Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier: lTeEUNEEWDYKghYAsi2N2ITqEyiOqJJyaRiJwafB9BQ=
Subject key identifier: 2F:BC:33:0B:AC:77:FC:28:E5:09:88:C2:90:4B:A8:B9:81:50:65:1F
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial: 019D29973FCE0C408D53FFB2EEA37B7FD9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 10:01:11 +0000
Manifest this update: Thu 26 Mar 2026 10:01:11 +0000
Manifest next update: Fri 27 Mar 2026 10:01:11 +0000
Files and hashes: 1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: +Hth5YuBMycZrjQm3o3u1R14r70XXyzAOL3kpDKTSV4=)
2: pUIM7v10t5OGFrSPmfiKdj44TIc.roa (hash: Oo445ykGaPumhWQXMGT+U7KwU/ygHDEsLqsafB1c140=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:3f:ce:0c:40:8d:53:ff:b2:ee:a3:7b:7f:d9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Validity
Not Before: Mar 26 10:01:11 2026 GMT
Not After : Mar 27 10:01:11 2026 GMT
Subject: CN=2fbc330bac77fc28e50988c2904ba8b98150651f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:e5:d6:db:55:e6:5e:32:f7:13:61:d4:ee:
d3:06:51:bb:c3:8c:5c:b6:0e:3b:ed:b5:88:4b:7e:
50:c1:01:61:81:ba:c5:17:16:50:af:1c:2e:c2:fa:
43:c0:80:10:56:31:fa:47:0a:f2:6a:5f:7a:d6:3b:
aa:6f:4d:46:c3:48:2f:3f:0a:4e:52:6e:fc:65:49:
64:d4:32:47:ef:e3:bd:c3:7f:11:73:54:ba:39:fc:
b3:7c:dc:d5:77:fe:a5:13:b7:5f:d5:02:4d:b7:3e:
9c:e3:40:b4:a2:85:24:b6:7f:b0:fa:6c:ae:cc:78:
12:6a:2f:76:29:20:df:b3:ce:fc:b3:c9:2f:01:7a:
31:c9:cf:42:da:6e:df:51:7f:07:5e:5e:db:3f:34:
5c:ef:ab:4f:73:93:0b:b1:a4:8a:1f:fc:d6:63:a2:
c8:55:2c:1b:e2:d8:98:5d:4e:62:66:1b:c9:b6:9d:
a0:d5:0f:ce:f2:c8:53:2c:4a:c8:5d:77:24:27:fa:
40:c7:84:ec:a6:bc:99:be:30:55:54:35:97:48:cd:
a4:2f:2c:5b:84:7c:78:55:a7:5b:7c:4c:4d:e3:43:
10:7f:4d:7d:76:e6:aa:b2:8a:dc:3f:f4:a3:4e:92:
5d:4b:e8:d3:53:4e:73:15:8d:02:8a:4b:50:b3:dd:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BC:33:0B:AC:77:FC:28:E5:09:88:C2:90:4B:A8:B9:81:50:65:1F
X509v3 Authority Key Identifier:
keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0c:ac:83:b5:2f:5b:58:c1:b7:3a:a2:47:a9:58:9a:69:7f:
2a:6d:2e:15:a2:65:68:40:15:37:dc:7a:4f:c0:01:1c:d2:98:
aa:03:a0:7c:dd:e8:01:02:35:33:7b:9f:f8:3c:f5:5b:6e:7f:
38:21:ba:f1:ae:88:45:a0:26:8e:0c:75:c7:95:a9:38:1f:82:
25:4a:7a:78:e0:64:c2:0a:d4:a2:50:d6:59:d9:a1:ea:92:6e:
86:96:d8:ff:6e:bc:f0:16:4d:6a:02:c1:c4:64:b8:e8:96:51:
c8:8a:f9:c4:9f:4f:a8:15:33:06:7f:ff:f6:14:cd:8d:e5:2f:
92:e3:d9:11:62:db:ce:39:60:1d:70:c2:56:15:83:74:d5:98:
a2:45:1a:91:1a:1a:d6:41:08:e0:97:9f:4b:1c:be:2a:82:59:
3f:76:69:85:3c:2c:b1:23:1c:56:0b:f7:fb:0b:0f:3b:9a:91:
fc:e3:fc:97:a4:8f:57:4a:59:00:b6:77:87:74:5c:95:af:76:
c0:f7:3e:82:c5:40:f7:9f:8f:33:30:cb:e7:3b:2e:19:ce:7f:
46:94:5b:22:df:ef:ae:72:63:db:ec:83:fc:89:92:e3:f8:b7:
63:86:fa:1b:65:58:00:87:94:10:ba:a0:8d:2d:53:dc:f9:32:
2d:a9:0f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:34 2026 by rpki-client