Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
File: DkGjlotidBs200i-DSyRxdSxM6I.mft (raw, json)
Hash identifier: d0nrO1J5KU2Uid/Yr51F2Va62hsSpPLsY7XoIRkbBzI=
Subject key identifier: 26:BA:0D:A1:C4:DA:DD:F9:61:24:1B:D8:2D:7A:60:DC:35:99:06:E3
Authority key identifier: 0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
Certificate issuer: /CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Certificate serial: 019D37892EDDD4FA2332DDAFF9AB361FF006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:30 +0000
Manifest this update: Sun 29 Mar 2026 03:00:30 +0000
Manifest next update: Mon 30 Mar 2026 03:00:30 +0000
Files and hashes: 1: 8zauiXBaFMH5VLxzsSvMEUumaxQ.roa (hash: sJvy2vx8n7/hTOLyUNRFHLLiMRYWbPfkI+7/KsQidiw=)
2: DkGjlotidBs200i-DSyRxdSxM6I.crl (hash: Bj3ZiXpHODabZHrOvtfhX8YgAm0WS/e86vdkwsi6SHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:2e:dd:d4:fa:23:32:dd:af:f9:ab:36:1f:f0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Validity
Not Before: Mar 29 03:00:30 2026 GMT
Not After : Mar 30 03:00:30 2026 GMT
Subject: CN=26ba0da1c4daddf961241bd82d7a60dc359906e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:d5:4b:fd:4c:ee:4c:00:77:d2:59:8d:35:
9b:2b:9c:ec:e3:ba:57:7d:46:5f:47:5c:29:58:aa:
d6:46:49:b6:e9:d4:3d:39:1b:24:1e:6b:b7:77:70:
6f:39:7c:8e:ca:84:1b:af:c8:71:a0:02:6b:a1:6f:
c5:5d:86:85:40:60:8d:b7:19:c7:0b:84:84:28:86:
f0:91:21:23:e6:0d:93:02:1a:64:7b:50:2a:d4:95:
68:c2:5a:2c:5f:ac:a8:5d:cb:3b:ac:f9:42:3d:c2:
39:76:4f:7e:5c:f1:7f:60:ed:89:8a:cb:b5:00:66:
04:b2:b1:94:e3:cb:3a:93:8a:b3:4e:d9:4f:18:2a:
7f:10:51:c0:c1:f0:bc:41:7a:4f:23:1a:b4:75:ec:
3b:ce:04:e3:71:90:74:c8:cc:4a:4e:67:e7:65:d5:
ff:89:25:aa:ec:02:1b:25:a1:cc:d6:11:e6:42:fb:
b3:e6:30:4c:9c:df:88:52:20:21:41:c5:15:62:72:
7b:ff:d8:a3:3f:80:b7:b7:f5:b5:68:66:78:d6:49:
85:37:26:11:fc:65:42:ca:1a:74:ad:0c:1f:20:95:
f1:ab:e3:3a:7b:61:b6:65:97:70:57:a0:d9:03:c9:
35:8c:ea:ed:fd:ce:83:43:fd:ef:86:6b:c4:51:fa:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BA:0D:A1:C4:DA:DD:F9:61:24:1B:D8:2D:7A:60:DC:35:99:06:E3
X509v3 Authority Key Identifier:
keyid:0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:34:6a:45:71:a5:95:6d:f5:85:c6:a0:ed:29:2f:8d:e0:45:
a1:6c:7f:a1:9f:98:c1:9c:65:a3:0e:05:45:c1:31:a3:6e:3e:
eb:87:01:d0:6d:9c:a9:6b:fb:a0:68:79:bf:90:7e:ef:ec:58:
5c:8d:05:cb:28:66:89:b6:c4:15:25:4f:b8:23:3d:51:bc:84:
74:fd:d8:1a:9a:f9:84:84:60:08:d4:33:ee:f0:cf:08:5d:e8:
db:69:58:ab:1c:06:a3:34:41:37:7c:fb:06:fd:95:cc:3e:6a:
01:d3:a7:2d:0c:02:12:b8:a2:00:08:07:77:a3:49:6a:8e:63:
28:44:bc:8d:09:0f:ab:cf:53:56:b4:64:89:bd:a4:14:9f:19:
0e:67:4c:77:25:1e:dc:ed:ca:cb:02:1e:b1:8a:fd:05:2d:d1:
04:e5:4d:ff:54:2d:87:da:00:d1:99:02:9f:66:53:3e:1f:10:
b3:f4:a1:f6:7c:47:6a:7d:17:ee:2b:79:46:b8:73:21:8f:56:
9c:37:60:64:83:39:68:9b:bd:a2:36:60:9d:53:f0:33:ee:ce:
6b:3d:63:c3:1a:80:ca:68:68:68:aa:d4:36:7f:39:41:4b:37:
91:78:88:aa:9f:8d:bb:01:8b:5a:71:db:c3:ea:0c:1c:91:36:
2b:ca:4e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:10 2026 by rpki-client