Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
File: dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft (raw, json)
Hash identifier: aXhsXHsl6JMC/2tZv6gVSMs6aShQg0BFwXRsud1rU+M=
Subject key identifier: 6A:F9:FC:F2:CA:E8:BC:C9:95:9D:6A:B5:BB:CF:34:9B:74:76:5F:0E
Authority key identifier: 75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
Certificate issuer: /CN=75245438a2b6209c81675ef35783d89a19b707fa
Certificate serial: 019D2997210E96D894B54D1DDEC67D417A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 10:01:03 +0000
Manifest this update: Thu 26 Mar 2026 10:01:03 +0000
Manifest next update: Fri 27 Mar 2026 10:01:03 +0000
Files and hashes: 1: 1-rduehBiSXoXtEjm13X_baLg9hg.roa (hash: w3JHE4zjBQCl+As/2Jf4pROYK6+W2f/IVxYPRcpmzD0=)
2: dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl (hash: /t66ilFaFrGYx4fMzeSvNUfvocDE60GAnmcq5SBz4ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:21:0e:96:d8:94:b5:4d:1d:de:c6:7d:41:7a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75245438a2b6209c81675ef35783d89a19b707fa
Validity
Not Before: Mar 26 10:01:03 2026 GMT
Not After : Mar 27 10:01:03 2026 GMT
Subject: CN=6af9fcf2cae8bcc9959d6ab5bbcf349b74765f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:8f:0a:10:74:e0:61:9e:56:fd:69:f8:ba:
b6:49:ee:ee:33:50:18:99:24:db:03:6d:9d:0d:38:
c5:1a:bb:49:42:ce:6e:f1:c3:ce:b3:a4:55:e7:24:
58:c0:23:f3:5f:18:a0:2c:c6:0b:f9:15:a8:69:6a:
51:a9:c5:32:ef:33:b3:f9:be:fd:7d:88:5a:79:01:
a3:4f:ad:7b:63:d1:0a:0d:c6:ab:63:7d:7c:83:38:
67:79:02:53:86:26:b1:ac:a6:db:d7:47:47:e4:29:
0e:97:c2:90:ab:9b:fa:28:e0:c4:9f:32:65:f0:0a:
bc:bb:87:7c:1c:eb:62:b5:fe:2f:ab:cc:4e:ea:a2:
41:97:f2:af:d3:cd:34:ad:79:e3:a0:c9:c4:fe:2f:
c7:7f:cb:eb:0f:ee:23:2d:d3:64:a2:e9:7c:38:4e:
0e:94:14:e3:68:38:70:69:15:46:47:7f:4b:18:d9:
20:0e:19:d2:90:4b:37:fb:b8:53:08:74:04:f6:81:
40:96:27:da:7d:24:70:79:6a:dd:92:dc:b0:8b:61:
82:1a:a5:df:10:93:59:09:9b:87:29:a3:36:75:78:
bc:7a:f1:1a:bc:8e:7e:b6:a7:e5:a0:4b:3d:55:67:
8d:3e:e2:7d:e0:7b:80:a9:cd:f8:9c:03:db:f0:c8:
dd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F9:FC:F2:CA:E8:BC:C9:95:9D:6A:B5:BB:CF:34:9B:74:76:5F:0E
X509v3 Authority Key Identifier:
keyid:75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:62:96:56:2c:69:39:10:12:e0:a4:9e:d4:f6:e4:65:29:15:
b8:30:8b:bf:3e:b0:63:0f:f7:d5:d7:2c:83:c8:63:fb:58:b6:
d9:0c:59:d0:ef:19:97:cd:50:0a:52:b9:79:52:17:3c:73:dd:
04:e0:0c:33:cb:52:9b:bc:e1:ea:a8:88:8f:9a:f1:b3:2d:a9:
23:a9:95:30:cb:ac:1d:9c:24:ab:c8:07:e7:0e:cd:ec:11:b5:
ef:e7:99:73:2d:77:67:6f:18:fb:cb:15:7e:e6:12:ad:d1:fb:
3d:8f:1a:de:75:18:d7:69:73:9f:78:7d:64:b6:00:0f:35:fb:
02:20:87:84:f2:f2:15:96:36:30:d6:4f:2c:92:df:55:ac:3d:
3e:40:35:f6:24:26:6a:57:27:b3:3a:10:6e:9f:6d:23:20:aa:
94:d1:d3:f3:69:81:75:c4:18:8b:25:85:0c:ad:e6:3e:65:fe:
3f:09:7b:c5:95:3b:64:d3:4f:88:a0:f1:96:25:8a:ac:c3:97:
85:47:e8:44:90:57:b4:57:9e:47:38:01:7f:ea:7b:bf:1e:c2:
1d:f2:62:89:2e:ae:37:d6:ac:54:9f:6c:bb:65:92:e3:79:f5:
cd:93:b2:3d:a7:83:9f:17:1a:67:b8:b9:eb:16:30:1e:7b:87:
de:45:c5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:23 2026 by rpki-client