Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
File: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft (raw, json)
Hash identifier: kh5MUgmc2A9O3/W7HCowUkeKYiblkL0QnakIAB0txp4=
Subject key identifier: 44:9D:9C:9E:9E:F7:B1:BB:94:49:00:6E:8D:9D:02:82:A4:60:EE:FA
Authority key identifier: 0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
Certificate issuer: /CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Certificate serial: 019D2A3B556DDB99ECBABCF1890621BF9484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
Manifest number: 1737
Signing time: Thu 26 Mar 2026 13:00:24 +0000
Manifest this update: Thu 26 Mar 2026 13:00:24 +0000
Manifest next update: Fri 27 Mar 2026 13:00:24 +0000
Files and hashes: 1: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl (hash: 7x6UOLZh0GiTABnq7/PgfJAWq00WAUHRS9TkUt14v64=)
2: vOLYbuZI2HiAQAMspaYJozGTYd4.roa (hash: 2GBF+iOAjgmkpYWuKiOs1PlAzGgzPUynmOp5R9AhrOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:55:6d:db:99:ec:ba:bc:f1:89:06:21:bf:94:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Validity
Not Before: Mar 26 13:00:24 2026 GMT
Not After : Mar 27 13:00:24 2026 GMT
Subject: CN=449d9c9e9ef7b1bb9449006e8d9d0282a460eefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:1d:49:fb:c1:0e:ab:16:48:13:35:ca:1c:
c7:c6:c7:40:4b:6e:f9:31:70:75:e9:a6:2f:2c:a6:
e8:03:fd:1b:1f:77:01:c6:aa:6d:39:fe:9f:d9:38:
b8:dc:41:4c:4d:5d:ac:b3:95:b2:df:ec:1c:4b:d9:
79:ab:8c:fe:3f:1f:09:92:37:9b:31:5a:45:f8:82:
3f:78:1d:7f:f3:c0:1c:c1:19:11:38:9c:86:35:81:
e9:35:11:a7:47:ac:dc:de:a0:22:ba:32:4c:65:f5:
af:f2:33:94:69:01:b7:d4:8b:78:4f:b6:19:dc:b0:
ab:9b:50:1e:8d:32:67:3c:6e:42:51:0f:2a:e5:89:
fa:2a:60:ff:f6:6f:62:1c:85:56:18:f8:bd:ca:fb:
50:bf:4d:7f:a7:a6:b3:19:bd:b2:99:ea:06:37:2e:
e0:40:d0:f4:03:03:d8:70:3e:41:28:77:3d:17:34:
53:6d:99:02:52:6a:af:2a:7d:6b:b6:8c:f6:94:c3:
ca:63:cf:96:e7:20:01:88:c8:db:80:77:ac:5a:56:
d6:5c:e3:e2:69:30:23:2e:12:17:20:cc:89:0d:7e:
a3:3c:6d:9e:df:19:67:b9:62:36:27:34:1d:1b:af:
47:03:3f:06:92:57:fc:54:e2:fd:e1:0b:a0:c8:6c:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9D:9C:9E:9E:F7:B1:BB:94:49:00:6E:8D:9D:02:82:A4:60:EE:FA
X509v3 Authority Key Identifier:
keyid:0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ab:e7:50:5e:0c:37:79:16:48:bd:97:03:7b:5f:20:5d:ac:
b5:70:09:1c:d0:18:1b:c4:bc:e8:91:65:05:31:bb:20:30:74:
95:96:af:c5:72:ff:f2:da:e1:13:c6:ea:84:5d:7d:7c:f4:e2:
64:b0:a8:d0:16:75:f5:4e:65:5a:83:38:eb:47:fc:93:25:32:
7b:ef:63:c3:ef:7a:48:17:09:ff:d9:9b:d0:5f:a9:7e:a4:9b:
79:b2:f8:22:3d:4a:34:6a:a5:3a:b7:bc:31:97:2d:30:7b:74:
c1:b3:19:78:a5:04:d4:50:10:22:19:19:7f:84:0c:a8:33:c6:
9a:59:da:4f:56:54:76:29:a2:6b:60:30:4c:60:94:e9:b4:67:
03:8e:88:07:7d:1d:5b:14:4f:25:80:9c:a2:dd:23:49:97:f1:
7f:60:6e:e8:ed:e5:2c:c4:9b:4d:56:73:7c:78:50:fd:c7:1d:
84:42:9e:ee:2a:c9:ac:50:fb:e3:76:53:5e:2c:73:b6:5b:f2:
68:4c:cc:d2:19:02:66:55:69:d8:41:bd:be:95:f3:fd:bd:fb:
7b:1f:3a:4f:9b:69:a2:eb:4f:99:56:39:fb:de:51:32:7d:d4:
d7:bf:de:84:a2:31:a8:f1:28:08:f3:7b:99:36:04:14:70:29:
6b:47:75:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:33:47 2026 by rpki-client