Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
File: DfDWLe46FKBuUrfveggwM42dd1E.mft (raw, json)
Hash identifier: eh2kX9+x3mbqWYke4a73SD+Z/Fsr3RvzAMFC84AkrDQ=
Subject key identifier: 77:29:A3:66:87:67:56:CD:BC:F0:77:17:2C:14:0C:46:DE:B6:49:C6
Authority key identifier: 0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
Certificate issuer: /CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Certificate serial: 019D37F7007FD187B61EEA921D6C9AD39F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
Manifest number: C7
Signing time: Sun 29 Mar 2026 05:00:27 +0000
Manifest this update: Sun 29 Mar 2026 05:00:27 +0000
Manifest next update: Mon 30 Mar 2026 05:00:27 +0000
Files and hashes: 1: DfDWLe46FKBuUrfveggwM42dd1E.crl (hash: U94/BuioKwH/Zpb4rQGlHWDMdWzlu13JX28+2bd4d+M=)
2: ukKanfspjPtogwslBOvKVuFlnzU.roa (hash: VJCtLd80BTyZ1jJxvamfRrMpjXu4ufEwo/wpl1CsYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:00:7f:d1:87:b6:1e:ea:92:1d:6c:9a:d3:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Validity
Not Before: Mar 29 05:00:27 2026 GMT
Not After : Mar 30 05:00:27 2026 GMT
Subject: CN=7729a366876756cdbcf077172c140c46deb649c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:a6:eb:d7:be:fb:de:c2:b4:c2:a6:b4:bc:
70:aa:55:4a:46:00:9f:c1:68:ae:84:56:08:eb:cb:
1c:31:9f:2d:c8:c4:7b:85:84:da:86:c9:72:65:15:
fb:b9:1d:ea:61:26:96:66:90:4c:e1:bc:18:06:e0:
70:62:b2:ab:78:d8:e8:14:50:df:93:3b:29:c0:9d:
0d:05:a0:57:38:ba:06:d3:92:72:6a:3c:cc:7b:7b:
0a:af:09:07:92:79:b3:69:72:22:ec:c0:73:6a:ef:
c9:55:af:f5:17:72:b0:cf:03:cc:8f:29:a0:67:3d:
11:77:40:c3:fc:d6:5f:6e:50:20:6b:25:9a:0e:5a:
8a:72:41:ba:9b:19:bc:de:7d:06:52:a6:70:4e:46:
97:80:a6:cb:fb:75:04:d2:d9:e1:68:d3:b9:f1:30:
13:ce:71:19:3b:67:19:c6:0a:fb:53:76:81:43:42:
b7:80:b6:fe:22:3c:92:11:5b:69:3c:be:45:1e:b0:
71:eb:5c:97:8c:46:30:4f:42:7d:d0:57:9b:70:fd:
bf:5e:bf:46:8a:cc:33:47:19:55:78:7f:52:79:cf:
52:ea:3e:04:3f:79:a6:60:9d:b6:50:01:ca:10:93:
7b:26:6f:d1:f7:66:a6:ce:28:0f:34:d9:b8:12:4f:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:29:A3:66:87:67:56:CD:BC:F0:77:17:2C:14:0C:46:DE:B6:49:C6
X509v3 Authority Key Identifier:
keyid:0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cd:2b:d3:0c:7d:5b:8d:78:14:75:c8:bf:2a:29:c7:4c:ad:
93:53:8a:74:3d:59:6c:9e:d8:7d:a3:dd:fa:d9:93:05:28:12:
56:0d:6a:b2:8d:2e:22:3d:b6:1b:a2:d1:99:e5:97:10:d5:ad:
0a:4d:41:46:aa:74:e2:35:06:8a:6c:40:fa:8b:b0:d1:51:2c:
b1:87:f6:da:5e:f7:fd:bb:0b:68:59:7d:2c:4b:d9:78:27:bd:
1b:07:69:63:f9:21:35:ad:d7:b6:3c:2c:fc:2c:75:b2:f3:a4:
06:82:b2:f3:80:91:ce:2a:91:5c:e6:02:64:45:5a:d1:6b:a9:
25:ce:99:3d:40:33:0a:a9:5e:9e:61:b4:41:8c:5a:8f:0a:33:
b3:18:fa:39:4f:78:db:6e:ad:69:36:77:00:c5:4f:7c:a7:9a:
b8:49:e1:0b:a5:22:2b:fd:77:a1:19:e6:1f:6a:58:cb:bc:da:
d1:db:92:9c:93:d1:71:82:4a:8d:3c:0d:88:5b:55:03:91:d3:
1b:44:71:16:ed:64:5c:f7:f4:dd:58:2f:90:e2:e9:a4:b6:ed:
95:4d:38:1f:f7:2e:24:f7:6d:aa:8d:85:a1:08:c8:72:62:da:
23:31:a0:54:fe:a4:24:74:f3:24:8c:01:72:cf:3e:5a:39:52:
7b:58:a9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:06 2026 by rpki-client