Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier: 875o5yoyTK8UScQVRJY/hMIHyzGIKwrw3ZYfSLHTeWE=
Subject key identifier: B9:C3:CA:82:46:53:FC:84:75:0F:31:2B:FC:A8:9C:CD:24:6E:D0:63
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 019D2816FDA5C2F3A1FC28416ED49C394326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 03:01:28 +0000
Manifest this update: Thu 26 Mar 2026 03:01:28 +0000
Manifest next update: Fri 27 Mar 2026 03:01:28 +0000
Files and hashes: 1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: oxFBJpOHdIJtDhZOF2OMIuCirSN3nMeO9SiHIOOzUns=)
2: oB9vecBEFrYggxsxtq3fiITzJ2Y.roa (hash: dq4CVE4zFGUyDpHFmLkSZ9sIR2d8JjqnFKVgnpPDCIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:fd:a5:c2:f3:a1:fc:28:41:6e:d4:9c:39:43:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Mar 26 03:01:28 2026 GMT
Not After : Mar 27 03:01:28 2026 GMT
Subject: CN=b9c3ca824653fc84750f312bfca89ccd246ed063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:71:42:33:05:e5:e2:0b:84:1a:a4:2d:7c:
c4:d3:54:30:58:ca:1e:b4:15:75:e2:6d:51:6a:b4:
64:83:87:7a:da:18:97:58:1b:df:a5:a1:6b:c8:46:
5f:bc:48:b8:7f:3f:b3:88:13:76:5d:e9:b5:b7:93:
7b:55:da:c1:32:cd:75:c9:4d:8d:6c:cb:42:a0:0f:
00:c5:ec:7e:6e:3a:4b:13:6e:be:0b:79:11:3d:3b:
6a:f6:92:52:23:9b:cd:cd:f1:22:c6:5a:de:ae:e4:
1d:6b:4b:ac:0f:74:c2:8c:7e:87:ac:af:68:ec:40:
a1:48:2b:d1:d0:39:6f:a9:46:42:23:21:ff:39:2d:
07:6b:e4:8f:e3:34:6a:e6:47:e1:5c:65:08:7b:b4:
de:14:fc:03:63:ba:ab:67:fe:fc:62:93:2e:b8:12:
a6:a5:1a:59:03:e4:29:88:15:30:3b:ec:95:3d:1d:
89:e9:3f:a8:b3:73:3f:27:e9:1a:61:6c:01:a2:2f:
7f:60:9e:85:89:58:02:21:d1:42:44:f9:bc:98:16:
5e:3b:5b:bd:27:2c:5c:89:bb:d0:e3:12:9e:a8:40:
f0:f9:6d:87:d9:60:d9:31:9c:d9:62:73:ff:9c:b2:
bb:27:0e:b8:35:4a:25:57:72:e8:74:42:d7:ff:00:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C3:CA:82:46:53:FC:84:75:0F:31:2B:FC:A8:9C:CD:24:6E:D0:63
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fc:c7:d3:72:57:b1:75:9f:ec:a7:ab:46:b1:49:f7:10:82:
95:7f:23:33:45:65:9d:18:66:a6:94:32:53:fe:d0:ee:1e:ea:
db:69:41:ff:99:27:6e:23:b9:91:c4:ab:af:29:37:59:46:76:
85:cc:e1:87:83:79:47:6f:61:be:b4:a4:46:a6:5f:ad:d5:e9:
f1:58:86:b7:4f:b2:1a:e4:0b:e2:60:bd:d0:91:93:2c:c1:fc:
b3:f7:cc:ed:89:ff:7f:fd:89:e8:82:f6:e5:db:41:69:97:14:
3f:ed:d2:7f:96:32:4d:9a:87:d1:38:31:1a:62:7a:b0:94:30:
70:31:68:cd:38:07:4c:9e:eb:31:bb:5d:f9:eb:0b:15:ca:eb:
9b:ac:c6:5a:55:e4:de:b7:ff:dd:ee:fe:1c:4f:c8:fa:d5:55:
6b:b5:db:c4:58:29:07:4c:13:50:48:ba:86:28:ae:d4:35:cd:
c5:7f:00:32:d8:ec:8c:61:4e:b2:ec:c7:98:03:45:4e:3a:ea:
e5:30:db:47:29:9c:7f:eb:09:70:6d:df:48:af:48:7a:48:b7:
ea:a1:70:61:d3:58:96:83:14:0d:d7:e9:6d:f6:06:ec:24:59:
65:e1:57:e6:8f:cf:c5:ee:a7:18:c7:cd:3f:27:b2:8a:f1:05:
bd:d4:20:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:06 2026 by rpki-client