Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.mft
File: DppcMoOmoWtNIFp8Vko4JkHNhpE.mft (raw, json)
Hash identifier: gL5utbB1muh1m4PM3p3fu/j1pc9o816qNDQF7m1fynk=
Subject key identifier: E8:9B:C9:99:F7:4F:D5:76:FC:A4:3B:A4:EB:50:29:35:A8:CC:57:42
Authority key identifier: 0E:9A:5C:32:83:A6:A1:6B:4D:20:5A:7C:56:4A:38:26:41:CD:86:91
Certificate issuer: /CN=0e9a5c3283a6a16b4d205a7c564a382641cd8691
Certificate serial: 019D265EFCD746320E24DC7C4E9183588EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.mft
Manifest number: 0FA7
Signing time: Wed 25 Mar 2026 19:00:52 +0000
Manifest this update: Wed 25 Mar 2026 19:00:52 +0000
Manifest next update: Thu 26 Mar 2026 19:00:52 +0000
Files and hashes: 1: DppcMoOmoWtNIFp8Vko4JkHNhpE.crl (hash: mVOPu0Ccfp4cmfuwgyl2eY5nJof6VgGcdrihwvVgKHA=)
2: l9oX7II_w-llh2I63jLu_-Eu6cw.roa (hash: siOBRu8v54PGLQMvk6KGn+p4zT0cbKX2GmhessBUGEg=)
3: x1gMchUa-6UlPXSHMzyHYvAOPb8.roa (hash: 49HndHDLbiRP+5LGNBOe4FFAql7uZl/IJ8fBpQJfK90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:fc:d7:46:32:0e:24:dc:7c:4e:91:83:58:8e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9a5c3283a6a16b4d205a7c564a382641cd8691
Validity
Not Before: Mar 25 19:00:52 2026 GMT
Not After : Mar 26 19:00:52 2026 GMT
Subject: CN=e89bc999f74fd576fca43ba4eb502935a8cc5742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:03:d8:3a:da:fe:56:bc:ff:b9:e9:72:87:
12:0a:85:f3:55:b2:27:0b:85:59:74:e2:6e:29:a2:
58:86:71:fb:3c:06:3d:ae:61:cd:5a:40:6f:6c:04:
58:a3:90:9f:1f:e9:4a:2d:45:eb:ea:cd:f5:54:c9:
72:36:b3:bb:47:c0:65:ea:31:ad:19:03:36:34:7e:
88:cc:73:db:a7:e2:0b:7b:ba:c8:4e:7a:36:50:cd:
06:e8:1a:df:14:b3:9d:87:bd:4c:b4:ef:08:c8:48:
45:08:06:1a:92:36:20:6d:09:e3:a5:f6:d2:3d:ff:
03:11:dd:8e:c5:d5:e4:07:28:f7:76:53:2a:d4:0d:
cc:da:5a:df:46:60:49:da:a6:eb:61:e3:36:65:41:
86:30:8d:61:0f:ce:cf:07:37:b9:eb:01:a6:cb:57:
53:75:56:bf:31:ba:f6:b4:0a:f7:88:1b:7b:90:3e:
13:48:4e:aa:f2:61:98:48:33:0c:91:a4:9d:39:67:
df:af:bc:5f:a0:07:ed:8d:49:a2:a3:1c:78:c4:3a:
90:9e:0a:74:de:ba:6e:53:e8:cb:ca:ee:ab:e1:31:
fb:c3:18:6d:27:97:f1:b5:a1:52:c3:a5:a3:fa:d6:
6c:ac:2a:73:d4:05:9b:17:29:66:96:90:cd:55:c3:
39:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9B:C9:99:F7:4F:D5:76:FC:A4:3B:A4:EB:50:29:35:A8:CC:57:42
X509v3 Authority Key Identifier:
keyid:0E:9A:5C:32:83:A6:A1:6B:4D:20:5A:7C:56:4A:38:26:41:CD:86:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:14:c6:4e:07:ab:0d:49:04:06:e8:03:3a:72:f8:ad:53:fd:
42:5a:0e:e6:75:01:e7:06:2f:1f:f2:b4:e2:24:b8:01:b4:23:
cb:80:bc:46:2c:c8:13:d3:e9:17:6d:7e:b6:c6:67:d2:a1:40:
eb:ad:d0:43:13:bc:d6:d3:a5:49:c6:80:64:7f:88:9e:cc:21:
f8:88:a4:0a:45:86:0a:49:26:bb:26:db:0b:52:e4:50:41:fd:
64:2a:39:3f:21:7c:2e:a2:9d:24:1b:65:a8:64:95:17:67:6a:
54:8c:68:ea:50:e4:83:d3:45:ce:53:a3:b1:1c:22:a6:74:99:
85:b4:cf:89:d7:8a:25:1f:34:0b:46:3f:1b:29:16:5d:61:76:
2c:4c:86:1e:19:51:9e:11:13:db:9b:70:a2:89:ab:30:f0:ae:
b3:52:88:2f:fa:46:29:8c:90:84:79:79:ca:b0:80:f2:7c:a1:
a6:41:83:cd:9c:52:e2:85:dd:84:7c:d3:df:f0:c7:ab:c0:aa:
76:ba:c2:6f:98:d9:84:93:6c:ce:c2:8c:9c:8f:0b:70:95:49:
c8:f4:90:84:11:a0:22:cb:36:2a:9a:bd:d5:b4:74:40:c4:16:
58:e0:79:80:72:e6:85:59:19:bb:28:b6:02:70:b7:34:fc:4f:
fd:4e:42:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:03:06 2026 by rpki-client