Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: q5aJU6O5BRwEVReSuRWzysxKP4Iz6Wm0BNk+MnA69Oc=
Subject key identifier: 72:95:4A:3D:3E:A7:9F:38:80:28:FE:58:E8:B0:0E:BB:5A:32:3A:96
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 019D38663372DD956F16DAAD553A4F406492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 152D
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: Eo1NJk6prJ5799sOGWCd+yzsMPyd4RaeC5Ldi06Vd2E=)
2: iYtloRWl9kFypd8JJUfmPgfj4cA.roa (hash: S73CmXUZ6HVY4mwA83JVTETkq549rHQpfRMzqNjQiJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:33:72:dd:95:6f:16:da:ad:55:3a:4f:40:64:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=72954a3d3ea79f388028fe58e8b00ebb5a323a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:61:c4:e0:43:5b:af:01:d0:45:16:ff:e8:
09:84:82:0c:c9:8f:c8:92:45:cb:54:30:79:26:2d:
1e:30:16:bf:44:09:61:43:6c:a4:f6:ec:34:7d:ea:
d4:b4:f5:d6:28:81:e1:fc:4f:38:45:6c:1f:90:b6:
60:3e:5c:67:2a:24:7c:84:27:d3:d7:55:0c:cd:35:
f9:16:18:52:72:ee:a2:1a:1b:d1:65:ba:ce:a0:bb:
77:1e:4d:30:61:5b:0c:ec:62:8e:c2:80:a6:dc:80:
3d:d8:01:95:be:6f:af:d3:d6:ae:bd:82:de:a2:b8:
f8:2c:d9:ec:f6:fd:85:92:cf:eb:50:be:be:6c:94:
8d:2b:8f:70:0f:77:7f:2d:9b:7f:67:95:3e:51:4b:
cb:fd:72:0e:d9:c6:07:bd:43:0e:9c:52:07:71:10:
54:02:12:2e:b7:ea:d3:3e:05:0e:18:3f:6a:e2:09:
66:53:af:7e:05:2b:de:93:65:3e:eb:f5:a6:b8:99:
b9:0c:5b:ec:d2:cc:71:e6:50:c6:60:fb:13:18:e0:
bc:0f:54:5e:7f:7c:a0:84:c9:77:9f:eb:0e:70:33:
c2:f9:2e:21:fa:2c:02:28:1f:a4:b0:de:8a:0b:0e:
7c:1e:10:ad:13:d6:55:47:34:58:66:58:d1:c5:82:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:95:4A:3D:3E:A7:9F:38:80:28:FE:58:E8:B0:0E:BB:5A:32:3A:96
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:37:0b:51:64:57:10:9b:b3:3e:82:53:9d:d7:d0:a0:fd:fc:
f4:0e:67:8c:91:2f:0c:6f:38:d1:dc:80:0a:18:58:ae:ea:df:
41:57:7d:e2:ce:ff:86:33:07:d9:eb:36:6e:5c:85:9a:85:d3:
20:c0:26:46:fe:6d:f7:84:fc:69:97:41:7b:d2:7a:6e:7f:a3:
fc:f7:23:9a:86:12:27:3f:7c:b7:8a:f7:3f:0d:db:28:80:59:
6b:93:40:e2:fb:67:12:9e:d6:c9:86:c3:a2:0b:40:b2:d9:10:
8d:7e:d5:c6:4b:7e:68:ed:28:da:96:9a:0d:09:59:d4:3e:5e:
75:11:58:16:49:92:85:14:b1:2e:d1:a8:0c:79:0a:ca:16:2f:
a8:8f:07:c7:cd:92:59:63:2d:28:96:1a:42:f9:92:2f:fd:35:
2f:0e:de:9d:4f:83:6e:81:66:39:38:2a:41:b6:d0:61:09:86:
fc:4f:8d:86:30:e4:00:4a:35:89:66:58:74:d6:64:3d:2b:c3:
4d:d6:af:ea:c1:3d:bb:fd:ba:f2:1c:26:2e:82:76:c3:16:d9:
09:66:69:10:aa:10:ee:09:f6:10:28:65:0f:e2:d5:01:5e:f4:
12:de:d0:3d:ce:d6:b0:1f:48:b6:8c:17:00:88:9c:d0:15:62:
0b:ed:13:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:01 2026 by rpki-client