Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
File: DVX6KmKDfbmv5EI-TBGelJmyG0M.mft (raw, json)
Hash identifier: JCQYCqEHpcM15KOitnghgWp+E1hLbTflk1xVu84KRi0=
Subject key identifier: B3:74:EB:C1:0C:07:E4:60:EA:D9:48:D6:88:DA:7B:8E:D9:43:AD:D8
Authority key identifier: 0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
Certificate issuer: /CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Certificate serial: 019D3A8AF622512129AF19D6D0704A88BAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
Manifest number: 09FB
Signing time: Sun 29 Mar 2026 17:01:18 +0000
Manifest this update: Sun 29 Mar 2026 17:01:18 +0000
Manifest next update: Mon 30 Mar 2026 17:01:18 +0000
Files and hashes: 1: DVX6KmKDfbmv5EI-TBGelJmyG0M.crl (hash: JJXg2h3unF8KOEBBYUYOfuIFvbitTj0MW0XkItU3sK0=)
2: HIeW7jOEPndBeoT23uEj81ZTZBg.roa (hash: JJnVSxNA1ixWdqqkWmZ7PhO+qpLJouZei+s+CRfBSYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:f6:22:51:21:29:af:19:d6:d0:70:4a:88:ba:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Validity
Not Before: Mar 29 17:01:18 2026 GMT
Not After : Mar 30 17:01:18 2026 GMT
Subject: CN=b374ebc10c07e460ead948d688da7b8ed943add8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:8a:98:7e:23:ba:ca:3b:4c:a0:ad:84:a0:
31:05:62:fd:38:e4:bc:cb:4a:99:a6:e4:e8:0c:13:
73:86:4c:c0:60:6e:63:61:a3:f2:cf:c7:de:91:16:
e6:51:3a:f9:8a:3f:83:84:c0:34:45:e1:21:6b:c7:
ba:34:ab:5c:78:8e:26:d2:e7:db:f3:0b:b8:f2:d8:
93:6d:2b:a2:c8:60:6a:80:1c:3a:c8:3f:d5:e7:2e:
cf:67:4d:e7:85:d7:19:f5:9a:e0:d2:ad:6b:7d:9d:
a0:e5:fc:3c:88:85:70:7d:70:26:8e:32:a4:04:38:
60:fb:40:14:a6:a5:92:5c:04:90:82:7d:88:4c:e3:
78:74:e7:57:40:61:0d:de:70:e2:0a:05:6c:8b:65:
fd:fb:bd:0b:b8:ab:e1:4b:b7:3d:d0:77:64:65:cd:
c2:a7:6f:e4:b7:53:a5:96:a7:85:ad:ee:ca:6c:26:
c0:76:0c:5c:69:c4:6d:8e:1b:7e:0a:a2:c7:65:15:
d0:00:e8:cb:f2:b3:cd:1a:1e:61:aa:24:cf:29:82:
6c:2a:9a:60:a4:f4:60:2b:c7:a5:e1:e7:0e:15:4f:
8e:a0:c8:e0:85:87:71:c5:3c:b3:21:f4:56:88:55:
5d:73:c5:66:8b:3f:d0:6c:6e:d4:4b:94:cd:07:03:
43:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:74:EB:C1:0C:07:E4:60:EA:D9:48:D6:88:DA:7B:8E:D9:43:AD:D8
X509v3 Authority Key Identifier:
keyid:0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:07:a2:b2:ed:e9:13:c7:3f:0f:7e:b9:4e:f0:ba:61:75:e3:
25:dd:26:63:f7:8e:b7:f7:02:f3:02:a8:1b:03:69:f0:d2:8e:
18:4e:5d:0a:e8:1b:c7:3f:13:15:5f:f3:67:b0:30:ed:15:98:
4d:bd:87:60:1c:55:85:06:3f:55:bf:c2:c7:16:bc:0d:90:2b:
af:14:85:27:71:5f:19:aa:35:38:b1:d7:c5:d5:1c:35:c2:5b:
30:97:a9:4b:ce:92:91:58:7a:46:47:a5:fc:c4:cd:0a:51:3f:
b5:c4:94:17:b1:d9:a0:0f:18:67:38:ca:51:1f:8e:6b:64:d5:
55:b6:58:9c:59:4e:2c:d0:4b:41:77:3a:ff:2c:69:7f:21:3f:
0d:a5:da:92:31:fb:23:15:a7:cc:39:2d:04:cd:ed:5f:67:ff:
b7:d0:b2:ce:9b:82:2f:28:0d:f2:46:eb:c9:2e:19:5c:83:c7:
0f:0d:96:01:4b:64:ae:0d:2a:ba:0a:65:47:5a:c6:5e:b2:e9:
43:b1:ab:fe:dd:15:4e:5d:e1:af:7c:d4:23:de:78:e9:b5:70:
64:41:ee:26:e4:26:7a:ff:7f:16:b1:53:0d:9f:99:5d:1f:b1:
0f:bc:8c:07:c7:2a:91:23:a9:73:eb:a5:f1:49:7d:9b:d2:ad:
15:ee:8c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:13 2026 by rpki-client