Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
File: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft (raw, json)
Hash identifier: 9F4+LaH9YhqUSvxtKIKTX6ai0MCEULOQq6CuGFMQoI8=
Subject key identifier: AB:41:25:56:B8:25:13:0D:CB:35:C1:25:52:EB:4E:39:44:5B:20:0E
Authority key identifier: 76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
Certificate issuer: /CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Certificate serial: 019D37C0F900B138B4B0ECF7F09E01CD3D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
Manifest number: 04FD
Signing time: Sun 29 Mar 2026 04:01:26 +0000
Manifest this update: Sun 29 Mar 2026 04:01:26 +0000
Manifest next update: Mon 30 Mar 2026 04:01:26 +0000
Files and hashes: 1: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl (hash: NzXPN4EmQt7p2NixYtAclECw9MkPRy01Jag3TDXF5bg=)
2: kmwS9zp0FNoIdCYHmD7lEmcie3Q.roa (hash: dnAyHkLRkKFButzzN0BFh8XkXJNa+fP4jBji3sBqddo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f9:00:b1:38:b4:b0:ec:f7:f0:9e:01:cd:3d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Validity
Not Before: Mar 29 04:01:26 2026 GMT
Not After : Mar 30 04:01:26 2026 GMT
Subject: CN=ab412556b825130dcb35c12552eb4e39445b200e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:5a:fc:0a:07:6d:06:09:1e:c7:bf:75:86:
ee:a4:1e:6a:91:79:3e:ad:e6:a4:11:52:4f:f6:a5:
61:99:ed:85:bb:8e:27:61:ea:14:2a:d5:ad:33:15:
a5:9f:be:99:0c:26:d7:57:ac:bf:a9:9b:30:18:78:
2e:6a:25:96:fb:eb:51:ca:86:31:4d:f3:80:b8:7d:
29:a2:73:d6:a8:dd:20:10:03:78:3e:71:31:4d:6e:
40:f2:de:bc:d6:1c:9a:49:b1:cc:cb:25:27:ea:f4:
29:92:b8:c2:9a:77:89:a3:1e:70:ba:0b:c7:82:8f:
16:76:b9:7a:6f:e7:ed:ed:80:08:24:39:bb:72:ba:
6a:48:d2:8b:6b:63:1a:54:c5:55:53:47:62:43:ad:
0e:c4:d7:8c:ee:77:a5:e1:eb:81:90:2d:a8:37:6d:
d4:23:84:c9:73:11:5c:91:e8:5c:70:92:1c:db:ad:
0c:84:be:cd:a0:98:d0:4f:3e:93:28:ca:7d:92:9d:
03:7e:1b:2c:44:9d:57:d9:3d:e7:d7:27:d3:0b:a7:
7e:2e:59:41:6a:1f:bf:b2:6f:6a:b5:4e:f8:7a:48:
6a:13:44:93:22:fb:7b:09:60:ce:b3:25:9e:5f:ae:
10:55:cb:5a:fa:1a:47:41:b8:c9:2e:b2:18:36:c4:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:41:25:56:B8:25:13:0D:CB:35:C1:25:52:EB:4E:39:44:5B:20:0E
X509v3 Authority Key Identifier:
keyid:76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ed:c2:41:70:60:20:71:da:d2:fe:d7:fd:67:80:68:6d:45:
1f:51:ca:e2:6b:e8:82:82:33:ff:a6:e4:66:f1:d0:2c:51:5c:
ae:85:54:c0:b3:d7:8c:64:43:77:c2:0f:f3:2a:e5:93:ad:5c:
09:fd:82:3d:30:5e:e5:26:57:08:03:f2:7c:53:5d:42:03:2a:
ec:63:ff:c7:01:00:70:e6:e2:f3:ff:a3:00:05:95:0f:7f:45:
71:22:56:37:5f:dc:26:dd:1e:db:38:34:44:10:66:b6:76:51:
2d:a1:ab:be:39:c3:45:a2:d1:58:59:0c:0b:d7:a5:0c:79:96:
08:0c:65:fb:c8:d9:05:84:80:f7:7d:0e:4e:15:85:eb:1b:b2:
5a:8a:ae:26:1a:b1:f2:62:a9:37:ad:3b:7d:38:46:2d:92:f8:
b6:c3:17:19:01:73:75:ec:5d:f8:8b:26:c6:fe:27:39:81:be:
5c:9f:ca:bc:8a:68:d9:26:1a:48:c2:09:23:1e:ee:e6:80:7e:
88:9e:c2:fb:bc:4e:ef:e4:f8:b2:fa:ff:47:86:91:70:e1:43:
59:8a:4f:d3:5f:d9:31:3f:c4:ef:2c:f9:db:6c:e5:5d:88:35:
a6:38:ce:e0:1c:84:08:23:84:de:6b:2c:35:1e:30:fb:c8:24:
45:31:b9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:10 2026 by rpki-client