Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
File: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft (raw, json)
Hash identifier: OPaMutoTUl2AQPddaA5KRhlX9ko2aDhkzqaXb43fABo=
Subject key identifier: CC:E0:37:58:1D:CE:FD:4D:29:C4:1D:37:09:49:F2:17:83:80:15:92
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 019D27049F8D9D48CD9DEB89179C4BD90D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: 4e7ahtukuDD9v0DBSPR_moHY4zI.roa (hash: c9S2a0s4aMrl9rYn1z2bRbzkVr+5WcdFQcYn2M/ymYE=)
2: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl (hash: ivMBKuIh79HnT8KyVO1rNe+Qlk6ac/oyPoPYoxGQEwQ=)
3: ryJYRRktlXHgBSVR5cvg8fyHDeM.roa (hash: WOEZWIHK7L7jVpd5u3Y2JfH4hWkoWnXMkfyztKy8m4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9f:8d:9d:48:cd:9d:eb:89:17:9c:4b:d9:0d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=cce037581dcefd4d29c41d370949f21783801592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:8c:55:d0:95:c5:2c:48:54:44:78:7d:b2:
0f:2c:29:9f:79:e0:b4:37:ae:4f:21:48:04:8b:7d:
06:ad:38:2b:ad:92:d6:f0:55:53:2c:4d:12:27:8d:
1b:f9:f0:41:2a:f7:05:5d:35:a8:00:36:86:14:da:
60:b7:cb:26:c3:65:35:ef:12:13:d4:19:1d:bb:d9:
56:79:ed:f6:91:00:86:97:17:55:a3:45:3e:6c:fb:
01:d2:a5:2e:34:00:42:44:ea:b9:60:53:ba:39:ea:
68:ec:21:2f:d1:20:9c:14:70:56:af:56:41:59:36:
a2:8b:64:19:37:a2:b3:d2:dd:c6:00:e4:d8:34:44:
60:7d:53:89:64:6b:80:2e:eb:68:04:db:91:b3:22:
41:5f:c4:df:83:89:17:c3:11:ae:86:69:4e:7c:cc:
81:c6:8f:46:d6:ae:58:b4:01:d0:ed:7e:86:b9:49:
fb:5a:e8:cb:6e:8e:f6:22:dc:36:52:b1:df:68:ad:
87:c4:0c:a4:f3:2b:53:c8:47:57:b1:f5:33:9a:8a:
ac:8f:1c:1b:30:a1:e5:0d:38:19:a6:31:60:7d:16:
e7:52:38:b2:e4:85:53:9f:1e:2f:1c:d1:b8:84:fe:
a0:d8:f8:77:5d:52:fe:b8:b2:89:2d:b5:c3:50:bc:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E0:37:58:1D:CE:FD:4D:29:C4:1D:37:09:49:F2:17:83:80:15:92
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cc:7d:3a:8c:b8:ff:6a:68:8a:a1:65:4a:6d:28:86:d4:11:
d1:1d:13:9f:8d:d1:69:2c:86:e6:bd:5a:b7:01:99:ce:09:4c:
21:b1:64:89:97:ff:af:90:1a:7e:99:ff:53:e1:35:63:0b:cc:
eb:0b:fb:d2:18:87:2e:cb:82:e4:65:2f:51:81:e4:0e:45:81:
34:2b:d7:7a:b2:fc:e9:63:66:20:7b:18:f1:19:8e:3c:fe:fd:
86:dc:ff:b2:b1:f6:6e:50:ac:2b:76:54:d9:9a:2e:98:e7:83:
e2:0a:c0:44:3d:ce:eb:98:d2:e8:8f:7a:7a:94:bc:a7:cd:ad:
bb:63:cc:38:51:ab:0d:73:41:de:dd:44:32:e2:10:f3:29:85:
11:9a:8d:9c:18:6a:32:60:04:96:98:bc:a3:c1:4c:95:87:d1:
46:8b:ce:f0:88:2f:85:30:62:e2:ee:4a:4a:97:09:87:8a:23:
2b:b5:a9:0c:e9:f8:3e:1c:4c:2a:d0:d4:5f:4b:19:67:34:12:
0b:1d:ff:5b:13:5d:a3:64:8d:85:f1:2b:70:ec:d4:c3:9e:f7:
8b:af:f6:48:de:96:9f:20:d8:82:56:e7:d4:55:a9:69:2c:d2:
86:b4:65:aa:62:d9:2a:72:dc:de:b1:1b:9c:3f:a8:ec:0f:cd:
ca:b3:88:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:19 2026 by rpki-client