Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: ampXE7rf1p1mRpFD4Fyp4564chiSh1mTZazCCJ1HO9I=
Subject key identifier: 6E:D4:D0:2D:96:46:E6:95:FF:BE:76:3F:35:E1:BA:4E:F3:8D:61:08
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 019D28F2C4907515DEC221931459F3F2F269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 07:01:31 +0000
Manifest this update: Thu 26 Mar 2026 07:01:31 +0000
Manifest next update: Fri 27 Mar 2026 07:01:31 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: zz2ahvkN7Dp+XvUgdq9p9tu/OJkIDccdNkshsoW/V98=)
2: NxS44xqtw9wnJjtyrxmTBDUCj5c.roa (hash: HUNSDs/gJPWUN3iy9W3sRGZH+ajPQ9ZIuVJ3VIFyz4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:c4:90:75:15:de:c2:21:93:14:59:f3:f2:f2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Mar 26 07:01:31 2026 GMT
Not After : Mar 27 07:01:31 2026 GMT
Subject: CN=6ed4d02d9646e695ffbe763f35e1ba4ef38d6108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:2a:72:cb:cb:23:f0:89:91:a5:9a:a8:38:
9c:20:5c:d2:c0:9b:da:be:3f:39:ba:bb:bb:06:0d:
cb:75:16:0d:67:ba:d0:e5:48:72:60:81:77:e3:ea:
8f:a3:9e:a7:3c:f9:6e:21:7b:c0:b4:db:7d:26:e9:
f8:6c:80:72:0c:10:2d:7c:a8:cb:8f:45:b9:69:e3:
a4:c8:ac:e1:65:95:8e:14:5e:39:3b:83:59:81:81:
08:ac:71:e8:c6:8f:7f:7c:42:62:0e:42:86:17:83:
d7:d1:e5:0a:a6:74:e0:49:a0:a2:67:27:ce:91:26:
a2:5c:7a:5c:b3:97:f6:a6:46:b1:7c:2a:26:a6:db:
01:02:fc:57:59:fe:d2:cd:b3:f3:a3:f4:43:56:8d:
bf:65:53:ce:15:6e:cd:4f:30:84:76:76:43:d0:b4:
0c:f9:40:50:30:12:46:63:c5:6d:50:6a:85:4d:39:
57:d9:c6:04:f3:f8:71:59:36:3a:a1:1b:0f:4c:3a:
09:d4:55:e1:25:8e:f7:dd:95:63:8f:3a:75:c4:d4:
62:91:b6:84:5d:cc:7d:fb:f5:89:f0:b1:41:df:81:
d0:01:19:63:11:a2:e0:46:0f:77:b9:9a:20:6b:a1:
22:ca:87:dc:48:48:f8:10:6e:d4:aa:d0:1a:b3:8f:
34:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D4:D0:2D:96:46:E6:95:FF:BE:76:3F:35:E1:BA:4E:F3:8D:61:08
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d4:15:1a:a2:74:b3:bb:5c:6f:3b:c7:a9:96:83:30:41:c6:
c9:e9:a0:c1:f6:1a:a8:26:5e:3b:97:2f:e8:7d:85:94:e2:d3:
b3:81:68:2b:0c:8a:d0:cf:39:76:84:d2:53:9d:13:ab:1c:d8:
e6:b9:dd:fa:43:62:49:a1:1f:18:2e:b9:07:21:69:61:46:53:
cd:aa:b4:9c:72:ec:1c:be:b5:7a:bf:23:36:0f:b9:20:98:15:
f7:b3:a3:0e:ff:dd:ee:8e:e2:d5:44:3f:d0:22:50:65:2b:ca:
04:16:c7:db:e8:9b:a3:81:b5:b0:e8:ba:3f:62:c0:4f:e3:27:
66:40:ef:94:81:57:8b:46:7f:3d:5a:cc:57:0f:08:61:d2:9d:
c6:75:aa:b6:19:cb:04:38:bd:01:7c:4c:cf:db:9e:eb:5c:59:
1b:de:38:9d:fb:5b:b2:21:8b:59:c5:7f:d2:19:82:b7:03:57:
71:31:71:a4:1d:ce:fe:4d:57:d4:54:1d:0c:78:0f:1e:21:db:
19:fb:fd:bc:9d:55:20:f7:af:e0:2c:c5:0b:1c:12:83:c5:c6:
2f:98:ed:9b:14:ea:e2:a6:2e:f8:3e:73:1b:07:a0:57:37:5f:
63:61:bf:71:3a:9c:08:c5:8a:8b:ba:33:ce:28:6e:ba:18:a0:
59:4c:df:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:45 2026 by rpki-client