Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: eUJNxyE4jgTDEBbPfRoYOp3Fte8mn8E644yzkXVD3Ig=
Subject key identifier: B8:F1:4A:1D:FB:79:AA:12:5C:DE:C9:CB:45:98:2A:5A:B6:6B:E4:53
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 019D51EE66E030A398B5B9B61F9A2AC77FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 189E
Signing time: Fri 03 Apr 2026 06:01:11 +0000
Manifest this update: Fri 03 Apr 2026 06:01:11 +0000
Manifest next update: Sat 04 Apr 2026 06:01:11 +0000
Files and hashes: 1: BzyRKVh8G6MxV92pq1WYXw5su3Y.asa (hash: 3hX1G/8KfCcJykl9PaVXJ9wMH1P2QICFRRtGllgYDUo=)
2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: loxBiotLogIuHz3xZCwPX7ZqW3eOlQnwS6LoXUExv1E=)
3: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (hash: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Apr 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:51:ee:66:e0:30:a3:98:b5:b9:b6:1f:9a:2a:c7:7f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Apr 3 06:01:11 2026 GMT
Not After : Apr 4 06:01:11 2026 GMT
Subject: CN=b8f14a1dfb79aa125cdec9cb45982a5ab66be453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:78:8c:1d:75:b5:c0:16:63:2e:54:0b:95:
5a:5d:d1:c3:7d:5e:a4:20:b6:53:27:7e:4f:3c:3a:
01:d0:80:43:f5:e5:af:9d:b5:8e:cc:c8:a4:44:ff:
11:b1:78:95:d4:3c:43:a9:95:96:df:8c:e6:d8:cf:
c8:52:f1:1e:ad:5a:a0:c6:4c:3e:36:11:72:33:87:
6b:1d:cb:5b:5e:3b:dd:6d:af:36:47:3a:69:92:c6:
98:77:d6:1e:16:20:4e:33:80:60:c3:d1:d8:2a:82:
8e:2a:1c:44:0d:95:d9:60:3f:69:66:a1:aa:44:5a:
b8:23:37:41:3e:64:75:70:f5:6f:5d:ea:f4:61:fd:
4b:5d:d6:58:07:50:fb:87:55:b7:48:f5:df:2a:36:
8e:58:d3:6e:dc:ba:e5:8c:11:8a:e5:0a:61:75:6c:
80:40:fb:c9:a1:f0:f9:86:d7:38:c0:9b:06:26:c0:
ad:ed:1d:e2:12:6c:73:23:48:98:73:89:f0:67:d1:
1f:91:90:f5:b3:b6:2b:4b:7c:15:29:67:58:2e:2a:
f1:4c:7c:2f:43:1d:79:93:57:b3:49:42:68:1a:4d:
8b:52:17:66:a2:a7:dd:b2:82:1d:a7:75:9a:e8:01:
4c:d3:6d:1f:1c:e6:d7:12:84:1f:6e:94:3b:46:6e:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F1:4A:1D:FB:79:AA:12:5C:DE:C9:CB:45:98:2A:5A:B6:6B:E4:53
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:12:b5:d1:5c:44:6b:cb:d7:50:75:03:79:c3:ed:31:b4:c6:
ec:ae:19:49:06:03:c3:95:0e:8a:03:5f:ea:4a:db:f1:9b:b6:
b7:af:0b:50:f1:e7:56:98:e4:79:88:75:f5:ef:14:95:53:26:
06:e4:88:ff:ca:a3:3d:ff:52:42:5d:e1:0f:44:fb:d9:0b:2e:
81:0e:8a:bd:e4:b1:91:29:c3:8c:e1:dd:4e:d7:eb:7d:a8:b3:
bd:d8:5e:d3:a3:82:01:51:df:85:1a:f3:62:da:4a:00:54:aa:
4e:ff:c6:c7:b0:a5:ef:0f:d8:6d:c0:6b:25:de:4b:44:be:4f:
b8:81:0a:50:0e:4a:71:a5:a0:da:22:9b:dc:0a:38:b5:9f:08:
3d:d7:ed:d8:57:12:70:19:f4:df:b9:1b:75:a9:73:96:0f:f7:
40:fe:da:4e:d4:41:50:55:13:3c:ce:33:f1:70:c0:27:91:db:
c2:08:c6:f8:af:ca:07:d1:8c:14:1b:fc:db:e5:ad:99:be:db:
f2:c3:e7:6a:76:10:63:9f:c7:60:a3:e3:7a:4b:7d:97:e0:7c:
c8:af:b1:c1:dd:7d:89:4f:3b:87:7a:37:ee:44:79:4f:b5:7f:
06:19:37:a1:9d:5e:7b:b7:7c:96:ec:ca:ae:5f:21:c7:1e:01:
3d:b5:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 09:17:30 2026 by rpki-client