Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
File: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft (raw, json)
Hash identifier: u8pfVeegM9ODm96EKQCoaUD91vDtX+xjNn6OUTPF1k0=
Subject key identifier: 7C:BB:51:DF:44:E1:2E:DC:05:F0:45:59:7B:D1:70:49:3A:20:E7:F1
Authority key identifier: 75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6
Certificate issuer: /CN=753cff430f7f1751e697bb30f87fef397cc17fa6
Certificate serial: 019D299731CE38035F637E75C4E990F2635E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 10:01:07 +0000
Manifest this update: Thu 26 Mar 2026 10:01:07 +0000
Manifest next update: Fri 27 Mar 2026 10:01:07 +0000
Files and hashes: 1: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl (hash: Ax9U8kLD/Rw0k+rz+mMHfeCwyb7LVlvpB0mcIHVeE8c=)
2: ffJru2iXovOn8xs2WVN9pOzMdK0.roa (hash: B4JwF5Q6Be6Q1TqEFtIyQe6gOkWGIwkFzL5H0f2rYLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:31:ce:38:03:5f:63:7e:75:c4:e9:90:f2:63:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753cff430f7f1751e697bb30f87fef397cc17fa6
Validity
Not Before: Mar 26 10:01:07 2026 GMT
Not After : Mar 27 10:01:07 2026 GMT
Subject: CN=7cbb51df44e12edc05f045597bd170493a20e7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:72:0f:d7:36:12:48:73:35:d1:fe:92:43:
ad:f0:fd:50:58:7f:93:75:ef:dc:e3:b5:b7:e8:c9:
25:d6:f5:77:f2:a5:ef:7a:5e:be:80:c1:76:b3:09:
02:3f:ee:88:73:13:07:15:34:1e:5b:b4:3e:01:28:
5f:0e:a5:11:b6:3c:14:a4:1b:cb:6e:79:fe:13:1f:
ce:8d:72:33:2b:85:8a:ce:ca:25:a9:11:73:81:43:
69:b9:8e:70:3f:53:18:fa:80:53:99:91:5c:e8:61:
17:80:8d:31:b7:b6:fe:06:cb:84:19:74:9b:c4:64:
0f:52:aa:1b:b1:72:43:8e:3e:75:af:99:85:c5:9f:
4a:49:a2:24:4a:ae:0c:16:47:6b:17:3e:e9:f6:88:
8b:6c:d9:49:ea:62:17:78:39:c6:b2:37:af:aa:c3:
06:24:cb:42:56:8d:90:cb:a3:c7:64:1a:d6:71:e7:
5a:1e:81:3b:2e:22:a2:76:5e:48:27:f9:e8:59:9d:
f4:07:f5:ce:89:dd:bb:16:15:5c:b4:07:d0:14:d3:
3f:9d:6e:bf:db:7c:9f:e6:16:e2:bd:e3:2e:af:16:
57:00:e4:0b:b6:ce:e2:51:61:be:4a:3f:a7:a5:46:
83:33:ca:b6:76:4e:dc:84:0e:29:bf:6b:f1:13:05:
ae:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BB:51:DF:44:E1:2E:DC:05:F0:45:59:7B:D1:70:49:3A:20:E7:F1
X509v3 Authority Key Identifier:
keyid:75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:33:b4:17:64:57:83:1d:39:38:d9:5c:a6:59:80:6e:50:3c:
19:a4:8d:40:a6:c0:4e:6c:91:84:4e:17:02:e9:4a:85:5d:7c:
ce:c7:62:11:16:ad:cd:89:eb:35:d7:98:3f:2d:87:5c:a0:90:
7e:0a:e9:d9:77:06:3f:69:95:5c:62:53:ef:5f:79:bf:80:1b:
fe:7e:3b:4b:29:a7:c4:1d:bf:e7:91:48:2a:b8:ab:27:26:8c:
ef:6b:19:a4:11:98:e0:77:f1:b5:10:99:47:e7:6f:fd:05:41:
20:e7:f9:e4:87:8c:34:fa:56:06:22:3a:51:2e:21:17:dd:b7:
2b:27:94:46:ba:0d:9e:2a:07:05:4f:a6:29:48:77:b1:01:13:
9f:1a:31:4f:3c:0c:cf:b6:95:fb:40:96:25:c5:b0:a1:2a:54:
7e:79:e0:b1:71:90:05:56:d9:33:d6:e9:3b:de:80:67:58:84:
f6:c0:64:af:12:5b:eb:c0:1f:58:db:88:dd:09:7a:f2:d9:01:
4b:19:27:11:09:12:de:ab:6f:20:c2:30:d5:8c:a2:22:ae:e9:
9b:c4:e5:d5:93:bd:88:57:2d:f0:4c:26:d9:9d:e3:57:d3:82:
a9:d8:e1:ce:a3:0e:15:d9:cc:4f:e8:0f:73:0d:a6:bb:46:f3:
75:73:72:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:41 2026 by rpki-client