Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: /8gLOU/415cIzdbz3tbTzB8ZmlnSqoJ7ZZulQJxHKag=
Subject key identifier: F3:A2:42:98:1F:E7:71:79:DD:F6:B5:E8:D6:37:48:AA:F3:AA:DE:84
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 019D265F7432F9FF95CD899122FCC13CF84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 190A
Signing time: Wed 25 Mar 2026 19:01:22 +0000
Manifest this update: Wed 25 Mar 2026 19:01:22 +0000
Manifest next update: Thu 26 Mar 2026 19:01:22 +0000
Files and hashes: 1: aTug7YNO613h0EdhaVanobAofs4.roa (hash: JO+eAjDs3aZGB9gkmGCHWKFzmsIX3/pwIhE/HLe+REE=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: NmJI4Fk/ckSaJaBpVb8YI+am1QFHJq1sTUl6vgSluds=)
3: tZk_CaKCryAvJRReN7aPc9CJl5Q.roa (hash: GDF5SYSr5M1uY12BBc2vpgU4RwEGW3L9n697ONqnZ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:74:32:f9:ff:95:cd:89:91:22:fc:c1:3c:f8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Mar 25 19:01:22 2026 GMT
Not After : Mar 26 19:01:22 2026 GMT
Subject: CN=f3a242981fe77179ddf6b5e8d63748aaf3aade84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:3f:53:03:dc:19:f9:55:97:ff:c4:ed:ad:
aa:24:4d:98:8d:38:b6:ab:56:c0:7b:dd:27:0f:5c:
e8:d8:7f:f4:e9:bd:d0:71:be:ac:0f:0a:82:ac:07:
31:6e:48:5f:4c:21:71:3a:46:90:95:af:50:8b:4a:
d1:40:d5:e7:35:c1:62:c0:d5:ae:b8:9a:94:8b:af:
0e:a8:2d:76:cc:75:14:98:df:31:0b:f1:85:f5:34:
a3:d3:f1:fd:30:b7:75:0b:07:c4:45:f3:ea:11:26:
66:9b:cb:7b:b4:2e:80:8f:66:4c:18:bd:cf:33:e9:
61:ca:41:b4:27:17:3f:81:8b:aa:fa:f1:6c:e4:23:
2e:52:0b:ba:44:b4:7e:39:2f:e0:63:20:c8:94:67:
8b:4d:d8:66:6c:87:f8:6e:71:ae:08:8b:42:58:65:
ec:cf:23:50:0b:82:31:d5:b6:81:d0:28:56:d2:77:
fd:72:19:5a:4e:0b:64:36:62:b4:62:7f:52:12:21:
b9:71:af:e6:3a:84:c4:0f:6e:e2:ca:80:06:60:25:
72:38:91:1a:eb:93:b2:3c:83:98:34:ba:c2:65:03:
ab:ec:dd:1c:cb:b2:80:c9:6c:f9:cb:93:51:ce:3d:
72:73:cf:b3:22:c8:1a:f5:ef:cd:1f:1b:7e:bc:d2:
b9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A2:42:98:1F:E7:71:79:DD:F6:B5:E8:D6:37:48:AA:F3:AA:DE:84
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:55:63:8f:da:0e:f6:00:61:37:ac:cb:31:35:0a:b5:3a:70:
d8:f5:1d:28:3c:bc:7b:86:8e:3a:f2:a4:de:ae:b0:4c:63:06:
61:be:f6:ce:34:f0:cd:e1:64:b6:be:52:6a:ba:ea:9b:6a:40:
0a:bd:8f:bf:c1:c8:89:ed:41:ea:8a:5f:43:46:3e:a5:32:1f:
3e:a7:72:57:a5:d4:24:ac:9e:1b:4f:e2:67:08:3a:d1:23:ff:
2d:09:19:e2:1f:81:e0:dc:2d:e5:0b:8b:60:bc:b2:4b:e8:aa:
58:82:cc:2a:db:34:29:70:6d:b1:a8:f3:cb:7b:66:bd:de:46:
d1:0a:d4:05:bd:5d:55:cb:60:04:eb:9b:74:ad:f1:f9:40:0c:
52:e9:40:b3:74:c5:a7:4c:f6:34:af:71:27:b6:a3:75:8b:e8:
5b:de:4b:b4:74:a5:84:05:47:ae:72:71:53:3d:9f:09:67:7b:
f0:a5:85:81:44:d0:3c:4d:83:13:24:c8:ae:57:ea:a4:d8:67:
f7:ef:d2:a1:75:0b:ca:71:4a:5f:5b:52:b4:2c:25:75:98:72:
7c:2f:2e:e8:e4:a8:4f:01:3e:71:08:d6:46:96:a8:6a:75:53:
23:e5:90:53:f7:1b:1b:87:9f:ec:12:ec:4f:0f:d3:c0:61:09:
63:75:3c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:36 2026 by rpki-client