Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
File: DloI_DRpD1LbDCt-R-jlOIMUWpg.mft (raw, json)
Hash identifier: yWHOwhFvyPp/POXFpxs12+ch+47qdlx3nbkG4onq84A=
Subject key identifier: AB:79:58:D3:CB:C3:C9:38:2B:4F:FE:E2:F7:8D:85:AF:DE:56:2B:89
Authority key identifier: 0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
Certificate issuer: /CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Certificate serial: 019D292935F4F79EFAEC357FA1ACAE43393C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
Manifest number: 0398
Signing time: Thu 26 Mar 2026 08:00:59 +0000
Manifest this update: Thu 26 Mar 2026 08:00:59 +0000
Manifest next update: Fri 27 Mar 2026 08:00:59 +0000
Files and hashes: 1: DloI_DRpD1LbDCt-R-jlOIMUWpg.crl (hash: M+JOtGZcHvRYL1/yeuKydJLIUGdDosSt+YD8IiTBdMM=)
2: ZHi1ZhCdWfH9BoGN5VcU78t29bk.roa (hash: SRJcc4sRWkIGgmHfVj6UPyJviHaRkjxeQWqok2u9PGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:35:f4:f7:9e:fa:ec:35:7f:a1:ac:ae:43:39:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Validity
Not Before: Mar 26 08:00:59 2026 GMT
Not After : Mar 27 08:00:59 2026 GMT
Subject: CN=ab7958d3cbc3c9382b4ffee2f78d85afde562b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:68:e9:c0:34:29:23:55:32:f9:47:ff:48:
3b:c3:bc:71:fd:ce:25:22:a2:7d:cd:1e:c7:2f:ef:
15:d0:e6:8d:8a:47:93:ae:a9:df:1b:47:41:08:89:
3d:48:62:bf:35:15:0e:bc:3b:be:7b:23:9b:39:17:
54:32:99:e0:7d:97:b4:96:a6:ee:3c:29:0f:be:0b:
4b:03:ec:b2:77:f4:72:70:02:f2:6c:76:ae:d7:bc:
a6:6c:9f:67:a1:43:57:c9:03:98:b9:45:8c:c1:4e:
96:98:16:af:32:b1:44:99:5a:3d:2c:b7:a7:85:7c:
8f:39:98:77:c5:ea:a8:68:e7:46:bd:78:d3:9f:53:
eb:3d:6c:4a:b3:bd:cd:bb:27:3c:20:13:c5:dd:37:
18:0d:71:fb:db:c2:a5:45:27:b4:72:a9:3e:7f:fb:
47:44:15:ba:b4:c4:3f:23:a8:6a:b5:1f:18:d6:ee:
9e:ea:f0:78:7b:8d:a6:87:c8:d4:dd:5b:14:fb:c1:
f4:4f:af:c1:ff:e2:73:44:6b:3e:f2:80:f3:3d:b4:
8f:65:3d:d2:fd:1f:0c:98:8a:13:6c:cc:b5:a3:df:
f5:0b:97:f3:53:39:89:10:bb:d5:3b:26:93:d7:ac:
f8:2e:92:97:9b:c6:19:fe:9c:2d:f4:e9:61:3d:92:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:79:58:D3:CB:C3:C9:38:2B:4F:FE:E2:F7:8D:85:AF:DE:56:2B:89
X509v3 Authority Key Identifier:
keyid:0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a4:b4:3c:1b:aa:a8:6a:7d:76:b2:ed:d6:f7:73:82:b9:a1:
77:60:44:9d:00:6f:b9:b4:cd:28:42:19:98:79:e9:6c:57:da:
fa:96:d0:d2:ce:f6:b7:c7:7d:cf:96:f9:db:9f:1d:24:88:07:
c4:b4:ec:7e:2f:5e:32:d3:4b:3e:0e:b2:f6:ff:6d:a5:3c:2c:
87:54:ff:8a:5f:c3:27:27:0d:c0:6d:8b:69:81:b3:63:71:cf:
44:e4:f3:5f:48:97:4f:42:51:a3:e8:02:a7:46:79:9b:f5:7f:
c5:3c:d4:fb:03:50:7a:42:1d:7d:72:71:92:45:00:3b:84:ab:
5c:c7:61:64:8d:2c:53:07:e8:10:5b:88:6d:66:9f:db:5d:8a:
0a:b8:47:bd:2e:2b:64:85:c7:7a:aa:70:ec:4d:84:41:ca:8a:
e2:5c:3d:1d:6b:ac:9a:94:ae:81:10:56:79:a1:b2:56:4d:a5:
09:36:ed:6f:a6:00:89:59:01:64:ee:a9:0c:73:73:1a:70:18:
d2:79:2a:4e:b7:47:7d:6a:66:d7:52:a5:68:2e:32:4e:e9:23:
c4:7f:7d:cf:64:c2:c3:93:be:d2:dc:14:3c:2e:6b:71:52:47:
37:98:27:31:4d:37:25:3c:0a:21:fe:f6:2f:a2:97:45:d7:34:
7c:ea:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:39 2026 by rpki-client