Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
File: dhrP1knI7q2FUZQngfoW9o29EPM.mft (raw, json)
Hash identifier: 7V7SlreVx23D9XvHhBIZRGwIB9cD1a5qZFuKbfgTiWU=
Subject key identifier: 46:61:82:F8:D1:A5:51:DD:7F:B3:36:8C:EC:D8:F7:19:18:B0:72:0A
Authority key identifier: 76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
Certificate issuer: /CN=761acfd649c8eead8551942781fa16f68dbd10f3
Certificate serial: 019D288457F5F36C9A62A802C235729AC0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:00:54 +0000
Manifest this update: Thu 26 Mar 2026 05:00:54 +0000
Manifest next update: Fri 27 Mar 2026 05:00:54 +0000
Files and hashes: 1: 4ZPiF2VO9a8aU0a0A0t3ypNdZ_4.roa (hash: T/Mc1/RVrNSXXxPaHTxn7Si+vyAXxTkGBmRnuF/YEqM=)
2: dhrP1knI7q2FUZQngfoW9o29EPM.crl (hash: sQztqLvI89kwO3K0qkpsiuqVk8xdZUA8dpL+OW44IpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:57:f5:f3:6c:9a:62:a8:02:c2:35:72:9a:c0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761acfd649c8eead8551942781fa16f68dbd10f3
Validity
Not Before: Mar 26 05:00:54 2026 GMT
Not After : Mar 27 05:00:54 2026 GMT
Subject: CN=466182f8d1a551dd7fb3368cecd8f71918b0720a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:96:7f:1b:1b:ad:d4:76:cd:39:6d:f0:c9:
a3:c2:1a:b6:77:da:1a:67:98:14:dc:00:03:af:c6:
4a:db:ab:4e:92:29:79:01:03:1e:e3:89:f4:e5:e0:
c9:bf:ed:c6:f3:dd:aa:6e:e4:de:6c:8e:68:dd:f7:
b8:97:75:6b:58:e2:3b:42:1b:0a:b6:b8:be:9c:63:
ed:94:f1:f3:00:83:fd:8b:74:ca:53:63:f9:ed:ba:
7f:14:88:90:8a:92:89:3c:11:f3:d6:e6:61:39:0b:
cd:b7:4e:64:7b:a6:c0:c4:84:47:73:36:93:b7:46:
7d:cc:3c:f2:8f:dc:8c:a1:df:d4:4f:b8:13:ca:9b:
fa:8b:23:77:8c:0d:ac:02:ca:bc:b1:50:b1:3a:64:
35:29:ae:fc:d4:c6:a5:b8:cc:af:36:16:8e:62:23:
ed:5d:c5:2f:cc:bf:cb:2d:c6:43:98:b8:84:52:05:
58:26:35:77:56:22:39:39:e2:bb:71:90:8a:25:44:
db:1e:69:2d:c3:db:d6:15:75:28:ca:86:5e:1e:96:
3f:a5:13:51:91:e6:ad:db:07:74:bc:a7:e4:c5:85:
fc:93:c3:eb:93:ab:38:6a:b7:72:a6:f0:6a:7c:39:
ed:14:fc:46:35:4a:47:c7:bd:cd:5f:40:a0:cf:b0:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:61:82:F8:D1:A5:51:DD:7F:B3:36:8C:EC:D8:F7:19:18:B0:72:0A
X509v3 Authority Key Identifier:
keyid:76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:29:8a:3e:fd:f6:34:b3:73:9f:73:5b:8d:f7:65:d7:50:5e:
11:53:77:9c:85:a8:f6:35:dc:b1:3e:c2:e5:a6:a8:b9:a8:6d:
0a:a3:dd:37:1b:da:44:b9:b5:db:16:8e:4d:b9:7d:ff:ac:65:
a7:0f:89:0a:76:28:77:2b:08:b3:81:1c:f5:67:28:2e:db:d8:
45:ca:bd:af:fc:8d:7b:2d:d5:32:77:4b:a2:2f:10:fe:76:9b:
85:c9:6d:91:73:78:4b:45:05:9b:1d:56:21:1f:ae:29:54:01:
c2:06:2b:18:6e:5c:a8:0a:1c:09:9a:05:fa:6d:94:fe:f0:35:
3b:b9:ab:1a:a5:15:dc:99:8b:90:7c:8d:51:73:64:39:18:f0:
00:90:97:96:bd:ad:5d:b0:b6:91:d8:bb:ff:a4:9a:e1:6a:24:
c1:f3:d4:cf:44:70:6d:9c:c9:0a:7d:88:b8:3f:65:10:3d:24:
95:3d:6d:d0:68:98:19:58:e9:1f:6a:cb:2e:0b:68:1c:8a:70:
18:db:ae:69:35:80:7a:0c:ca:b3:95:d7:cf:ac:c2:d3:10:84:
a6:fb:52:8d:66:96:57:c2:76:56:38:bc:f1:d2:a9:2a:03:81:
83:bd:60:c9:7e:9c:8d:08:26:7b:01:cd:5f:da:5f:af:84:6c:
2e:c3:8b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:47 2026 by rpki-client