Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: /fafWU2m9InyGDARNVB+BYbep+xv6aPTQiZhj1bKUzU=
Subject key identifier: 83:17:A4:39:37:21:1F:87:2E:68:51:79:3E:ED:B0:E5:E9:35:9F:8E
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 019D2816609A03AC5BC1DF5EE8EB071FA46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 03:00:48 +0000
Manifest this update: Thu 26 Mar 2026 03:00:48 +0000
Manifest next update: Fri 27 Mar 2026 03:00:48 +0000
Files and hashes: 1: HeTj1rlCLTtvBYW1onGZ7LauPQY.roa (hash: weFl57AveWg1aEff8nmfajyotthwbCTL0U0EBzxk8Zk=)
2: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: wh52EvXrsWfvJUFXxvjNUZs5Kn2u4vaw1CMcEV947iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:60:9a:03:ac:5b:c1:df:5e:e8:eb:07:1f:a4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Mar 26 03:00:48 2026 GMT
Not After : Mar 27 03:00:48 2026 GMT
Subject: CN=8317a43937211f872e6851793eedb0e5e9359f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:ad:40:ae:f9:51:f0:3e:e0:e0:78:65:6e:
68:25:5c:e9:e7:6e:19:2e:a4:d5:bb:58:42:ae:6a:
c4:9e:2a:bd:30:15:5c:bd:df:fc:78:a3:0a:62:a8:
78:8b:47:16:ab:e1:5b:49:58:be:57:3d:8f:ac:b5:
91:40:b2:8a:5e:e8:f8:3d:a8:04:5f:b8:75:a3:33:
f1:7e:7e:b7:68:80:00:d9:7d:17:b6:3c:8f:34:f7:
40:d8:08:11:71:72:87:f9:b0:11:d2:8a:9e:8c:ee:
c8:d8:09:f5:a6:1a:72:66:9b:c5:13:05:bb:8c:7d:
f7:e1:d7:69:a4:27:9e:8f:06:e6:27:01:b1:28:91:
e8:53:fd:b7:67:18:1b:2a:70:8c:74:ee:d5:71:cb:
50:e7:95:66:1c:c5:0c:e8:15:16:21:4f:55:e6:1d:
4f:f1:f8:30:27:62:2f:fb:0b:97:ce:e6:dc:45:8b:
5c:f6:b9:73:85:90:ff:8d:45:8b:25:64:a6:b5:7e:
b6:6a:44:06:32:35:6e:a3:07:ca:f1:92:10:a1:a7:
61:55:c6:23:a8:ad:31:b3:94:fd:1f:22:92:84:cf:
42:e3:f0:5b:bc:2e:b6:11:47:c0:11:ca:5f:df:e0:
72:80:cb:ce:8c:0c:59:fb:b8:63:77:1e:67:f4:8b:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:17:A4:39:37:21:1F:87:2E:68:51:79:3E:ED:B0:E5:E9:35:9F:8E
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5f:1f:75:28:a2:ef:cf:9a:2f:73:26:e4:d2:11:c1:6e:28:
94:22:2b:0f:39:87:a8:b3:53:76:ae:45:d1:0e:b5:5e:92:e2:
a4:24:d8:af:99:1d:a8:c6:86:d1:89:4d:18:f0:25:6a:6b:22:
be:ad:3e:41:fe:a0:a3:ee:04:de:dc:cc:46:65:b9:1a:a9:38:
29:37:e9:d5:d2:3d:c3:a3:d1:f7:ca:31:4c:76:d2:9e:34:4a:
0f:91:d0:ba:0b:e7:cb:96:52:0c:28:96:41:e4:f3:b0:aa:c9:
44:53:aa:e6:e3:c9:3b:d6:7e:00:34:f4:62:02:c8:01:db:fa:
8c:a8:4f:26:9a:09:d6:c7:a7:d7:f2:84:86:f0:87:86:f5:ea:
0e:0d:5e:e8:d0:16:62:1d:21:1d:b1:1d:e4:70:7c:dc:e9:57:
91:ca:c1:1f:9b:3b:ea:0e:46:97:74:b3:fc:33:5a:13:4d:53:
b0:d4:46:98:c9:7e:2c:28:05:47:43:e9:3b:15:09:b7:db:b9:
f9:f5:5f:eb:2d:58:3e:95:39:e0:c9:02:7b:f9:27:18:1c:54:
66:2b:e7:a5:00:73:85:93:0d:03:30:86:6a:57:ef:d2:0f:2a:
13:2c:c4:77:67:16:f9:78:d1:e9:bb:a5:16:94:b1:aa:6c:21:
3d:92:c4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:25:28 2026 by rpki-client