Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier: WrVkuydwNCNIOgM9VCPHGRR9tXcRr2XrVCo92vsTHgI=
Subject key identifier: 2B:D1:16:0D:FF:5F:69:C1:61:49:EA:CD:FA:22:59:7F:20:6F:AD:A5
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial: 019D28169794C477C66B46EDDBFFAEB3D00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number: 1282
Signing time: Thu 26 Mar 2026 03:01:02 +0000
Manifest this update: Thu 26 Mar 2026 03:01:02 +0000
Manifest next update: Fri 27 Mar 2026 03:01:02 +0000
Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: wi//teXKZZKz6WDggHWyaaNX/hgrWV2CDpcIlYmcSbY=)
2: r1owUcHIHUNrR_fArdJ-3GEuqbk.roa (hash: zJDM6tfQVuv+cogBgNYX5vbZST7r1hIuZqSJ4ODXwnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:97:94:c4:77:c6:6b:46:ed:db:ff:ae:b3:d0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Validity
Not Before: Mar 26 03:01:02 2026 GMT
Not After : Mar 27 03:01:02 2026 GMT
Subject: CN=2bd1160dff5f69c16149eacdfa22597f206fada5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:cc:27:8f:93:2a:7e:7c:68:02:94:6b:5c:
3c:61:51:89:09:af:d4:8b:d6:0a:27:55:63:77:ba:
1a:51:0e:36:a1:6e:19:6b:22:ad:99:3a:89:bf:21:
72:d9:2b:29:c8:36:ce:f5:d3:7e:59:25:4b:32:4e:
2a:8d:a4:02:6f:4c:e2:a4:2e:0d:27:30:2f:ec:80:
0c:8a:9a:99:3f:56:d0:96:52:29:9b:b1:ab:c7:90:
0d:1a:d5:1b:95:ec:34:ac:a0:bd:5d:0f:31:4b:6e:
cf:d7:f6:1c:b6:16:52:3b:6a:33:27:bd:45:21:72:
5a:89:d3:4e:65:33:c4:a4:9f:78:25:3e:f5:66:6b:
c5:8a:0b:28:c3:61:58:a5:d3:6e:96:e0:26:4c:ba:
84:57:30:ab:34:a8:15:dd:1e:55:4a:ab:75:d2:0a:
8e:96:84:fe:e9:f1:2c:ba:7c:be:dd:69:e3:aa:1e:
92:ac:02:c5:59:d3:58:28:97:50:8a:99:e9:3c:da:
39:e7:2d:13:a9:aa:99:6b:37:0f:3b:9c:6b:a0:87:
c6:72:19:81:7b:13:60:38:1c:9f:6b:77:f1:ac:0a:
20:38:6d:1e:6c:46:3f:86:e0:22:97:50:b6:34:2d:
53:c1:9f:99:04:d3:13:9e:f1:2d:d1:82:a1:d2:13:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D1:16:0D:FF:5F:69:C1:61:49:EA:CD:FA:22:59:7F:20:6F:AD:A5
X509v3 Authority Key Identifier:
keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:97:23:00:9c:b1:40:2f:c7:89:b4:2b:26:ff:90:8e:ab:bb:
3e:44:e8:8f:70:61:01:16:20:b7:07:e1:9e:ae:35:39:38:8e:
31:4c:ad:26:78:55:84:d4:88:20:5f:8a:cd:f3:98:57:ea:53:
00:bd:44:c1:0b:d4:66:9b:51:db:02:35:6f:c0:d8:da:3e:72:
cc:cf:3f:38:30:7b:66:5f:45:13:2a:58:4d:85:d0:cb:fe:40:
7d:ef:08:a6:40:6a:a0:64:f4:4d:95:74:0f:ef:0c:ff:ae:7e:
51:44:9d:1e:3c:89:89:97:6e:8a:03:35:54:33:87:a5:38:87:
1a:c3:bc:64:0b:05:3a:1b:e0:84:fd:73:67:d0:0a:d4:28:62:
16:01:3f:03:1f:b9:47:61:13:70:6b:aa:19:fa:56:71:fa:eb:
cf:57:eb:ff:15:96:a0:46:ff:71:58:70:36:a7:01:78:56:a8:
c6:5d:e4:98:e2:24:4b:30:2d:2f:42:80:8b:84:b0:59:27:34:
68:22:f6:9f:24:5e:d7:56:8f:10:a9:88:a1:c4:7a:ce:a0:e6:
ae:4f:ab:91:be:3f:99:4d:18:a2:3f:ff:c8:97:25:5a:79:e8:
c6:ab:c1:a4:b3:6c:2c:2b:d1:ef:9a:57:a0:eb:bb:60:45:e6:
25:f6:07:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:10 2026 by rpki-client