Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
File: DycDq41ZdUqyeopRaFRZG_sPLbc.mft (raw, json)
Hash identifier: vFAh5EOqboji2O7DQdTQ7CEZCWVSIE5BuOTNuKy0ZtM=
Subject key identifier: 76:C0:58:09:23:17:1C:71:EF:1E:D0:B2:12:27:20:E7:23:CE:FC:8C
Authority key identifier: 0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7
Certificate issuer: /CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
Certificate serial: 019D27DFB4529F0004BD74A9D00C9E33367D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
Manifest number: 0297
Signing time: Thu 26 Mar 2026 02:01:05 +0000
Manifest this update: Thu 26 Mar 2026 02:01:05 +0000
Manifest next update: Fri 27 Mar 2026 02:01:05 +0000
Files and hashes: 1: 1-L6Xar872u4_5jc1ukVWvIonRqU.roa (hash: v1Q3LXinOWm6sqSKFH1Z+RwnwoZCuDnEGlZUL13Yh78=)
2: DycDq41ZdUqyeopRaFRZG_sPLbc.crl (hash: M4nJLx7oabc9HnESqAnP74co5ZJou288qyhCrGPqAQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b4:52:9f:00:04:bd:74:a9:d0:0c:9e:33:36:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
Validity
Not Before: Mar 26 02:01:05 2026 GMT
Not After : Mar 27 02:01:05 2026 GMT
Subject: CN=76c0580923171c71ef1ed0b2122720e723cefc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9a:91:6c:4f:ea:7b:14:d5:d9:c4:ad:08:aa:
85:a0:86:fc:a2:48:b0:25:01:51:90:05:d3:11:2b:
8e:a8:91:54:7c:41:e8:91:6f:a3:6c:02:b7:2e:85:
3c:55:4a:7a:93:3f:01:f9:26:89:6a:5e:e7:cd:a8:
cd:04:82:99:13:c3:a3:54:7d:6c:64:f7:6c:65:11:
76:ad:32:a4:2d:e6:0c:c3:c2:3a:cd:54:ea:84:f3:
5a:0f:53:5c:90:d4:8c:37:35:c4:e0:5b:0f:ae:ec:
a9:c8:f6:24:e1:a2:e4:4a:d7:7b:60:0d:58:de:c9:
80:29:68:b9:53:7d:d7:f3:ac:06:e3:38:19:09:15:
d0:b3:f3:8e:9b:22:7f:30:71:10:e8:e4:39:0e:3e:
07:15:f9:63:e1:dc:c4:95:37:d3:99:aa:33:ca:4a:
ef:03:9b:37:14:84:c1:2a:34:97:de:90:68:43:02:
58:cc:82:39:de:66:27:49:1c:d4:98:11:87:c2:92:
6c:0f:30:e2:91:8d:02:f1:d6:58:9e:62:18:f0:eb:
a3:73:40:ad:6c:c7:29:73:3a:e4:6c:96:93:e1:aa:
c7:fe:b2:94:ad:1e:e0:c5:ac:29:01:ad:26:e0:a1:
43:d2:fc:67:75:5a:c0:42:ca:85:75:b2:e9:de:53:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C0:58:09:23:17:1C:71:EF:1E:D0:B2:12:27:20:E7:23:CE:FC:8C
X509v3 Authority Key Identifier:
keyid:0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:21:ac:27:96:56:d7:2d:41:6d:cb:b6:73:f4:24:02:c6:fc:
b8:13:c7:7a:41:78:93:f1:45:d7:2c:70:18:4e:a1:26:5d:64:
1d:23:ca:93:8d:c4:c2:6a:e7:20:37:cd:f0:2e:97:93:c6:04:
39:07:fb:f5:88:dc:11:d1:00:07:3d:72:ec:21:56:94:b6:86:
19:8d:57:3a:30:da:9d:92:0b:74:d5:4f:53:80:ef:2d:2c:c4:
29:a0:4a:54:22:28:9c:a9:88:bc:d2:e1:65:ea:38:9d:40:10:
c4:52:4b:9b:7e:16:79:08:c2:a6:b0:b2:fc:40:01:e3:7a:31:
b5:d5:23:75:6d:62:49:d4:dd:5b:27:5f:ff:0e:68:79:4c:e3:
fc:49:5a:31:71:e4:98:43:21:fc:e1:96:1c:b1:72:77:ea:67:
bc:96:f5:00:70:f7:07:b7:db:27:19:b1:2c:e8:16:05:c9:79:
61:b0:28:82:0a:28:72:71:dc:c0:65:c5:66:6b:b7:77:0b:02:
9d:cb:57:c4:08:ff:98:27:32:69:5a:b0:04:ba:3c:35:fb:83:
6a:ae:17:44:9a:1d:1a:d4:61:9f:d3:a1:ff:b0:a1:71:9e:bd:
27:7c:2c:ec:cc:d4:51:2c:7c:cc:e3:44:97:84:da:5f:51:08:
e9:03:5d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:42 2026 by rpki-client