Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
File: dKR-OmcWCuRmLg68ztepIzzker8.mft (raw, json)
Hash identifier: /Cbp2dBFoN2lnZPF98sUUDo71NIu83nZINcVy5t+qN0=
Subject key identifier: 49:88:E4:C7:63:4A:94:1F:EF:29:34:25:FF:B7:88:80:AF:DB:C9:DF
Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Certificate serial: 019D2A3BB3B62D2AC15A3EB0BDD4670C2B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
Manifest number: 14DB
Signing time: Thu 26 Mar 2026 13:00:48 +0000
Manifest this update: Thu 26 Mar 2026 13:00:48 +0000
Manifest next update: Fri 27 Mar 2026 13:00:48 +0000
Files and hashes: 1: 6mRk8qkPUY_hAEIfcfoj_C8oppM.roa (hash: oQ/nvQVeem5/81dVrUzfG4QYNlLbYK0KGRFBYiZ/qW8=)
2: dKR-OmcWCuRmLg68ztepIzzker8.crl (hash: WSllruf9ssNu1B0r9ceeoPkmW6CBVh3PZbRLBKaZT9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:b3:b6:2d:2a:c1:5a:3e:b0:bd:d4:67:0c:2b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Validity
Not Before: Mar 26 13:00:48 2026 GMT
Not After : Mar 27 13:00:48 2026 GMT
Subject: CN=4988e4c7634a941fef293425ffb78880afdbc9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:87:97:50:cf:02:97:dc:7e:4b:9c:59:d5:
c5:83:04:9b:f9:4c:54:19:9c:d4:a5:d0:08:be:a9:
a2:f2:e0:f8:b7:cd:1b:f2:73:71:15:cf:02:d8:51:
ea:5d:f6:a8:bf:5d:19:24:52:8d:bc:98:5c:34:be:
6c:53:12:3b:72:91:5c:66:4b:6d:5a:b8:4a:af:41:
e9:06:30:5c:cc:0b:1d:aa:23:5f:8b:98:e9:1a:64:
1a:f4:32:70:2d:61:10:15:c4:8e:93:e5:93:be:10:
9a:96:79:38:db:f0:6a:dc:eb:13:9b:7e:69:4e:36:
ea:6a:51:c4:c8:f5:b2:4a:2d:ca:e8:10:fe:1b:2e:
a4:ca:91:bc:fa:07:b4:55:ac:10:63:fc:c2:3d:88:
11:25:e6:a2:19:4d:13:5c:61:6e:93:07:de:dc:01:
a8:e0:c1:c1:35:ea:9e:48:77:fa:2e:33:bd:03:22:
b4:b3:0e:3f:6a:56:5d:c4:1b:b3:66:e1:03:19:f6:
a4:5c:38:c1:96:8a:11:29:48:30:12:ae:f6:53:3a:
d1:54:d8:c5:1e:f0:16:5c:09:9b:9a:54:4b:a2:dd:
26:03:98:8f:ef:3f:54:29:07:f6:d6:2b:bd:a8:51:
8c:cf:e2:2a:33:ad:6c:64:f6:2c:95:08:91:0f:88:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:88:E4:C7:63:4A:94:1F:EF:29:34:25:FF:B7:88:80:AF:DB:C9:DF
X509v3 Authority Key Identifier:
keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a7:cf:c8:3b:9c:25:42:61:2d:83:89:4a:51:e5:2b:c2:13:
e8:08:cc:08:84:ea:7f:f7:0d:57:96:a5:0c:4a:30:2a:73:11:
83:35:64:b2:2f:2d:91:8c:b3:0a:32:a4:54:b6:75:de:d8:a2:
ac:7e:63:be:e7:a3:7f:16:39:a9:62:5b:3c:17:87:37:34:62:
7a:09:bf:62:b5:6a:e5:24:47:e0:3d:0d:0c:23:a5:6c:cf:0e:
d5:68:80:11:d8:43:b2:99:47:ad:d0:46:31:cd:de:13:d9:a4:
9a:79:eb:55:eb:a7:1f:7c:20:dc:73:b3:d5:ad:80:99:34:81:
5e:80:22:2c:4c:6f:be:25:db:51:84:60:0f:6c:e9:d4:71:fc:
a1:9c:64:37:eb:e3:cc:73:b4:42:70:88:19:8f:5c:d2:9f:b9:
2d:73:18:6d:a5:05:64:9e:2d:ef:91:19:cb:97:76:51:d4:4b:
bf:ff:b4:5a:89:46:03:3d:9a:54:73:99:eb:07:01:a1:e1:a7:
8e:08:40:e4:2f:a8:49:53:68:66:d9:52:3e:2f:18:dc:ad:fd:
e4:b0:ff:17:ac:81:e4:fa:9c:b0:6c:06:97:02:9e:fc:bc:ad:
87:1d:82:48:c3:a3:43:7e:7c:62:d1:fc:39:da:b8:4d:2c:9b:
27:4f:0e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:52 2026 by rpki-client