Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
File: Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json)
Hash identifier: Hyov+Akvce3AQwvO82x0ypSBC2tkCkZX+nVVfeyPeC0=
Subject key identifier: E3:1F:3D:0E:5E:68:79:D0:A5:E5:18:E9:D8:3A:F2:B1:95:F6:3E:7C
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 019D29CE88AF5A3186E05263C02F6F9F0BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
Manifest number: 1282
Signing time: Thu 26 Mar 2026 11:01:34 +0000
Manifest this update: Thu 26 Mar 2026 11:01:34 +0000
Manifest next update: Fri 27 Mar 2026 11:01:34 +0000
Files and hashes: 1: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: QLqO8wup2rdJHSGMF6WJJKdx5uAZm23BDl1dnMjN/RE=)
2: oHaqxqTMWybml5c6wSCcPWrN2MI.roa (hash: ASmpLH273yXVFzp2LFZCIwFoN6v91nXnKPxcq712jXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:88:af:5a:31:86:e0:52:63:c0:2f:6f:9f:0b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: Mar 26 11:01:34 2026 GMT
Not After : Mar 27 11:01:34 2026 GMT
Subject: CN=e31f3d0e5e6879d0a5e518e9d83af2b195f63e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:ea:2a:bf:09:74:2d:2f:b0:f8:51:a9:6b:
6c:03:ec:cd:bb:57:a7:42:0f:20:de:c4:41:40:29:
a2:d9:38:c6:f3:85:be:3f:87:33:15:d0:77:ce:00:
c2:05:76:c0:4a:bd:ca:f7:c6:f7:b6:d8:95:23:56:
f6:80:5e:44:57:f6:04:6b:bf:49:cc:7e:00:93:f2:
bf:51:b8:ac:6b:c9:53:02:13:03:9c:2f:f5:ac:7f:
e8:88:70:36:17:2d:b5:37:62:06:6d:4e:b0:77:d7:
ed:48:bd:98:02:d3:f5:7a:d6:fa:bc:7e:cb:86:aa:
f0:43:16:c8:7c:1e:04:0f:05:3e:41:10:0e:84:92:
6d:18:41:28:e7:50:2c:ff:f9:37:1c:14:c3:39:74:
e0:31:d6:c8:db:b0:c4:1d:db:40:77:96:78:71:4e:
4d:e7:bd:59:be:26:1d:b0:05:4a:64:57:27:2d:62:
76:2f:70:94:4c:fe:0b:2a:f9:fa:9c:fc:12:7c:12:
cf:cc:6a:12:cb:3c:04:ac:97:20:84:4b:53:96:f3:
5c:58:af:92:2e:f3:da:42:1d:63:36:05:1d:38:a2:
92:8b:ab:1f:0f:b0:a4:48:31:d3:fa:39:e6:12:fa:
4c:aa:b6:cf:cb:05:89:3f:e8:80:d8:6f:d8:15:6e:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1F:3D:0E:5E:68:79:D0:A5:E5:18:E9:D8:3A:F2:B1:95:F6:3E:7C
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:6f:01:76:e8:e7:0c:e4:cc:18:f6:40:0a:90:a9:a1:4c:08:
7b:54:b1:5f:bb:37:9f:b5:f7:9f:9e:d8:c1:dc:9e:a5:33:c8:
99:48:23:33:17:cc:3b:84:e8:a3:49:99:aa:f4:d6:4c:1a:dc:
3c:04:11:e0:bc:52:e5:07:57:a1:d3:5d:4f:06:90:ec:5a:26:
3d:d6:25:85:88:63:04:95:23:41:97:b9:79:07:5a:dd:c7:a0:
1e:05:a3:c1:52:8b:2c:fc:8a:24:c7:76:ff:b7:03:dc:fe:ed:
03:33:c2:e9:8b:c6:45:0a:bd:13:c4:2b:24:8c:e4:ec:da:4b:
f5:94:87:16:10:8c:5c:32:73:93:36:59:08:ae:cd:b0:cb:e1:
90:c4:65:ef:d5:a8:f9:a6:1c:f0:7e:0e:d2:21:81:53:d6:df:
77:0b:7e:29:d8:a9:5b:23:58:bf:18:6b:1e:71:55:74:1e:c0:
e6:07:67:1d:84:31:9f:50:b2:91:33:58:f8:ff:f2:ca:6b:64:
fa:8c:c3:94:d5:ea:23:1b:92:9d:ac:03:7f:d6:c2:d2:33:92:
2b:c0:df:79:19:69:ac:f7:a8:94:05:92:4a:f5:70:07:57:70:
52:a3:0d:55:dd:bd:69:3c:38:82:ad:e6:76:c3:2c:f3:ab:5d:
cd:50:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:33 2026 by rpki-client