Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: zZDlaZjCM1XjnevkwvL1f74JTXQxiQxA+ulR7oW7fuI=
Subject key identifier: 82:DA:25:85:47:58:D5:1C:D8:22:1B:AD:F0:A7:FD:E9:B9:42:2F:12
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 019D262806D7DA8A3483FCBE9350857CBA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:00:50 +0000
Manifest this update: Wed 25 Mar 2026 18:00:50 +0000
Manifest next update: Thu 26 Mar 2026 18:00:50 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: Sf4q2BatwtS0BsX+vgbwnOtnlRo2gyFVpONNURWBhY8=)
2: qB9Z-zHdmjEFSIG2vfJGfIMdpA0.roa (hash: MxW4mBfsVBC2g/oHLcgSIPQNdBtdZMBf3Vv3p/+UNxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:06:d7:da:8a:34:83:fc:be:93:50:85:7c:ba:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Mar 25 18:00:50 2026 GMT
Not After : Mar 26 18:00:50 2026 GMT
Subject: CN=82da25854758d51cd8221badf0a7fde9b9422f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fe:e3:76:9d:15:1e:81:ea:2d:44:6c:37:03:
10:a0:59:5c:2e:c9:9d:61:5d:f9:c3:2f:5e:e3:84:
7d:5b:f5:31:f3:32:c4:01:61:42:d9:ff:22:9d:ca:
12:42:d2:40:33:45:91:29:95:ac:d7:5f:76:b1:55:
17:2a:77:c5:9c:1f:ae:42:02:6b:18:b2:69:19:ae:
40:b5:e4:d7:4b:34:63:89:86:58:f4:de:5e:f5:bb:
64:9c:af:9e:5b:e7:40:48:99:f7:3a:1a:aa:39:94:
b9:01:d0:83:fa:44:e0:5f:c7:3e:19:79:7f:34:f9:
94:f9:a4:4b:99:99:0e:30:41:22:67:a0:aa:c6:f9:
f6:ab:22:c1:9b:ac:b7:a8:85:a5:09:27:74:e9:28:
6c:fd:2c:ba:75:0d:96:83:41:50:c8:16:88:6a:5e:
73:ea:c4:a7:15:f0:c8:66:a3:55:a0:0a:80:2c:c7:
4b:dd:ad:08:2b:46:e5:5b:b7:93:35:fd:97:8e:02:
48:62:f5:25:0b:8d:74:bd:3c:4c:4a:bb:f5:a2:e9:
4e:bb:7a:09:88:d5:7b:52:22:1f:9a:4d:ec:a1:7a:
5b:b7:4d:77:2b:2b:86:8e:2d:a8:51:8d:52:83:0f:
bd:a0:54:e5:c2:4e:e6:08:17:74:53:0a:f3:a7:a1:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DA:25:85:47:58:D5:1C:D8:22:1B:AD:F0:A7:FD:E9:B9:42:2F:12
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4c:40:51:9c:2b:72:08:51:6e:c3:f4:dd:a8:a8:a2:08:13:
e1:a2:4d:84:a0:94:4e:5b:a0:97:8c:f9:3e:d0:e2:9b:19:cc:
ec:31:0a:a1:d8:4e:b9:33:e0:37:4d:84:d8:47:19:d0:f4:80:
1e:fc:87:f8:54:06:27:97:e2:15:b4:a8:9b:00:2a:5d:9e:b5:
7d:a7:89:f1:34:fe:bd:e8:50:da:5d:d9:26:75:7e:de:da:b4:
e6:a8:80:e5:e8:d4:93:fb:ec:8d:fe:f1:ce:99:57:5b:2a:e4:
3f:4c:9e:09:e2:a1:a8:01:40:96:e1:e1:a3:51:02:ec:87:34:
a4:7b:9f:00:66:1a:75:e9:7a:3c:84:66:9c:b6:e4:50:98:2b:
e1:7c:9d:1d:57:6b:ec:af:6c:b5:16:f9:9e:eb:aa:31:dd:13:
96:82:89:d8:f3:11:06:6d:4f:75:f3:9e:d3:b8:18:5e:99:22:
50:94:ba:4e:2b:ea:7c:89:40:04:aa:a4:cb:df:fd:29:ae:ad:
7b:5f:eb:bd:b9:4d:dc:99:95:0e:72:aa:16:8e:e2:f1:47:83:
ce:c2:12:94:9d:85:29:97:4e:d9:90:ab:aa:09:0e:85:d2:87:
66:92:0f:bb:0e:b9:a8:77:2e:9d:02:7f:5b:24:61:7f:da:48:
72:f3:9c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:07 2026 by rpki-client