Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File: Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier: AfdTd8/NMBUNTSschPtGzG2lBz0kk6CHzK9LMcZKmU8=
Subject key identifier: 5F:06:CB:D7:C3:BC:CA:F5:DE:63:DC:D8:99:39:D3:1C:6B:13:35:48
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 019D269653A372E5C5F5789BDB36EE84A69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number: 1896
Signing time: Wed 25 Mar 2026 20:01:19 +0000
Manifest this update: Wed 25 Mar 2026 20:01:19 +0000
Manifest next update: Thu 26 Mar 2026 20:01:19 +0000
Files and hashes: 1: 6-VbzQgi8XA2TJAq8RgMaysx0X8.roa (hash: nwaIi9ebrKp/Q5R4ShMm9TiJvoby9UkF3818QuosS1w=)
2: ByAZZvD6ZO4dFVGZCOox_IHwdzo.roa (hash: wGFO7OyD3Pn5gOzCEOeYwv/8FCnWxDnlJBKiFmfnr/k=)
3: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: M3IAXcSNSdS3s83MK/YnjQXql5S3xuaMG6bf0m6besE=)
4: KM6PkAFxCJgnCXLELW5hiOAKjus.roa (hash: DuJVolLG90aax0OKvLaTyX/VTpILvcyZxRZVQhnBPeY=)
5: YoJZ9epoonqwiI5Cz_IYJxFC0KQ.roa (hash: rcBdfpWe95Pbv9jR1rFIiVQgv2ItDDK2rcgQtFQdM3o=)
6: kZOcgE-yQiEGZ59-58kZODUnVtk.roa (hash: NpX21ZAdgdJK8Ql3JOW4Xo/GtwmqnfCpzM6EirlUM7w=)
7: odPvkDMmAxjrc3ZPhrKtHv1Pl_Q.roa (hash: WbetbahmmvNLGyGKWf2niABo2rq9cUlLwj18Yb3Jj3M=)
8: ps2vvRE8em2BhpWugO8HL3Oy4sw.roa (hash: UVRw/RrZWURZppeHPUhCU3KyC7ib1pGilFd5giOzN0U=)
9: sT5NvgSrjzuwTioYpNTeZgud1ao.roa (hash: eCoPPFfnRnkLIs6eZVD/zHitzMoyIccre5mcG4E3t34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:53:a3:72:e5:c5:f5:78:9b:db:36:ee:84:a6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Mar 25 20:01:19 2026 GMT
Not After : Mar 26 20:01:19 2026 GMT
Subject: CN=5f06cbd7c3bccaf5de63dcd89939d31c6b133548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:db:d3:ac:1e:f8:ce:37:27:c5:6f:f1:7d:39:
51:cf:d7:5b:2a:5d:bf:cd:fd:80:ff:38:b4:ae:d7:
db:e9:23:29:03:04:5c:07:26:8e:63:ef:21:f8:89:
50:b3:15:64:61:85:6a:c6:ac:77:dc:cb:a2:48:71:
da:1e:86:81:a2:49:7a:63:1c:62:3a:43:85:f7:6e:
29:52:12:68:b7:24:31:a7:d8:1c:74:06:de:4a:5c:
9b:11:8a:e9:41:76:43:ae:1c:31:3e:16:ae:ec:1e:
27:20:34:2a:ef:10:00:24:f3:96:73:7f:19:d9:14:
22:69:f9:a3:3e:a3:4f:1f:13:af:dd:5e:d1:1a:4f:
65:91:a1:ed:5d:b1:67:64:46:05:5a:34:cb:d4:82:
4c:54:12:fa:77:66:2b:7e:97:c7:23:15:ca:ad:59:
39:87:35:e5:97:8a:5b:fe:c8:0d:e0:2e:e7:0b:2f:
3d:ec:5c:db:27:4c:4e:f7:71:64:e8:d5:81:01:d7:
f9:b4:e8:45:03:68:16:e8:01:18:ca:a0:6b:0f:0d:
89:05:16:76:26:0c:24:d9:df:3a:2a:33:77:57:62:
71:f0:ab:e5:94:b0:eb:bc:2f:0f:1a:ef:1a:31:f1:
72:60:ec:b2:fc:42:06:19:22:1d:bd:c6:01:37:9d:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:06:CB:D7:C3:BC:CA:F5:DE:63:DC:D8:99:39:D3:1C:6B:13:35:48
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1b:58:b1:62:e0:23:09:70:9c:39:3a:8f:df:35:a0:e5:39:
df:ee:6a:b4:0a:47:8d:b3:4f:60:75:6f:fa:7b:b4:7f:37:ec:
03:0b:25:c9:f8:49:81:7b:94:c5:cc:78:ed:df:5f:63:50:a4:
03:95:73:e0:d1:02:56:04:e7:5e:24:bd:6e:5c:7e:46:58:1d:
4d:a1:88:d6:9f:4a:82:9a:b7:51:ac:bb:50:25:85:2d:0b:6b:
85:eb:29:62:4e:f5:a5:a8:38:72:86:1b:57:1b:82:f9:8c:45:
c2:00:9a:36:cf:94:9a:98:e9:65:a8:2b:8f:a7:7d:82:ed:2b:
f4:0e:f2:27:77:62:eb:a3:4c:14:4b:8b:5e:cb:38:8e:51:ae:
57:28:27:99:e5:a2:ce:c3:01:0b:76:eb:4e:33:99:47:a3:b2:
37:65:92:39:83:ee:a5:70:a7:78:c4:42:6d:10:76:62:6e:d2:
96:e9:ad:f8:86:31:3f:8d:e3:0b:83:96:bd:c5:57:0b:f0:2b:
7a:52:a6:01:e3:fc:cd:03:52:7e:b6:2e:55:23:3c:48:96:e8:
5f:15:f8:f9:38:c1:62:2c:cc:ac:ea:a7:5f:23:2d:16:db:d9:
02:af:c6:0d:de:97:1c:fe:f8:a5:b3:c4:af:1e:69:73:af:24:
24:d4:62:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:39 2026 by rpki-client