Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
File: dIZPUCPsYmPvnxb5AYf18oBh0RU.mft (raw, json)
Hash identifier: jjTOnyrWICzQTeSTfa+6Jy0Rsc3GrGwU1xY8QmNC4O0=
Subject key identifier: D0:E8:D4:CA:FE:91:0A:D3:24:ED:D1:C3:87:01:18:7A:55:22:37:B0
Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
Certificate issuer: /CN=74864f5023ec6263ef9f16f90187f5f28061d115
Certificate serial: 019D37899A62DC49A1C16206533E9732D05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
Manifest number: 0E7C
Signing time: Sun 29 Mar 2026 03:00:57 +0000
Manifest this update: Sun 29 Mar 2026 03:00:57 +0000
Manifest next update: Mon 30 Mar 2026 03:00:57 +0000
Files and hashes: 1: Tk-54jiMCl3pRob8Ol0GyqafcTo.roa (hash: ogGPBYJpK3ICA3MgJGI7aFtZAb3lcTgOcAes1dNC4Q8=)
2: dIZPUCPsYmPvnxb5AYf18oBh0RU.crl (hash: rTcOAapEhmkWObh31XV6B1TRjvpskY3IXQYkEaAC0/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:9a:62:dc:49:a1:c1:62:06:53:3e:97:32:d0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115
Validity
Not Before: Mar 29 03:00:57 2026 GMT
Not After : Mar 30 03:00:57 2026 GMT
Subject: CN=d0e8d4cafe910ad324edd1c38701187a552237b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:45:c3:f8:f1:56:b4:c0:a9:d7:d1:2c:65:
e2:63:26:d5:1c:4b:ed:c2:93:ec:bf:43:bd:4b:47:
6a:ec:6a:f4:26:69:ed:97:f1:86:16:d0:2d:00:ba:
6d:69:05:61:0d:af:39:98:c8:3f:26:4d:99:f2:5f:
19:7f:11:18:fa:9a:7c:be:23:d1:a3:39:0b:21:25:
75:00:e7:de:65:5c:d7:1f:6a:f9:d8:ec:80:23:94:
c1:f4:4b:48:37:cc:8c:a9:83:ce:ce:3e:35:0c:bd:
8c:70:ca:87:ef:6c:d2:56:ec:88:bb:e3:e8:e2:ba:
85:12:41:fd:ee:0b:4b:fa:1d:25:90:a7:2d:b7:d8:
18:58:2b:7c:b1:cf:fd:64:8b:32:f0:15:63:52:1a:
26:24:e1:0e:5d:b1:08:2b:83:a1:a6:5c:6f:47:08:
ff:34:bf:41:cb:a2:8c:dc:89:45:a7:75:a8:c2:8d:
a0:3c:5f:d1:d5:72:24:70:74:a4:1b:63:88:05:7e:
c7:7f:14:b1:3a:3f:5b:59:0c:a4:f8:30:20:4d:ea:
d3:e3:2d:3c:25:95:b8:d2:79:58:c0:f2:ba:c5:c7:
94:17:b8:dc:4c:37:5c:ae:be:e3:a5:37:9d:62:40:
a5:3b:26:d4:db:4e:5c:3f:cc:a4:ca:e7:84:c5:4d:
5f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E8:D4:CA:FE:91:0A:D3:24:ED:D1:C3:87:01:18:7A:55:22:37:B0
X509v3 Authority Key Identifier:
keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c9:a7:8c:5d:b2:2f:c5:3e:49:05:10:be:b1:09:ce:7c:dd:
ca:ed:70:f3:2a:54:90:a3:43:c2:7a:17:25:89:78:45:9e:c2:
67:14:1a:c6:f8:1e:e3:b1:e8:9e:c4:de:86:bf:e8:aa:b8:cd:
b4:db:75:72:74:fc:39:ec:e1:e7:ca:9a:a7:49:ab:f5:18:19:
f6:a2:f2:4c:3a:51:30:62:09:2c:25:a9:2d:67:e9:2d:e1:d0:
c5:03:be:85:c3:86:70:51:8f:59:71:54:5e:9d:83:98:ee:f2:
99:9d:d8:1f:bf:27:25:04:be:13:21:ef:93:05:0e:88:6d:94:
4b:ce:8a:12:f4:0c:9a:b1:69:b7:58:cf:fe:37:2b:6b:e1:cd:
9e:4f:fe:ab:e4:a5:39:40:d5:34:15:23:98:68:64:f3:4f:1c:
00:6c:33:3e:ba:66:ce:c2:49:80:0b:c2:45:a1:bb:d8:a1:36:
0c:10:ca:40:02:d1:d8:4f:aa:2f:99:f3:2e:5f:29:b0:c8:78:
88:de:57:d2:88:bd:6b:cf:38:be:ad:c8:54:a4:51:d0:e2:c0:
0b:74:b6:38:32:c7:fc:a5:6d:5c:88:e6:85:38:43:8a:b1:bb:
c7:2c:64:9f:72:ea:7e:9b:50:11:07:3e:9f:a2:36:5c:d8:62:
38:9e:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:47 2026 by rpki-client