Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
File: DsodW91QNE_174hKZg6C66g7wNs.mft (raw, json)
Hash identifier: u8zHl2TSHALQQ2rCpCKYVs9zBKP4pU5qwu54JMWqg0g=
Subject key identifier: D4:5D:2B:0F:E8:03:F2:21:B7:7F:29:52:DD:58:32:CD:DB:74:A0:44
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Certificate issuer: /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial: 019D273A8F7166035889AF460ABEC31EDBFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 23:00:42 +0000
Manifest this update: Wed 25 Mar 2026 23:00:42 +0000
Manifest next update: Thu 26 Mar 2026 23:00:42 +0000
Files and hashes: 1: DsodW91QNE_174hKZg6C66g7wNs.crl (hash: 74TgNkNntMYa+3ilJNB6PWwDrMYFKssvRu2vSgd00GE=)
2: UfUS4AgweibzcI9ivSjuopIuKmo.roa (hash: wv3d+e5BddXcUFyrDf2j3FXenz2r8zUlWN+AJi8VvhU=)
3: pPcIWWSPfdU72r-bpp2XUpFdTuM.roa (hash: Dc0DQiOpnTVZj1ZdwmmStzGkXc32vT49ag5ce63zJ0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:8f:71:66:03:58:89:af:46:0a:be:c3:1e:db:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Validity
Not Before: Mar 25 23:00:42 2026 GMT
Not After : Mar 26 23:00:42 2026 GMT
Subject: CN=d45d2b0fe803f221b77f2952dd5832cddb74a044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:3c:0b:9e:0c:29:0c:24:5b:b3:53:4a:be:
e8:98:32:bf:fe:8f:11:c8:94:3c:3c:ca:16:9c:88:
19:a9:3a:2d:23:fd:6f:3e:80:32:52:ae:b5:e1:47:
d9:f3:b1:c2:0f:09:c4:3e:0a:fa:d6:b9:f9:d8:e2:
c3:04:3e:f8:16:f5:b3:a8:ea:eb:19:91:a8:ae:a2:
a5:a0:93:94:2b:5c:17:74:88:cc:c9:07:c5:4f:b8:
43:a9:16:a4:ec:b0:75:69:a4:60:44:85:50:63:ae:
10:37:b9:7d:05:49:0f:e9:13:45:ca:08:e0:da:5c:
b4:b3:e4:6a:47:64:54:3c:eb:a2:e6:0a:84:f2:f7:
62:78:dc:02:92:b0:44:04:d9:41:33:c9:eb:bb:8b:
0c:5d:e0:74:23:1b:94:13:de:6d:b8:9e:35:f4:27:
71:3e:16:c6:5e:4a:64:07:c5:7b:ee:7d:40:14:6c:
e8:14:c8:95:97:60:83:c5:6b:4c:7c:e9:9d:f4:ba:
18:d3:78:a4:82:48:91:63:18:8e:ac:26:e1:94:85:
d8:7e:8d:1f:66:bd:bd:e3:d7:cf:5b:4d:66:f9:23:
45:69:47:3c:0f:e9:b6:e7:ae:52:99:ed:75:1d:cd:
85:92:f1:3a:14:01:ce:ce:9c:09:d4:77:68:19:5f:
92:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5D:2B:0F:E8:03:F2:21:B7:7F:29:52:DD:58:32:CD:DB:74:A0:44
X509v3 Authority Key Identifier:
keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4b:27:2a:ed:c6:02:90:23:48:f8:29:c1:ae:8e:e4:34:9c:
46:40:51:82:a6:22:ec:53:f9:10:20:b9:2c:ec:c9:87:c2:81:
2d:5a:50:52:7a:95:93:81:0c:9e:d4:82:13:cd:83:e6:b0:e0:
ca:79:cf:83:7a:83:cf:d0:29:4c:cc:ec:6c:b4:13:30:28:22:
87:9e:35:b2:3d:cb:0e:95:9f:93:1a:93:5e:71:a6:c4:80:5e:
91:24:41:08:ba:90:e5:cf:b1:5a:38:f0:5e:de:2e:c8:85:66:
d5:58:19:aa:10:69:09:40:67:e4:77:41:1b:8b:d3:0d:37:bb:
45:fd:eb:09:1f:ae:33:ed:b7:f9:46:70:f0:c3:63:ed:21:31:
e1:d5:ce:c8:88:f9:3b:74:f8:ae:04:45:2b:d4:c9:3d:b4:b9:
de:02:f0:e3:ff:7e:7f:93:8b:6c:c8:d4:d0:8f:e8:6b:a5:42:
34:c9:01:0f:98:53:5e:b8:64:6f:e3:8d:57:b4:ee:db:46:4a:
cf:fd:03:ab:d9:e6:e9:b6:98:b7:2d:08:44:7b:b6:0a:55:1e:
fe:68:4a:4e:40:7f:97:ba:b2:d5:4b:97:ea:f9:49:44:45:4a:
d0:49:e0:52:e7:81:45:41:f4:21:60:9c:d6:ad:d5:19:81:f7:
0d:98:1b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:05:57 2026 by rpki-client