:a6:3f:82:85:a5:1f:c0:24:2c:dd:f8:6d:ad:
5a:5f:ae:22:30:9f:61:35:49:8b:ad:79:cc:7e:dd:3a:35:06:
f7:b0:e1:8e:3b:ac:78:b2:88:02:f6:a5:43:24:eb:b2:44:75:
db:42:0c:39:1b:cd:91:a0:71:88:0e:c7:36:49:aa:3e:32:41:
48:42:bd:24:7b:a2:7e:57:e4:a9:5c:0b:c2:94:78:1c:c1:6c:
06:6d:9b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:55 2026 by rpki-client