Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: Ev2lqkh9lD1LerP0bN3vuLmPDKY2HCxC4TEFAvuUpD8=
Subject key identifier: 1C:D2:30:3E:64:7D:C2:87:D7:DC:34:6D:D7:9F:E8:3C:10:DD:30:03
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 019D382E5D48973275471F0334650B91868F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:55 +0000
Manifest this update: Sun 29 Mar 2026 06:00:55 +0000
Manifest next update: Mon 30 Mar 2026 06:00:55 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: pA6eMIdTn7xhiET3O/MhY9xv9tp+/Xf49PooLLubObU=)
2: xOh8rPz0fCu_Rdtl4qREsx0riTQ.roa (hash: 51BbJDIoI2b7sQWeISHrMYtf3JjGMl3uwds3WWJ64wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:5d:48:97:32:75:47:1f:03:34:65:0b:91:86:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Mar 29 06:00:55 2026 GMT
Not After : Mar 30 06:00:55 2026 GMT
Subject: CN=1cd2303e647dc287d7dc346dd79fe83c10dd3003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:2c:e1:58:81:bf:63:8f:c6:29:06:60:36:
c1:b8:06:e0:f1:36:9d:6e:c2:f2:05:fb:e8:1f:6a:
1d:15:f4:73:45:e2:db:99:8d:85:82:40:cb:a6:16:
70:b9:a1:f0:06:ea:31:fb:56:c5:e2:58:4b:2c:01:
57:7d:55:ab:7b:ab:bc:39:4a:65:77:ad:a2:0f:00:
9a:b0:c9:60:19:e9:1c:7b:da:b6:d2:3c:32:c7:52:
0e:7a:a2:69:62:10:ac:5f:85:bb:c2:4e:f0:99:be:
97:e0:95:bd:c6:99:f0:1c:ef:32:d4:ab:65:89:ac:
2b:09:84:e4:cb:ce:34:cf:f0:98:60:fc:2a:2d:b9:
a6:85:6a:b3:2d:db:4c:32:94:fe:b0:13:93:6d:f0:
07:4c:a5:76:18:fd:cb:fc:7d:df:04:1b:36:87:1e:
ad:74:a8:d2:28:18:81:38:18:38:35:f8:d9:2a:0b:
6c:be:88:86:27:9f:63:25:12:f4:cd:16:6b:c3:a9:
63:e7:be:ee:9e:f2:43:83:78:9f:ea:26:f8:79:46:
37:1c:90:6a:c8:c4:c1:f4:b6:5a:3f:fb:1c:83:89:
a2:7d:c7:74:a3:76:a0:e1:fa:83:00:a8:a2:a8:f0:
56:bd:bd:12:8a:1a:9a:60:41:ce:88:a6:0c:a2:5c:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D2:30:3E:64:7D:C2:87:D7:DC:34:6D:D7:9F:E8:3C:10:DD:30:03
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:70:4c:ab:64:7b:73:a3:6e:fd:ff:52:dd:24:68:8d:56:9c:
fa:3b:18:65:ab:55:37:4e:28:d7:11:e7:a7:82:c8:5b:87:8b:
60:3a:44:0f:87:3c:96:b1:c6:ff:26:b1:79:6e:c1:da:29:c3:
0f:f1:eb:20:11:a5:46:67:52:06:ff:16:e9:1f:c3:b0:33:e2:
ce:15:46:70:8f:0c:fe:ff:22:8b:1f:c0:5e:fb:00:98:e3:dd:
a5:33:ce:c8:56:ef:1e:d8:03:6b:f9:2b:cb:c0:70:93:81:56:
4f:56:23:34:89:25:6f:00:19:f0:e1:96:9f:66:7f:bb:0c:5e:
e1:29:b4:66:cf:04:f6:4c:66:85:92:fc:db:9b:71:30:16:c5:
b9:7f:2d:13:d4:f1:1a:ff:3e:be:0e:cc:30:3b:18:95:1d:d9:
f3:b3:ec:55:b1:27:21:42:31:90:e8:7b:90:74:f7:00:e9:cc:
3b:98:1e:99:8e:66:21:f9:2b:60:80:35:15:db:60:6b:ca:fc:
f8:e0:1c:57:07:90:2a:10:dc:f1:6d:65:c2:0d:ad:f9:2f:93:
57:f9:29:94:61:01:7a:de:3c:37:55:9c:23:f3:eb:0f:eb:23:
e4:4b:3f:4d:70:66:bd:69:97:1c:5a:9b:f6:87:ee:01:4b:5a:
3d:6a:a2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:37 2026 by rpki-client