Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier: WVNeDqooMdqj74uHvvGp86cBPjnULNP3ax+DIThk0Pk=
Subject key identifier: 88:36:E4:74:26:93:16:88:59:B8:38:4B:54:9C:75:92:53:BD:67:01
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 019D3752BF1534426C1FD24F5AD16A5AAE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number: 06A3
Signing time: Sun 29 Mar 2026 02:01:02 +0000
Manifest this update: Sun 29 Mar 2026 02:01:02 +0000
Manifest next update: Mon 30 Mar 2026 02:01:02 +0000
Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: x4bJYrq/7j8bwl0makPlUHFlONzCFQsBUH2Vw3qTfcA=)
2: q19_s0i5IT2dybooIUZ7ijzcNXc.roa (hash: mA9ozpHHNX60WKdi28wKCibVutGMEXZy4W8BO6NWgto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:bf:15:34:42:6c:1f:d2:4f:5a:d1:6a:5a:ae:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Mar 29 02:01:02 2026 GMT
Not After : Mar 30 02:01:02 2026 GMT
Subject: CN=8836e4742693168859b8384b549c759253bd6701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:0a:6d:d4:e1:32:26:bd:bb:13:a5:cc:db:
68:42:f4:fd:f9:3b:3c:16:cb:bd:5b:6a:6c:d9:7b:
29:08:dc:14:74:55:d9:c6:71:84:d2:6a:73:c8:d6:
59:20:5f:e9:f4:64:14:42:a4:26:4f:ca:62:bc:40:
90:9b:ce:48:cc:85:c8:11:29:1c:c3:9b:69:bf:2b:
03:e7:46:24:0c:db:08:64:a0:10:d5:6b:b3:e7:42:
e0:4e:b8:04:55:e4:7f:2c:5f:20:b1:16:30:8d:da:
61:26:f6:b7:17:bb:9e:c0:dc:fb:e1:cf:6b:d5:02:
f8:60:9a:08:50:d4:07:31:51:70:62:87:a9:35:0c:
5a:c2:af:04:16:00:f0:73:04:b0:6a:13:7f:a0:fd:
50:b2:14:f7:3d:d2:40:a9:ef:1d:bf:22:4a:dd:57:
0f:0d:07:d0:42:59:62:e0:c3:36:e9:fd:91:b3:43:
83:b4:15:31:22:c2:75:d5:4e:91:13:b2:68:ea:c8:
3c:29:2a:ae:a1:3e:7f:b6:ad:01:6e:04:4e:df:ec:
1b:ec:1e:37:b8:7c:04:85:d5:08:ec:e0:64:d9:7c:
37:e3:95:a9:e7:ec:1c:85:1e:8e:1d:8e:40:31:12:
1e:dd:72:59:3f:24:0e:5a:ed:04:5e:f7:66:a3:09:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:36:E4:74:26:93:16:88:59:B8:38:4B:54:9C:75:92:53:BD:67:01
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:02:58:90:5f:ab:62:29:4d:bd:2f:7d:9e:61:c8:26:f0:f6:
cf:c6:b4:98:f0:be:02:02:23:32:de:36:3a:a7:e0:16:d6:9b:
8f:0a:25:b3:8c:1c:31:e2:e0:18:e3:4b:c9:1f:7f:66:81:24:
98:51:79:cc:86:45:a5:e0:3d:b6:2c:22:cb:85:fa:f9:fc:a1:
bd:06:b8:b5:97:1a:18:5e:9f:65:fb:5b:2a:13:f2:34:f8:7a:
58:15:c1:c8:a1:7b:b6:71:78:b6:0b:c6:c1:a0:4a:57:77:08:
e6:16:3e:02:3c:63:82:54:50:5a:43:0c:36:34:4b:77:1e:e6:
21:68:84:13:d6:9a:d7:52:95:67:05:a8:dd:c2:b8:32:16:bc:
dc:25:94:1f:f8:e6:9e:db:0f:35:aa:4b:bc:f9:be:e6:60:14:
e6:d1:dd:b1:02:4f:0d:6b:7c:f0:57:92:45:e1:25:48:10:39:
ef:e0:bf:2f:85:8e:67:1a:9c:90:08:3e:4b:33:6b:38:5a:99:
22:73:e7:a8:3c:22:bf:39:a2:9c:58:d9:5e:47:ff:f9:5e:29:
a4:05:39:d3:3a:85:ab:ea:d5:59:f1:c4:c0:65:59:40:c9:48:
62:1f:08:9c:83:55:59:f3:09:db:3a:f6:a4:c8:59:0e:e1:6d:
0a:fb:ae:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:33 2026 by rpki-client