Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: t20FRSdOYwCyJdavHyTBRn+Ik0s/DhGsVxXvYCAReQY=
Subject key identifier: F7:4C:EF:3A:27:B8:40:1C:AA:6F:31:CC:8D:7D:15:7D:9B:DB:99:0F
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 019D2583697DED211663863FB390D49B860A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 15:01:02 +0000
Manifest this update: Wed 25 Mar 2026 15:01:02 +0000
Manifest next update: Thu 26 Mar 2026 15:01:02 +0000
Files and hashes: 1: Fq9jYIALK48Q3aXTspZ-EOBUjAk.roa (hash: +W+cPf/LWfCqktynR8k96IJai5gjN2wCMM+/QBq3qWs=)
2: LfVminLL1XTSWFhWFnt35YabzGc.roa (hash: sYYNW+Zpe52/Yb5LHf4cYWyg31t2neiSAy7KvTU4FSg=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: fX34/WJFbeZaLGFNmdy+IlpTPFO3vsiZRx7rxFhEucY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:69:7d:ed:21:16:63:86:3f:b3:90:d4:9b:86:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Mar 25 15:01:02 2026 GMT
Not After : Mar 26 15:01:02 2026 GMT
Subject: CN=f74cef3a27b8401caa6f31cc8d7d157d9bdb990f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:60:a0:a8:48:5c:2e:e4:e5:13:f4:23:e0:01:
02:9d:45:46:c2:e5:58:81:f6:ca:62:69:77:b8:3a:
17:99:47:c9:17:3b:25:70:37:44:1f:07:94:73:6c:
6d:0f:a9:b5:77:a9:0e:50:63:cc:e5:e8:70:c3:62:
0a:3d:b7:a3:46:9c:51:c9:5d:d0:de:90:21:84:98:
c4:3f:e7:a5:f1:7f:e0:41:92:30:99:91:35:82:10:
d3:65:fb:90:eb:36:ec:26:e7:cb:38:a7:50:62:d2:
24:74:3c:64:a9:d7:d9:75:1d:6c:db:50:a8:a2:01:
a1:54:71:a8:2c:7b:c6:58:11:04:62:d9:e4:41:a2:
37:ad:12:58:a5:ca:49:1e:4d:0b:3a:b0:eb:02:da:
91:55:9d:79:88:03:3c:d4:b4:46:30:63:f5:f8:38:
9d:02:24:7c:9f:64:58:8a:69:ca:aa:1d:10:b3:5a:
09:37:bf:cb:f0:96:0f:4e:e7:e6:72:86:d2:93:2f:
ea:c3:62:c5:2b:04:4b:ea:19:cb:64:04:f2:29:ce:
05:de:3e:e6:ce:76:91:82:48:2e:2b:c5:94:af:90:
4a:ea:16:ed:a4:ae:b7:0a:23:f1:5d:57:70:a0:74:
7b:92:1b:c9:6a:c0:a9:a2:20:1e:00:c3:56:3b:eb:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4C:EF:3A:27:B8:40:1C:AA:6F:31:CC:8D:7D:15:7D:9B:DB:99:0F
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:43:98:3c:ad:9b:0a:f6:83:01:00:bd:a6:01:e4:3d:9c:2b:
87:39:f6:41:8c:7d:2c:35:d2:41:66:a4:82:63:df:d5:45:93:
5a:27:dd:81:28:05:d4:55:12:f8:c7:bc:bb:42:a5:79:dc:df:
9c:10:b4:0b:f5:45:ab:ed:6a:6f:d7:26:60:85:ea:1c:53:e3:
da:9f:79:37:ec:51:f4:6b:af:50:19:bd:ec:c8:59:56:50:68:
84:e3:dc:41:30:c6:7e:fb:99:f2:c2:47:29:28:ed:f3:af:53:
3c:71:9a:dc:03:c5:45:9b:81:49:53:96:bb:c9:41:96:7f:93:
99:ff:8e:08:4d:3b:86:c8:31:2c:a2:55:7c:97:04:b6:13:65:
d0:31:50:5e:e5:f3:e9:5e:73:0f:13:4f:39:8f:e3:f8:44:b2:
74:a3:b2:82:b6:90:45:88:3f:3b:c6:ba:5d:fd:93:1f:ce:0c:
72:29:39:e0:5e:53:32:42:73:9f:78:01:cd:fc:a0:d9:7e:4b:
8e:8e:63:c6:0c:05:ea:b5:7b:77:11:24:96:cc:35:43:b8:8a:
c6:e7:3d:e9:3a:c6:08:ff:73:62:22:2e:8a:a2:93:3a:54:fd:
62:5f:62:b9:5b:45:21:bb:85:ac:89:45:cf:99:75:02:a9:38:
8f:7b:17:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:53 2026 by rpki-client