Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
File: DhcO6FnpH0lz3kpXKxutLzpdGCU.mft (raw, json)
Hash identifier: 1bB1AxyqheG9gM/ADsMvIYvLRdohoB0oB1zQoXQ0/Bs=
Subject key identifier: 5E:21:FF:63:D0:5E:51:C1:CB:4B:A8:F8:E0:79:B1:BB:D2:9A:92:58
Authority key identifier: 0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
Certificate issuer: /CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Certificate serial: 019D2A3B81AB086C0F45647B2013B0107183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 13:00:36 +0000
Manifest this update: Thu 26 Mar 2026 13:00:36 +0000
Manifest next update: Fri 27 Mar 2026 13:00:36 +0000
Files and hashes: 1: DhcO6FnpH0lz3kpXKxutLzpdGCU.crl (hash: KLX7xAF/USx4MyEAyITTnG5cB0CPUEzl85jeap+96Gk=)
2: dI860G5CcZzWUW-QRPRmqWGb4fY.roa (hash: xn3G/ZcwlpPlA7T3BoJ7J8XVqbOCLHLfQJh83fXIfa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:81:ab:08:6c:0f:45:64:7b:20:13:b0:10:71:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Validity
Not Before: Mar 26 13:00:36 2026 GMT
Not After : Mar 27 13:00:36 2026 GMT
Subject: CN=5e21ff63d05e51c1cb4ba8f8e079b1bbd29a9258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:22:e9:57:c8:51:b6:ea:e3:1e:90:d5:c8:
47:21:ac:45:4f:aa:41:bb:74:17:5d:33:d5:7d:e5:
a9:36:f3:0b:77:42:85:68:00:23:f3:8f:b7:0a:9c:
dc:77:75:46:b5:94:ec:13:17:94:ac:c0:f5:ec:52:
c3:86:79:e1:3e:59:69:b2:10:a4:02:16:17:b3:05:
ea:87:64:86:6a:5a:8e:9b:ad:4d:4e:95:6e:fa:10:
4a:64:c9:c3:9e:8d:60:a6:ed:fb:cf:f3:3a:79:fd:
f1:3c:ca:d8:69:f6:9b:d1:d7:9c:77:fa:a1:6f:71:
b5:e6:19:39:ab:06:1b:1c:fb:a1:9e:51:54:1b:8b:
01:02:59:b5:8b:44:d5:f3:6d:8f:2c:96:1c:e9:ad:
11:a3:43:b5:02:7a:ee:d7:25:f7:73:f9:59:13:eb:
60:cb:d4:d8:5b:12:a6:ec:40:0e:30:9d:ec:cc:d2:
39:f4:6e:42:7a:eb:70:35:d7:a6:ff:11:8f:dd:9d:
d9:ff:ad:b0:3f:18:00:04:7a:e0:47:cb:67:4a:d0:
0c:ec:0f:05:cd:02:79:d9:67:f4:29:92:8b:3f:fc:
91:b3:7d:59:59:23:af:c2:43:e7:fa:3c:c7:4c:63:
84:a7:2a:b3:a1:20:70:95:30:6e:4c:71:35:07:8c:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:21:FF:63:D0:5E:51:C1:CB:4B:A8:F8:E0:79:B1:BB:D2:9A:92:58
X509v3 Authority Key Identifier:
keyid:0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cb:ae:a4:13:bc:ce:da:32:dd:10:10:b9:68:a3:8f:0c:6a:
78:bf:94:f9:f2:34:5e:d0:b8:68:da:eb:a4:4e:46:a9:50:7e:
62:62:8b:cd:7f:05:7f:5b:c5:98:52:f7:fd:ec:34:0a:6f:04:
83:4d:25:3f:9a:8e:62:b2:f1:ec:b7:f6:b7:a4:4b:44:7e:98:
cb:c5:91:96:53:bf:48:e2:d0:52:12:72:32:21:0d:fa:37:ea:
ad:2c:5a:c1:9b:6a:f8:30:46:4e:99:58:6f:9d:55:e6:b2:65:
48:90:fd:9e:3c:49:2f:0b:9f:94:6f:6e:e0:47:b3:97:af:80:
57:c1:4d:c1:24:16:d5:96:f5:5b:21:14:8f:a4:ac:3c:1d:68:
b8:2d:4b:9d:b8:84:bc:91:a0:c3:90:61:c5:91:36:6b:38:30:
d5:66:23:2f:de:d7:e9:8b:1a:7b:d9:a1:18:b4:23:a6:af:0a:
71:c5:16:db:36:ed:90:fb:f4:69:4a:b1:63:60:d1:22:f3:f5:
d4:b3:54:27:64:c7:1d:05:32:32:99:ab:69:f0:3e:a6:44:ac:
ee:74:98:ba:0a:df:91:fc:83:9e:3d:08:c5:e5:6f:dc:aa:9a:
0a:54:0f:1a:23:6d:fc:23:eb:2e:26:62:87:79:23:d4:10:48:
2e:57:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:02 2026 by rpki-client