Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: LVfQoSfW/bhVO/eY6OAZMgUa3CwICYwqLWIXb+8z+BU=
Subject key identifier: FC:2B:44:1B:29:46:9A:77:BE:48:69:A2:F9:46:72:39:BF:91:D9:86
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 019D25BAA95F5051E110091C368DBF93460E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 1777
Signing time: Wed 25 Mar 2026 16:01:23 +0000
Manifest this update: Wed 25 Mar 2026 16:01:23 +0000
Manifest next update: Thu 26 Mar 2026 16:01:23 +0000
Files and hashes: 1: 2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa (hash: JmmqwM4dV5ZCDyqAq/Au9vdb5ogccNfE+4IrV1SqD54=)
2: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: 586Xy5vFwmKfgjwMSVhLt4WE1xD+wi6gV0RPxQeYEAY=)
3: cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa (hash: N0d6jFAymHdRViLXYwxHMPIvLpjH51TdzFY5Ek5D56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:a9:5f:50:51:e1:10:09:1c:36:8d:bf:93:46:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Mar 25 16:01:23 2026 GMT
Not After : Mar 26 16:01:23 2026 GMT
Subject: CN=fc2b441b29469a77be4869a2f9467239bf91d986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:ac:84:a3:a8:05:e8:42:ef:74:36:a4:6f:
ff:50:b5:0b:a7:93:6f:5e:73:76:29:82:42:86:6c:
0b:59:6f:28:7b:1a:9d:97:26:57:c0:a0:12:34:61:
5c:47:20:e5:c0:a8:ed:17:06:4a:90:ff:ad:48:78:
ef:90:ac:7b:d2:c7:97:85:c0:53:e3:bf:2d:91:cc:
9d:47:a1:13:59:6a:56:6a:d8:66:eb:d9:81:f0:5c:
bc:7a:2c:d6:46:cd:56:73:18:7a:fb:85:2e:d4:7b:
60:9e:0a:d3:f1:df:6c:c6:2a:7b:d7:f7:8a:e9:12:
e8:75:6f:07:28:e4:93:f1:72:d3:98:7d:ed:93:68:
25:47:6f:fc:fa:fd:c4:b7:8d:ac:96:47:bf:0f:c4:
96:9b:87:9b:f0:0f:9f:4f:94:05:bf:69:89:91:43:
73:ca:34:12:f1:9a:88:12:27:75:61:50:ff:55:45:
61:c9:9e:65:2d:23:d8:ec:95:0e:7a:87:13:b1:0a:
8c:81:d5:de:dc:dd:a3:30:6d:72:ef:1c:71:c0:ff:
e3:b9:12:45:79:45:bf:ea:25:95:af:6d:f4:8a:88:
fb:67:cc:c0:8b:be:41:05:8a:bb:d4:f3:87:ea:af:
b1:6a:e5:da:9d:83:23:3e:db:ce:24:6f:91:39:bc:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2B:44:1B:29:46:9A:77:BE:48:69:A2:F9:46:72:39:BF:91:D9:86
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c8:e5:eb:a3:88:aa:c9:0d:53:9e:c8:a3:34:25:89:d9:75:
20:25:8f:c2:09:c7:75:a5:93:a1:c7:8b:82:b9:c3:59:55:f3:
3c:57:3c:be:d9:d1:a7:1a:dc:22:cd:af:0c:1b:2a:4f:01:08:
fc:38:9d:62:42:14:18:bc:77:fa:ef:8b:44:21:38:b8:dc:e0:
7f:a7:d1:81:5d:6f:86:8d:e4:41:2f:1c:ee:35:b1:0f:3a:60:
85:cc:3a:f7:1c:c4:ee:23:1f:b8:a1:8c:21:a7:9d:3b:b1:8f:
44:39:92:61:c1:62:fd:cf:b0:e3:2a:f0:d4:1a:7c:6d:7e:c9:
b2:a8:8b:4c:71:8c:d5:f3:c9:11:71:d2:0c:36:b8:09:2a:87:
db:f1:5c:b1:0a:c4:9e:03:dc:f3:1a:c9:cb:94:44:ca:81:67:
72:72:bb:83:8c:28:5d:d0:9d:81:fa:1c:fe:32:04:a4:8a:b3:
e8:44:ad:03:82:ba:b2:e0:c0:c3:ab:3d:39:a3:68:cb:4b:bb:
14:13:59:3a:98:c4:c5:6e:05:78:84:28:c6:09:0c:91:a2:ac:
7f:c3:f2:18:0f:f9:a6:88:e5:82:32:a4:49:ff:1e:ef:d8:40:
16:4a:52:49:4d:c2:29:a2:cb:38:2b:1a:42:a5:f8:ab:3b:a6:
00:f8:40:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:38 2026 by rpki-client