Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier: Wu/UuCX6pp4oxVXVpD2Rj3fTX9TjVYBuUzKBZT+KOyY=
Subject key identifier: 82:16:34:B9:C7:5B:7A:4F:7F:C1:CD:B5:38:CF:1D:D2:40:8F:1A:92
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 019D25F1351727798E95F425A909A56CD177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number: 0937
Signing time: Wed 25 Mar 2026 17:00:57 +0000
Manifest this update: Wed 25 Mar 2026 17:00:57 +0000
Manifest next update: Thu 26 Mar 2026 17:00:57 +0000
Files and hashes: 1: RirrsvwYX5j7L-75yH60raw263E.roa (hash: IOJ4XETq/n9kBBATZy+5z0L1BPBp5v7kLy/O5w5iiLM=)
2: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: Joc0fL1Uy2KhC7mXr0hAIzzEXlESVFDohH34HYgO7b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:35:17:27:79:8e:95:f4:25:a9:09:a5:6c:d1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Mar 25 17:00:57 2026 GMT
Not After : Mar 26 17:00:57 2026 GMT
Subject: CN=821634b9c75b7a4f7fc1cdb538cf1dd2408f1a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7e:79:bb:d6:d3:2e:0c:df:61:02:4f:f8:e3:
e4:2a:aa:59:a6:4a:7c:35:0d:41:d0:74:7f:17:1b:
c0:29:93:b0:64:27:25:ad:c1:79:df:ef:61:36:a2:
78:a0:45:d4:7f:a1:85:59:60:c3:7d:ab:e3:01:00:
a8:c4:d9:53:d4:c9:3b:6a:02:0c:57:e5:27:8b:e4:
5b:ab:ff:2a:ad:c8:26:74:c3:6e:22:48:fd:cd:37:
55:4f:07:05:e1:bc:9b:b1:5b:58:77:68:3c:3c:69:
6a:8e:ac:e0:51:d5:8b:d0:f9:be:46:98:b9:7e:94:
26:34:2e:3f:94:e7:cb:a2:de:26:98:e1:46:b1:b3:
d1:11:ba:11:b2:37:34:66:e3:80:fc:36:5e:b2:a5:
16:b8:bd:f2:87:b7:ec:54:63:4d:84:09:70:ac:d1:
45:d6:ba:da:09:dc:90:50:ef:77:ef:47:03:d0:c2:
e7:07:f0:80:5f:c8:ff:37:ce:cd:58:71:74:db:b4:
04:52:81:b2:f3:de:28:5a:00:2e:a0:cb:b6:59:85:
94:63:bd:cd:08:d7:43:dc:d0:ac:a2:d1:28:99:25:
03:fd:cc:6e:bf:d2:43:67:f8:8e:fe:a3:6f:8a:5d:
b2:b1:44:ef:60:09:06:e5:83:18:bf:f2:67:c0:2e:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:16:34:B9:C7:5B:7A:4F:7F:C1:CD:B5:38:CF:1D:D2:40:8F:1A:92
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d9:e6:4e:25:9b:5b:e5:63:b9:9b:fb:3e:18:a1:dc:64:d6:
a0:ac:89:f7:73:00:cf:98:f0:6f:b8:19:d3:47:06:11:2b:51:
58:a5:c1:ee:c4:79:ee:ab:7d:7c:af:83:d0:62:6d:57:8c:6e:
5a:53:30:11:85:3b:e0:41:15:91:0d:ef:7e:5c:79:44:30:62:
96:93:32:e9:3c:e9:a2:58:09:20:d7:da:ce:be:e5:cf:99:3e:
5c:c2:ac:67:a4:7d:b9:07:0e:c6:64:fa:ff:0b:5c:fb:b7:0a:
8f:81:9f:a4:ef:76:2d:2b:cc:ac:3a:14:e1:08:57:ca:ba:3b:
43:73:ad:85:e5:8f:1a:6b:a8:3e:2f:16:f2:7f:1c:8d:d1:84:
c1:11:5d:83:06:bb:99:9b:39:86:d1:86:cd:e4:16:ce:0d:d7:
d9:8c:6b:8e:29:fc:7c:fb:02:ea:4a:44:e5:35:97:5d:da:b7:
5e:3c:f7:9a:4d:c8:df:04:23:44:2d:e6:75:76:61:3c:e1:26:
61:ce:80:70:f6:36:df:03:b9:84:22:52:c2:b1:e8:6d:32:ff:
42:63:18:c9:83:ab:88:25:78:4b:66:9c:eb:05:0e:dc:f9:03:
74:67:bc:33:9d:52:fa:f5:07:38:45:77:03:b6:58:91:9a:c7:
42:1e:38:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:22 2026 by rpki-client