Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: /kGiPQgyerRhWWfTlzr8OZHZYStxMVg0UuinipTHe20=
Subject key identifier: DF:D0:51:DA:02:8C:0E:21:6C:35:96:A0:80:85:3E:27:9F:75:13:7C
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 019D39E553BDCCFC79DF90F6751356E17317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 13D4
Signing time: Sun 29 Mar 2026 14:00:23 +0000
Manifest this update: Sun 29 Mar 2026 14:00:23 +0000
Manifest next update: Mon 30 Mar 2026 14:00:23 +0000
Files and hashes: 1: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: a2xYcnpf5/EyQdBxPFVphaTOWSDfx4sQgAqn3CnKD04=)
2: yUw1rcOt6TgtCelm2VNWDvkzOK4.roa (hash: 5OTxcGZtOq1eyipgogSlqCsPUOaG4WknyJnVBJaz5Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:53:bd:cc:fc:79:df:90:f6:75:13:56:e1:73:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Mar 29 14:00:23 2026 GMT
Not After : Mar 30 14:00:23 2026 GMT
Subject: CN=dfd051da028c0e216c3596a080853e279f75137c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:59:ee:c7:a9:4a:7a:35:2e:4f:45:61:67:
3f:61:d9:74:60:a5:04:80:1e:22:0e:74:36:90:62:
3a:d6:66:2c:c2:87:39:04:0f:82:e0:b8:27:04:9d:
8f:36:d2:c9:ca:88:1f:c9:25:c6:f6:b6:e1:2d:1f:
b1:d1:aa:41:13:53:0e:e0:33:ad:84:d5:be:8d:03:
97:b1:85:f1:88:6d:27:b8:ac:ca:3f:51:73:a0:2b:
ff:9e:6f:40:eb:08:52:52:3c:8e:0a:35:5a:76:e9:
2d:20:53:33:d3:8f:d0:e0:26:95:68:1d:32:fa:fa:
6c:21:9d:04:1a:37:c2:5f:e2:7b:cb:e9:c1:df:da:
09:69:90:87:48:95:47:67:ea:51:ee:75:8b:9a:81:
df:c5:04:5b:ff:34:29:89:2f:4e:af:46:a2:96:c1:
87:ac:56:d1:e6:ea:e4:76:30:27:d6:1b:57:eb:21:
89:81:31:9c:e0:45:9f:70:c9:2d:b1:a7:bc:ac:f3:
fb:68:c9:54:5c:82:13:ae:4b:f3:b1:94:16:f7:b4:
1a:c5:02:96:e3:ba:ce:4b:9b:2f:b0:8a:b3:77:4e:
78:fb:e7:ce:7a:af:df:f5:fb:38:a5:06:59:1e:2f:
0e:f7:71:b7:d6:aa:67:77:4d:d8:a1:1c:58:5c:a6:
fd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D0:51:DA:02:8C:0E:21:6C:35:96:A0:80:85:3E:27:9F:75:13:7C
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6e:65:59:02:c9:08:ed:16:01:93:e4:43:9c:f1:ef:a9:64:
39:4b:bf:bc:88:f3:00:55:a4:84:3d:44:89:0c:be:47:eb:49:
46:b7:57:ff:d4:5e:1c:b0:a4:ae:3e:2f:a3:2e:56:bd:97:0c:
68:0b:f7:0d:86:b4:34:63:58:03:2e:fc:9e:7c:9a:e2:7a:5f:
2c:e8:c6:a2:54:bd:45:25:30:82:d7:d8:f5:f1:5f:90:89:c8:
5b:85:29:8a:a2:87:d3:7c:2f:b8:ba:72:4a:d2:25:3a:74:c8:
0c:95:3a:03:c6:24:64:4c:e3:0f:f1:51:a0:4d:e1:89:12:37:
88:7e:fa:2c:a0:ec:a9:22:9d:50:fc:7c:14:44:f8:1d:42:1c:
27:6f:f7:bc:06:09:56:b5:f1:56:cd:16:01:9c:ae:9b:86:24:
c2:c4:5a:d3:22:fc:72:fb:35:77:19:54:00:54:04:d0:0f:d9:
d0:3b:3c:0a:e0:ff:77:6b:70:80:5a:df:92:ce:ff:5d:0b:85:
95:1e:56:81:82:94:eb:8a:a2:93:0c:1d:e6:8d:9a:1c:38:5a:
51:10:0f:94:36:de:34:e9:54:4e:41:5e:cc:f5:93:08:30:f5:
9a:86:08:0f:68:32:8e:55:85:8f:e9:43:d6:df:af:ae:d5:df:
75:41:f5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:46 2026 by rpki-client