Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
File: Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft (raw, json)
Hash identifier: 5CaM3C9qCQjl9dv1sHqqsZos1eoOfJ1DzZ/A+IaxPX8=
Subject key identifier: DB:8F:64:1C:4C:D8:68:7E:99:F0:BB:87:19:BD:18:4D:76:16:49:49
Authority key identifier: 0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
Certificate issuer: /CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Certificate serial: 019D28BB81796B5C5F733FC05216361F9CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
Manifest number: 0300
Signing time: Thu 26 Mar 2026 06:01:10 +0000
Manifest this update: Thu 26 Mar 2026 06:01:10 +0000
Manifest next update: Fri 27 Mar 2026 06:01:10 +0000
Files and hashes: 1: Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl (hash: aIVCioX+xA1N7QQWygsINwHTQIu4MB1zDDAKbqegEwE=)
2: r87aSMlTcvbfUcNgDrz01QCPAQA.roa (hash: 4IqazvlvJ1xS+3jpTJGpmr9Z+5iN7AeI5Qg7WLedfSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:81:79:6b:5c:5f:73:3f:c0:52:16:36:1f:9c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Validity
Not Before: Mar 26 06:01:10 2026 GMT
Not After : Mar 27 06:01:10 2026 GMT
Subject: CN=db8f641c4cd8687e99f0bb8719bd184d76164949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:56:59:91:aa:72:c7:19:fa:16:d6:7a:96:
20:31:40:48:b0:14:58:05:81:91:66:5b:a5:f1:05:
24:d5:27:ee:25:26:59:4b:3a:96:80:fb:fb:22:1a:
d8:4c:b4:ae:a8:ad:3d:85:ee:cc:51:64:5e:2a:74:
50:26:ee:16:16:61:ac:80:bb:9b:60:37:82:f4:db:
f6:8d:eb:c0:40:15:85:33:18:c5:53:cc:28:6d:cc:
26:61:6a:e6:93:f7:64:bc:83:f7:80:db:fe:ec:ca:
0a:44:7f:c6:3c:65:91:81:3b:60:7f:00:5d:4b:e9:
cd:90:96:32:ec:51:90:86:fe:ce:c2:80:f8:23:e1:
e6:8d:e0:84:38:47:63:c2:47:c7:fe:88:cc:eb:d1:
23:be:05:55:83:83:45:15:3b:78:49:0f:4e:a9:03:
61:5e:07:7e:0d:aa:3d:5d:10:e1:9e:9b:bf:18:f2:
ee:f2:28:7e:39:29:cd:5c:d9:f8:76:fd:a9:87:c9:
94:fe:35:6a:7c:82:38:69:57:ca:47:b9:31:fc:1e:
2e:65:78:a7:17:f3:1a:7c:35:8a:d0:8c:0f:b2:66:
2b:f4:2f:13:da:02:b7:18:2d:df:6a:25:59:dd:61:
58:72:9f:f2:ee:34:61:63:8f:84:4d:f5:ae:64:77:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8F:64:1C:4C:D8:68:7E:99:F0:BB:87:19:BD:18:4D:76:16:49:49
X509v3 Authority Key Identifier:
keyid:0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b0:00:02:92:6d:22:98:96:cb:68:c4:8c:11:8c:dd:51:d4:
03:1e:1b:3b:b6:b9:d9:50:fb:66:c5:d0:54:a2:cd:01:72:4c:
6a:a1:9b:50:a2:17:0b:1c:a9:b7:30:2a:61:c5:86:26:fb:d0:
00:0b:21:b6:af:a3:64:27:b1:9e:7e:7b:bf:d9:82:33:2f:2e:
12:e4:56:93:1b:6a:7e:9d:3d:9a:0a:7c:a8:1b:fb:8a:3a:9a:
ce:1c:c2:03:43:cb:f2:35:50:50:16:a1:ae:d1:f3:28:bd:79:
fc:d4:04:48:97:d2:dc:a3:36:72:74:58:55:8d:89:ef:31:ba:
4d:88:58:31:a0:a1:05:de:de:87:42:94:08:35:8c:71:f4:ec:
a8:d9:43:fe:cd:0b:3e:bd:36:cd:66:ea:ee:94:f7:b8:62:1b:
0d:f5:b6:cf:85:32:7e:51:aa:13:e1:c5:ab:e6:a4:40:b5:99:
a4:6f:bd:b7:8c:32:5e:f9:6e:18:c9:5c:8e:96:6b:ca:bb:12:
da:74:b2:d6:9e:c9:b1:43:ba:89:8f:27:74:10:ca:6f:01:ab:
a3:5d:79:7a:7c:93:97:17:98:44:1a:84:5b:a5:62:f7:af:41:
ce:f9:82:d0:2b:7a:10:fd:20:dd:5d:98:b2:dd:d2:b1:a4:bf:
66:57:b0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:57 2026 by rpki-client