Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: Jnx6L6b2IpncM3PCN2nIZGJwkXHEPmMGVWN2DKiIuVM=
Subject key identifier: 3B:76:A4:71:D2:34:F2:78:79:83:5B:8E:4E:8B:EE:A4:C8:AC:7D:26
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 019D292959041A4C393E036D94AC853F702E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:01:08 +0000
Manifest this update: Thu 26 Mar 2026 08:01:08 +0000
Manifest next update: Fri 27 Mar 2026 08:01:08 +0000
Files and hashes: 1: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: nA8WZP4eNHMoezwZRC182JxM5dkd7MiGAqgZfUD84iY=)
2: _Myr3fZN1tCVYld8vCIdG7V1e8k.roa (hash: UdvBEvfyvQ6h8H0q4zyZtW4WPV4vjg0onxiSmal+y2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:59:04:1a:4c:39:3e:03:6d:94:ac:85:3f:70:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: Mar 26 08:01:08 2026 GMT
Not After : Mar 27 08:01:08 2026 GMT
Subject: CN=3b76a471d234f27879835b8e4e8beea4c8ac7d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:36:a4:40:4e:ce:06:81:76:6c:46:93:b1:
8f:4a:bf:cf:24:22:07:b4:a6:93:4f:06:e2:2a:87:
0c:0b:1b:02:b6:97:9f:0f:aa:4d:4d:e4:ed:62:b8:
ea:44:5a:e7:2b:37:85:bb:5f:ff:5c:8d:04:88:e3:
ad:2a:ed:bd:8c:df:71:e0:e3:e3:a5:dd:20:94:aa:
36:4d:96:c5:a8:6d:29:48:ef:1f:69:b8:b2:2b:e1:
d9:b0:7e:99:27:dc:b8:dd:4c:7b:85:03:8e:98:9b:
72:9a:dd:08:ef:7e:ba:9d:1a:19:39:d8:cd:7e:26:
a0:98:f1:5f:0a:9f:4d:d2:33:5d:c3:f3:6f:4d:46:
d0:64:7c:aa:a0:d8:f7:94:03:a3:ac:85:a5:6e:8a:
a7:af:2a:10:19:fe:7d:df:cb:a1:32:2f:5f:dd:7d:
f7:68:d2:2e:14:a0:d9:60:d2:1a:72:38:33:9e:02:
36:45:d3:63:40:be:46:c6:7f:e3:58:76:54:c1:83:
34:2f:bf:d7:5c:62:c7:21:cb:72:98:26:66:1e:64:
9b:02:fe:04:4b:3d:ac:84:c1:b3:f2:5e:1e:28:4f:
2f:7e:2d:21:2f:fc:02:33:4f:ec:60:61:71:6c:15:
3e:2b:65:dc:e7:6d:98:d7:1b:e0:fe:b6:b1:8e:0d:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:76:A4:71:D2:34:F2:78:79:83:5B:8E:4E:8B:EE:A4:C8:AC:7D:26
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:35:c4:d6:04:a3:d2:aa:23:dd:90:55:26:64:a4:f3:2d:ae:
2c:7e:9a:86:1d:b6:80:cd:a7:81:ca:62:57:36:23:5e:ac:b5:
6a:2f:6d:66:a9:fa:26:cf:c0:c3:da:8a:f2:52:2b:a1:d0:19:
0e:6b:d8:f0:07:ba:1d:4d:04:c9:1e:76:10:c9:00:a0:b3:b3:
6f:1f:74:7a:9c:06:cc:7e:f4:6e:b9:ef:7f:a1:d9:10:df:37:
8c:a5:02:96:d7:01:bb:0c:c2:a0:b7:bf:6b:26:78:a9:d9:1e:
5b:3d:6a:55:91:3c:54:85:d1:49:45:94:42:8a:ea:34:f3:20:
b6:d2:24:31:88:7b:38:e8:e6:21:4a:f9:03:1b:c2:62:18:e6:
a6:0b:49:69:a3:25:ff:cb:78:96:e9:7e:7d:e9:5f:ea:6c:3c:
b2:71:fa:36:90:ea:24:0b:9c:cc:ce:bc:52:72:f5:6d:68:e8:
f6:f3:29:a2:7f:5e:07:e6:e1:d7:0e:d3:ec:af:36:5f:96:55:
4b:68:c4:52:2f:f7:c6:66:aa:12:dd:6a:ce:55:d1:c7:d6:08:
d2:5d:55:69:11:69:06:e2:47:44:9e:03:08:e7:df:ec:5f:98:
cc:a1:52:57:ee:14:70:e2:c7:aa:43:31:7e:37:d1:03:3e:53:
bd:90:c5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:20 2026 by rpki-client