Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
File: Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json)
Hash identifier: NnwqWQyZx3zTCGz43ye4IMzIsA5VDqualaVLr/Nat30=
Subject key identifier: 24:49:BF:50:19:F3:0D:1A:33:31:65:B4:E3:A0:E9:1E:68:7B:57:82
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Certificate issuer: /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial: 019D2884BD7E861DDDE9089ACDCD770EEE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
Manifest number: 141D
Signing time: Thu 26 Mar 2026 05:01:21 +0000
Manifest this update: Thu 26 Mar 2026 05:01:21 +0000
Manifest next update: Fri 27 Mar 2026 05:01:21 +0000
Files and hashes: 1: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: NycSOGTjBwWXgA1hHhIKaSuW03bcH9oAd+wwGvZlvB8=)
2: _SVgDeMt7OyK763J59KOgA7Y4X0.roa (hash: JZm207g6Ascmgp0WtNlIOYunKJNalG/ciHHMl9wcILk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:bd:7e:86:1d:dd:e9:08:9a:cd:cd:77:0e:ee:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
Validity
Not Before: Mar 26 05:01:21 2026 GMT
Not After : Mar 27 05:01:21 2026 GMT
Subject: CN=2449bf5019f30d1a333165b4e3a0e91e687b5782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:ec:ce:09:cd:d3:21:51:45:c6:12:ba:95:
12:e2:12:0b:27:60:f5:95:71:72:bd:04:8a:a0:8b:
4d:43:9a:c6:3d:22:5b:6e:60:58:f3:38:62:55:cb:
6b:2c:9d:7f:1d:45:58:4f:5e:a8:ea:70:58:3f:60:
b4:35:02:44:c9:03:fd:88:28:23:64:0b:87:a6:8d:
a0:26:1c:89:cf:a7:a6:99:c3:46:c0:fe:bb:5b:cd:
55:3b:a0:95:89:36:35:4f:87:11:5d:30:81:09:ce:
8a:07:87:33:0a:c7:ce:ef:82:70:05:58:aa:db:7e:
26:91:8c:21:e0:d6:3e:bc:f4:68:ae:8f:7e:68:94:
10:8d:67:0b:a4:80:22:bd:65:ae:63:72:1f:4b:d5:
77:d0:31:3e:4c:94:02:f0:e3:59:82:ba:08:0b:e1:
58:74:31:40:9f:33:3b:a1:80:75:68:53:b2:33:ed:
9f:51:e4:c6:67:47:49:41:2a:df:f2:cf:1e:e4:c3:
8a:2d:60:e8:47:f9:42:a7:92:b8:3f:ef:7a:23:db:
c8:8e:e1:d4:d6:d7:3b:1f:e8:3e:ec:76:fd:ad:3a:
f4:14:4f:a2:f8:e7:8a:ed:32:83:64:4e:a6:8f:48:
d6:1b:9e:3f:bc:82:a2:54:ec:60:2e:32:d3:09:48:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:49:BF:50:19:F3:0D:1A:33:31:65:B4:E3:A0:E9:1E:68:7B:57:82
X509v3 Authority Key Identifier:
keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:44:6c:b9:85:93:96:bc:02:27:da:84:eb:33:d2:f2:30:27:
7c:87:e9:94:47:e7:15:46:94:a0:57:aa:c5:0a:89:48:5b:d5:
53:48:31:90:68:0a:ae:fb:af:23:ef:81:e9:00:21:7d:da:d6:
f3:2d:91:af:db:ea:98:2f:0e:e6:70:fa:f8:b4:9a:16:15:8b:
c1:77:40:58:db:77:67:20:a1:00:a5:41:bf:8e:2b:fa:dd:0c:
0a:47:86:de:d9:55:a7:bc:20:7c:c9:2d:f0:a1:ee:e3:8a:dc:
ec:b0:51:fd:4e:6d:fe:1e:32:ea:04:ca:58:77:a1:88:1b:3f:
6a:b4:e7:9b:9c:d9:48:48:ad:44:b0:b6:3b:b8:73:34:83:b3:
02:80:55:68:f8:55:d2:2d:3d:25:f9:9a:fa:6b:68:e2:81:6e:
46:93:34:77:1d:df:e3:6f:b3:85:58:6a:1c:fd:83:70:92:74:
15:f6:95:cf:b9:a0:e3:28:87:b9:69:3a:a7:68:ff:63:88:18:
ad:73:1c:53:24:f5:83:8a:bf:78:39:93:fd:24:56:ec:a2:88:
41:0f:92:42:2f:22:5e:26:35:a6:ef:45:7a:87:ac:3b:f0:f1:
3f:6a:8f:74:2f:93:f0:7a:63:73:f2:74:d8:24:c6:f4:32:fe:
23:63:41:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:50:59 2026 by rpki-client