Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
File: DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json)
Hash identifier: 3kxGwuJ5syE09xAWLEY6lOPxHJg8AC9xfYlivQiF334=
Subject key identifier: C3:77:5D:A3:D4:47:CB:F0:15:87:31:C9:EF:84:F9:B8:57:B4:98:09
Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
Certificate issuer: /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Certificate serial: 019D2816B5EEC382F9E8AEA12483C3023984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:01:10 +0000
Manifest this update: Thu 26 Mar 2026 03:01:10 +0000
Manifest next update: Fri 27 Mar 2026 03:01:10 +0000
Files and hashes: 1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: kG3ipUcgK1ZssPHcpqIRLNugOIfP3CP83XdsnrPRZuE=)
2: sJbabSr0DQsUKcF8whYiP0keQLk.roa (hash: VLMKLJgJtAQMDHLOL+HZaV58yPgmwNt2u2OyVf266h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b5:ee:c3:82:f9:e8:ae:a1:24:83:c3:02:39:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Validity
Not Before: Mar 26 03:01:10 2026 GMT
Not After : Mar 27 03:01:10 2026 GMT
Subject: CN=c3775da3d447cbf0158731c9ef84f9b857b49809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e6:bb:3a:fc:6a:45:44:db:ff:71:f0:4f:6f:
6e:6c:aa:7b:3e:f3:ce:90:88:d9:fd:3a:89:35:c8:
03:61:fd:f7:ea:4b:21:a8:5a:d3:f7:1d:c5:fc:dc:
11:6d:e7:39:50:38:65:46:f8:1f:4b:d9:87:f0:26:
98:11:06:f8:9b:be:ff:ed:2c:2b:35:5b:4f:34:a2:
00:c1:82:92:3d:84:19:58:0f:5c:10:07:98:b8:40:
5e:97:fa:e9:cf:1d:f3:6d:e3:7e:7e:33:74:1c:ff:
a0:6c:02:6f:c0:73:05:b7:7f:56:b3:69:0d:a9:b4:
84:ff:c8:90:39:c8:36:60:bd:8a:d8:46:15:e6:a3:
d0:44:2c:33:2f:d4:83:ef:6e:77:3a:38:eb:b3:02:
92:66:da:c8:1a:18:36:85:5d:02:41:34:af:b3:8d:
f9:3f:0c:9a:74:6e:79:33:ca:fc:5b:83:ff:87:74:
54:e5:90:d8:ed:a3:5d:76:65:14:7c:e1:79:44:ee:
8e:13:d5:85:d0:ab:ed:47:42:df:2e:d6:78:ae:21:
c3:bc:d6:c8:86:e6:04:e0:a3:09:a3:9a:eb:7e:f6:
34:90:2c:fc:96:a0:95:0e:fe:86:e4:12:70:f8:68:
25:23:67:92:16:bd:38:cf:8b:75:e1:ef:7f:0e:1a:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:77:5D:A3:D4:47:CB:F0:15:87:31:C9:EF:84:F9:B8:57:B4:98:09
X509v3 Authority Key Identifier:
keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b3:48:20:0c:1e:02:0c:e3:02:9e:8d:c9:ea:d5:12:a1:19:
7d:29:06:0c:53:4d:a7:ef:f6:a6:0f:c1:fe:73:72:52:48:12:
8b:88:6f:ea:88:89:2e:3c:49:af:4b:4c:ee:b1:cd:4f:e9:40:
74:34:c4:a4:13:7a:55:82:c8:c2:02:a7:ce:5a:76:17:34:55:
67:e2:cb:35:81:46:a7:4d:5b:09:de:2c:ef:6d:cf:fe:72:0c:
f0:6a:1b:2f:c8:47:2c:ae:64:a8:54:0d:af:a6:bd:5a:e4:fd:
30:90:9b:1f:1d:55:ac:b0:f2:67:94:bd:f4:15:12:b2:94:92:
d3:8e:3e:d5:15:f5:13:3e:82:5f:f8:44:2a:dd:2b:8d:7d:18:
68:72:a6:45:11:78:1b:88:ad:42:cf:6d:4f:74:12:7f:c3:0b:
61:83:a4:8c:be:14:5c:d2:ea:65:49:d7:e7:b6:87:c3:ae:55:
c4:81:36:af:15:c9:3f:54:0b:40:0e:85:5c:ea:bc:db:fe:43:
e2:e1:e9:36:06:90:56:da:b4:c5:35:78:33:bc:01:c0:ed:78:
ec:35:ac:1f:d8:6a:66:ab:bb:01:1a:40:eb:3b:2e:ed:9d:13:
31:be:f5:02:0e:43:26:fc:50:56:65:63:4f:6f:af:0c:65:96:
2d:36:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:32:10 2026 by rpki-client