Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: 6+rZQtk5Mt5fgTkqv4IUuYaMgToFt72Ov6wz8EopWqQ=
Subject key identifier: 5C:80:61:DF:AE:A0:5E:6D:DE:87:D2:66:ED:59:93:C2:73:91:3F:9C
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 019D3A8ABBBBFA925B7EBEA9FD8A1DAEF5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 0D4C
Signing time: Sun 29 Mar 2026 17:01:03 +0000
Manifest this update: Sun 29 Mar 2026 17:01:03 +0000
Manifest next update: Mon 30 Mar 2026 17:01:03 +0000
Files and hashes: 1: KMvjq5V4Ksx01k9TjiIKtXCe5pA.roa (hash: 1beuOrWqdA+O+erqVb2gqs5tEOIpMoZMwqBtE6QzSbA=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: t6BBWqCOaDob1anTgXQJoyh5znx+/ff2gsZoyAlyguU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:bb:bb:fa:92:5b:7e:be:a9:fd:8a:1d:ae:f5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: Mar 29 17:01:03 2026 GMT
Not After : Mar 30 17:01:03 2026 GMT
Subject: CN=5c8061dfaea05e6dde87d266ed5993c273913f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:00:2a:41:31:b6:ca:97:ab:2b:31:46:85:
7a:7b:8f:29:0f:4e:85:d2:2c:a6:05:a2:37:83:67:
70:17:9e:29:3b:9e:71:f0:13:15:d0:87:3b:80:48:
8e:f4:50:11:fa:56:e5:6a:8b:62:ae:b8:0c:31:ce:
a7:70:cd:8c:be:d4:6f:b9:10:79:8a:71:04:10:54:
08:1b:f8:33:32:a5:6e:6b:1c:d6:41:df:b5:6b:1e:
48:d1:15:30:34:92:62:48:10:be:30:90:4e:2d:83:
f1:e7:ff:30:3b:f0:a8:66:c0:98:0e:ac:9e:05:d2:
dd:fd:0a:41:c6:b5:a1:7f:91:d9:39:cc:31:9e:27:
ea:6b:14:e0:87:cf:71:df:d6:69:da:b7:56:c5:1b:
34:bd:ae:6d:67:ca:a2:05:17:f1:a8:a9:8a:ff:07:
96:36:27:44:02:32:a6:b7:86:fb:1f:5c:13:12:d9:
3d:ea:ad:5b:e9:40:d1:f9:f5:8f:c8:da:ed:6e:15:
18:5a:6f:ff:95:68:0a:c8:a6:20:8c:61:08:e9:c7:
c1:f1:b6:cd:5f:ea:65:48:bc:14:25:ce:f9:24:f4:
ec:39:d3:9d:ed:58:c9:84:44:2d:11:91:6c:3c:14:
fc:a2:c5:5d:8f:28:f2:d5:b8:88:a9:3a:56:e2:53:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:80:61:DF:AE:A0:5E:6D:DE:87:D2:66:ED:59:93:C2:73:91:3F:9C
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5f:ca:25:4c:12:1f:b3:65:60:45:3a:3a:f4:8c:f0:d1:85:
4e:17:63:24:60:d0:f4:7e:b4:70:e9:c6:6f:01:08:09:66:76:
8d:3a:3e:08:69:92:8a:c3:7f:9d:c2:66:81:86:2e:26:b0:47:
30:90:34:da:57:0f:f3:cb:95:56:27:6e:2a:3a:8f:34:d2:36:
f4:1e:79:7d:0f:d2:3b:33:ca:64:56:a2:37:31:ac:d3:21:f4:
d0:5e:e5:6b:9d:b0:32:d8:54:3b:cc:e8:02:d7:19:4e:85:e3:
b7:cb:2b:cc:3e:b1:2c:2b:ee:2d:64:57:26:99:60:ed:db:c9:
f1:7e:63:24:19:28:a7:46:d6:bf:0a:7a:da:5e:1e:9d:9f:98:
40:6e:20:49:e2:43:8c:59:d0:7d:47:bb:1a:1e:e6:e4:16:9e:
3c:cf:06:7a:2a:75:3d:f2:25:9b:89:70:c1:2c:84:30:34:2f:
e5:88:3b:bc:2a:27:01:07:ba:6e:59:e6:0b:51:62:80:d1:e7:
6a:28:fb:de:8c:3e:d3:a9:91:ba:08:c5:04:d3:17:c6:cc:ae:
e1:f4:f3:09:1c:e5:85:14:a6:c9:09:11:fa:d0:04:16:25:f3:
1e:a1:da:62:a7:6d:d8:60:13:63:0f:ef:82:30:a4:55:21:92:
fd:a2:e1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:34:17 2026 by rpki-client