Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json)
Hash identifier: cwY3R1CPtYzcCj7W/VXBFs4+rmBN8+qnQ+ZSqmfXDXs=
Subject key identifier: 3A:B6:78:17:E6:0A:87:32:A4:C6:C5:5F:C7:70:46:52:22:6A:51:AE
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 019D27DFADD3557E3DEFA0CCBF6991F00888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
Manifest number: 0F6C
Signing time: Thu 26 Mar 2026 02:01:03 +0000
Manifest this update: Thu 26 Mar 2026 02:01:03 +0000
Manifest next update: Fri 27 Mar 2026 02:01:03 +0000
Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: fSTd+WrAoU+PqfQw0FJIrmc+YGHpf7kApru11K80jek=)
2: pEi1sXolFr3_KzzGy9GgxCb35YI.roa (hash: 0hWxK4UVYjDavdDARBqtyWujMUcunhSXg8YFegPVy8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ad:d3:55:7e:3d:ef:a0:cc:bf:69:91:f0:08:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Mar 26 02:01:03 2026 GMT
Not After : Mar 27 02:01:03 2026 GMT
Subject: CN=3ab67817e60a8732a4c6c55fc7704652226a51ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:07:4d:47:37:a9:dd:2d:76:3f:48:5c:b2:aa:
a2:ed:af:48:01:a6:4a:87:04:3e:c0:4a:13:6f:b0:
44:82:ad:4f:a3:7c:b5:dd:4b:bf:cb:46:30:53:b7:
72:e6:1f:4c:bb:09:e0:36:1b:fc:d1:f7:5a:bb:a6:
c9:c9:75:d2:d0:03:ea:7e:ea:23:2d:57:b7:e7:f9:
15:a0:d2:0f:24:8d:e9:6a:8f:32:11:48:c8:8b:10:
12:5b:5d:cd:9a:b9:ec:22:a0:98:6c:31:79:97:07:
0f:7a:dd:cf:eb:61:60:14:99:e0:45:4d:ca:0f:6c:
31:20:35:29:6b:0f:9a:95:51:99:06:fa:9f:b4:b2:
84:ae:f0:fb:50:33:47:34:12:10:b3:af:be:da:d4:
5a:86:2e:cd:bb:b7:d7:e3:6a:db:61:a2:e6:19:f2:
6c:68:9e:9c:b0:7f:98:aa:a8:24:ce:f2:68:d4:d5:
39:20:1d:a8:1d:7f:22:2d:c5:bd:1a:34:e8:32:6c:
cc:d1:c5:18:c8:dc:90:13:53:10:59:94:df:62:5a:
57:0e:c4:9e:04:94:23:0f:33:70:43:a9:b6:31:f3:
ff:3b:19:74:80:a1:18:7d:5d:fd:0c:ff:a5:de:8b:
b1:f1:bb:29:1f:9b:68:f8:60:1d:c6:82:25:61:5f:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B6:78:17:E6:0A:87:32:A4:C6:C5:5F:C7:70:46:52:22:6A:51:AE
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:45:ff:c9:0d:83:24:e4:5a:c0:df:2d:dd:dc:d4:d9:86:e9:
88:e9:7a:35:d3:fe:9a:87:e1:8d:0d:b9:24:c2:1d:6d:a0:72:
3a:3f:31:04:d4:dd:3b:71:3b:51:e4:b9:e9:16:bc:44:56:63:
90:3a:c5:3c:da:08:0a:b6:c6:94:45:71:a3:91:53:5d:14:18:
b0:03:3d:61:b5:0c:dc:ca:dd:f0:9c:6a:fa:e0:89:cb:a6:f5:
dd:78:6b:66:26:f8:1c:00:17:66:6a:9c:22:e9:38:54:76:dd:
4a:da:13:5e:6d:5e:d1:c1:90:a9:cf:f5:2c:2d:10:b6:d8:5b:
2d:44:ef:d6:1d:a1:4a:02:b6:ce:c3:e8:34:b1:80:ee:b4:86:
b4:4b:f8:56:9a:33:41:1a:46:02:8d:ef:db:e8:bc:ad:61:ae:
0a:bf:32:ed:11:1c:f4:c6:2a:aa:83:73:c6:31:67:05:71:f2:
5d:e8:ce:45:f4:00:70:2c:9f:1c:ec:b7:db:68:0a:46:d9:e1:
7b:b7:97:24:d4:f3:9d:1b:58:6d:28:fd:1e:ad:0c:82:a6:80:
f0:5a:81:e4:dc:35:f9:50:5f:c0:fb:72:cc:ed:69:48:0c:27:
62:52:d4:0f:a7:d5:c3:97:00:02:9c:1c:d5:56:86:9a:51:e3:
82:26:26:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:38 2026 by rpki-client