Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier: cImZdulYmBoQdvEW92SBUiyeBjmC5t8uICiHk0yUC6Y=
Subject key identifier: 95:DF:45:05:D5:01:68:34:35:5F:4F:DB:F9:A3:FE:94:12:28:F0:D5
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial: 019D3307C3A284B574B3896CFB01E2FD23C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 06:00:39 +0000
Manifest this update: Sat 28 Mar 2026 06:00:39 +0000
Manifest next update: Sun 29 Mar 2026 06:00:39 +0000
Files and hashes: 1: H3TYAMLFFlNCp3XM0jhoUoBeQy8.roa (hash: J5xTusXlhkXdt1S3mE6QU/UGZ2zGPT9Q3Ow+NVkju+o=)
2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: v1TC1ag7PhFF8kPvH2LkG5b1VX+Kku2zAh9GIO6jiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:c3:a2:84:b5:74:b3:89:6c:fb:01:e2:fd:23:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
Validity
Not Before: Mar 28 06:00:39 2026 GMT
Not After : Mar 29 06:00:39 2026 GMT
Subject: CN=95df4505d5016834355f4fdbf9a3fe941228f0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:42:d1:4f:be:37:59:6f:1a:b9:a2:95:af:
38:13:4d:05:80:f8:26:90:a4:9c:ae:d4:66:f3:a4:
59:aa:e1:56:22:12:9e:58:67:f0:3b:c4:d8:30:44:
2c:75:e5:ec:6b:4f:ca:bd:3c:61:2f:6e:a2:d4:15:
a8:9f:e0:88:bf:2c:00:00:18:2c:e3:5b:d2:e8:f9:
88:ae:6b:c6:67:47:73:06:e8:42:4f:b7:d0:ac:bd:
d8:d3:61:26:fe:59:fe:b5:79:61:ce:bf:a6:e9:71:
e0:f6:61:01:df:15:2a:8c:45:20:2a:61:8d:ca:a6:
30:94:fe:41:f5:22:7a:f9:12:30:b3:c7:3a:33:0d:
f2:c3:f6:0c:0c:40:99:b4:d4:50:bf:70:24:7f:ae:
5e:d3:0d:fc:d9:8a:68:0c:df:44:36:67:da:e8:80:
30:25:9d:e3:8a:a6:3c:c6:fb:72:89:d4:57:0c:6b:
65:00:a0:9c:1f:54:b8:36:a3:ab:d6:3c:89:48:f0:
e9:94:5c:08:23:39:b2:a4:86:aa:66:bb:bb:dc:25:
82:d7:14:6e:f6:7f:50:3c:f2:83:a5:ad:92:68:19:
5d:25:95:ff:d0:0c:04:fd:99:61:81:6a:47:c2:b3:
78:87:bb:88:d9:4a:3b:f5:2e:b4:d2:8b:84:fc:f3:
16:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DF:45:05:D5:01:68:34:35:5F:4F:DB:F9:A3:FE:94:12:28:F0:D5
X509v3 Authority Key Identifier:
keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3f:63:48:4d:7e:68:0f:91:71:c9:b2:3e:c3:15:7b:32:b9:
74:09:c1:1d:0c:a8:1a:2f:cb:93:3e:ec:f6:51:c2:44:6b:10:
c0:75:35:fb:48:d3:6a:58:d8:fa:2f:9d:ff:fb:0f:c0:f1:f4:
4f:61:36:2c:d3:db:20:90:7e:62:41:59:ac:b6:01:c3:40:5d:
2a:04:b9:f4:cc:54:b1:17:81:c9:0e:c4:51:50:a2:d2:b8:33:
65:ba:a5:7b:66:f1:23:96:09:d7:67:c9:98:a3:73:f1:b6:90:
32:05:ae:97:e4:c3:86:92:70:18:a3:a2:23:5d:b4:70:77:d0:
15:5c:38:6e:09:70:54:73:7f:59:74:cc:6b:b4:14:80:70:54:
4c:a9:9c:d9:01:b9:a4:40:7f:60:e1:51:97:5e:45:be:ba:69:
0c:ce:b9:62:79:25:e4:19:29:8d:c3:6a:21:fc:88:ce:6e:9c:
a9:e3:4d:aa:1b:dc:a9:a2:5c:92:a6:08:1c:d9:6b:ee:68:21:
e7:6d:62:54:3e:46:a6:07:e2:13:55:a1:3c:52:cc:a5:d6:01:
38:9d:51:a0:d7:ed:07:1d:a7:5a:b0:30:6d:34:09:33:ea:e4:
9d:ed:ff:f1:df:78:6b:96:e6:52:04:20:03:25:90:71:e4:28:
48:92:db:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:07 2026 by rpki-client