Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: OAhpqmt22x3vatmE7+UJRfYsgZ6RiOeN0jeXbEGwJFA=
Subject key identifier: B5:1A:3D:E6:4D:B3:D1:24:D6:4D:79:55:98:EF:8D:1C:C9:03:E8:1F
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 019D25F15119685E7098ACE1403F0B180949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:01:04 +0000
Manifest this update: Wed 25 Mar 2026 17:01:04 +0000
Manifest next update: Thu 26 Mar 2026 17:01:04 +0000
Files and hashes: 1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: jhZUQmVBV7J/9nUhDfkKSQ73dCh6D0MKx1cmL7+P78k=)
2: X2dW8Ddau0oR-gekYObrhkFfF_g.roa (hash: CXklzZ2YRKZLcPWGGWuQjQMp/BVjdo/rLeJlfyEGzHE=)
3: vEA8ukjZ43YZlzw8CBVOqmyggo8.roa (hash: tuYAox2HkNBn4tSAkZLkz/3INYGpptZYZBvxGb9Ksys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:51:19:68:5e:70:98:ac:e1:40:3f:0b:18:09:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Mar 25 17:01:04 2026 GMT
Not After : Mar 26 17:01:04 2026 GMT
Subject: CN=b51a3de64db3d124d64d795598ef8d1cc903e81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:9d:89:6b:1a:ec:b5:88:95:5d:07:b0:38:
33:8a:3e:5b:65:bc:0a:98:27:cf:6a:5b:a4:18:8c:
ab:9b:44:cc:39:27:f1:21:aa:b4:30:8e:6c:5e:b6:
b1:0c:c5:f9:1a:26:ed:95:96:bd:7a:9e:4d:5b:a8:
00:a5:f3:5c:b1:8f:18:97:84:c4:e9:55:4c:eb:aa:
97:c2:27:f6:15:04:d1:33:d5:ee:49:21:c0:83:60:
cf:89:f9:f8:e2:0b:0e:2d:53:9a:d3:3f:e7:45:65:
b8:0b:ea:82:b4:84:3b:fa:2e:f2:2b:ea:af:ad:c1:
4c:ea:f7:76:76:e1:d4:22:c1:5f:42:24:d8:03:58:
01:59:ce:d8:7f:65:cf:18:59:b6:d3:f7:98:e1:99:
d8:d8:cc:5a:19:90:f2:bf:86:45:ef:98:9e:82:58:
79:38:0f:76:06:5d:7c:29:88:70:2f:d6:61:33:51:
b7:1a:24:48:c1:81:d5:c3:07:f3:2d:a7:20:cf:34:
f8:3f:e4:04:52:e5:54:0b:49:99:2b:c2:cc:32:7e:
72:a6:94:ad:18:ee:24:07:41:30:24:b3:82:c6:9a:
b3:3a:e9:63:b9:34:cc:02:67:81:3b:fc:a6:2d:00:
e6:ae:e1:17:e0:9e:86:24:26:f8:1d:96:2c:09:d9:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1A:3D:E6:4D:B3:D1:24:D6:4D:79:55:98:EF:8D:1C:C9:03:E8:1F
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:23:29:2a:57:6b:30:ee:c2:0e:c5:75:52:45:9d:08:e1:0a:
02:d9:30:fd:99:17:2d:06:5b:a7:92:39:96:64:3f:e0:f2:1c:
b4:e3:8b:9c:86:2e:dd:68:e0:a9:db:0a:5b:91:7b:ae:9b:63:
26:8a:69:d9:5e:bd:cf:8e:1c:51:e2:ea:e9:1c:9c:af:8c:ba:
c7:a0:8b:af:03:43:27:e2:52:0a:b2:1a:26:29:f2:e6:0c:ab:
e5:3a:d7:0e:4d:a6:53:84:b5:68:03:a8:1b:8a:8b:68:e0:e8:
7c:4e:3d:8c:89:23:1a:cf:01:75:1b:55:dc:07:38:ee:15:c1:
2b:73:99:e7:04:d2:35:8d:bd:f7:c0:0a:4d:2a:37:c2:52:7b:
43:21:6c:1b:dd:6e:93:76:b1:6f:60:6b:50:7c:3e:fa:2f:9e:
01:35:93:d8:c4:81:da:31:99:0a:f4:4d:98:25:18:7e:4f:7e:
ab:30:b9:0a:ae:5b:c1:9e:81:56:1a:19:83:d9:7c:78:94:4a:
e8:1f:e8:11:4a:2c:f7:ad:e2:a7:02:5d:2c:4f:9d:5e:f4:67:
10:7d:ce:7c:3c:4c:15:23:dc:88:14:fe:76:ca:e7:d7:7d:35:
72:74:4c:bb:fe:f2:a9:2c:e3:d2:e2:0a:bb:24:b7:dd:4f:99:
0b:0a:eb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:12 2026 by rpki-client