Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File: dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier: 1/5U1RINZ2bqnafsz/6gXrAZtFshOK3JoMZR4MNC/ik=
Subject key identifier: 67:D5:0C:C6:83:EF:73:38:26:0B:38:12:F4:BF:BC:46:C1:38:A9:86
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer: /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial: 019D273B16F9F2D67188866888FE668F01BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number: 06D2
Signing time: Wed 25 Mar 2026 23:01:17 +0000
Manifest this update: Wed 25 Mar 2026 23:01:17 +0000
Manifest next update: Thu 26 Mar 2026 23:01:17 +0000
Files and hashes: 1: 2VmhrnY1R-y6rxXotPMotrQDcR8.asa (hash: Ap3BdSC63YcAczUKkEzGKumr15/KgLHB6Jp/DYCbOq4=)
2: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: 5XL6Z2l4uuOIaPO2/EzgGA0PrD9kWrTE4S4qzi1CK9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:16:f9:f2:d6:71:88:86:68:88:fe:66:8f:01:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
Validity
Not Before: Mar 25 23:01:17 2026 GMT
Not After : Mar 26 23:01:17 2026 GMT
Subject: CN=67d50cc683ef7338260b3812f4bfbc46c138a986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:e4:c9:3b:79:4d:0a:7a:3f:77:c4:ba:b2:
94:ae:e0:81:d6:e7:19:e7:41:9a:bb:65:9c:71:09:
3b:fb:59:18:3f:02:53:f5:6a:08:61:0a:e6:c9:ca:
cc:5b:ef:06:41:76:f6:78:b4:11:9c:18:c3:1c:44:
38:5c:ae:25:10:24:13:fb:40:33:cf:d1:e0:7d:4a:
92:ee:5f:b1:47:d1:65:9a:c3:19:22:29:bc:ab:11:
4e:33:ee:f3:f8:99:cd:ab:f7:14:47:f2:2e:13:52:
1e:8b:69:52:66:2b:15:52:48:c1:74:0e:2f:05:3d:
f8:d7:6d:f7:d4:8b:33:b2:2d:d6:30:cf:a5:50:ae:
50:ec:67:45:a4:a9:be:3b:cd:b8:1c:84:8f:22:3c:
96:fd:5b:fc:ba:1f:b8:93:cc:d2:fd:fb:42:e0:93:
c3:82:ba:f9:ca:e5:06:92:87:f9:cd:cf:2c:45:8f:
a7:83:72:b2:ff:f8:d5:40:4b:7d:c2:ab:cc:07:d3:
bc:d0:b0:0a:fd:f9:ad:c1:3f:bf:33:ea:4b:1b:13:
05:57:21:28:8a:66:c4:65:72:78:a6:61:d7:3b:e0:
33:e3:40:d3:df:d5:cb:ff:a3:cc:8b:3e:47:68:75:
2a:26:a0:c0:d2:8d:4a:c8:ea:bc:98:e1:17:a7:20:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D5:0C:C6:83:EF:73:38:26:0B:38:12:F4:BF:BC:46:C1:38:A9:86
X509v3 Authority Key Identifier:
keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ad:42:c1:ae:77:db:f2:75:73:13:22:b0:ee:e7:ec:38:f6:
55:d5:60:50:b5:96:50:62:0d:b1:0a:fa:94:86:d8:ce:81:17:
44:96:85:d5:a4:d3:8d:08:cd:a8:1b:af:38:ad:30:4c:18:bd:
7d:6c:1e:38:22:00:58:98:46:16:e6:02:be:cc:c3:ff:7e:ea:
e5:f5:6d:b8:c0:db:e9:3d:b1:60:ba:50:09:cd:02:18:ef:d8:
79:b1:c6:fc:3d:2c:8d:dc:74:65:0a:f8:33:b6:19:d6:21:34:
4e:e2:a1:7a:2e:1e:dd:7c:3e:d9:44:e1:53:e9:b3:05:4f:de:
1b:29:e4:47:04:27:aa:af:33:9d:c9:46:e7:84:29:a0:69:46:
a8:c2:2e:79:7b:ca:2e:0d:09:03:c1:1f:a3:99:f1:5b:ef:72:
34:bc:6a:9c:5f:96:05:54:95:30:d5:c1:e9:e8:63:ae:9a:d4:
b5:64:a8:d9:09:25:42:e9:97:ca:79:58:bf:e0:cc:7e:4f:78:
b8:38:64:56:09:08:06:f4:1e:87:a6:bb:51:67:13:ac:01:51:
20:11:23:87:46:f0:96:bd:ef:bc:fa:a8:79:5c:20:fb:d3:20:
08:9f:d3:a4:3f:3e:8a:7d:8f:98:46:67:5c:fb:4f:7a:02:7a:
e5:80:f6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:36 2026 by rpki-client