Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
File: dtS8ie60qcifEAXqrSJ8EyXtFWI.mft (raw, json)
Hash identifier: 0XEx8JOLcGsYxQeMpQZkZ6Xl0oSz37R0TpkvsYCmTTw=
Subject key identifier: 75:FD:37:BE:7E:0C:EF:B0:AA:F0:AD:A5:99:4B:54:D8:54:E1:A5:6C
Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
Certificate issuer: /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Certificate serial: 019DCE99BC2C4A3C26D6C35B816AF406DBED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
Manifest number: 0BF8
Signing time: Mon 27 Apr 2026 11:01:14 +0000
Manifest this update: Mon 27 Apr 2026 11:01:14 +0000
Manifest next update: Tue 28 Apr 2026 11:01:14 +0000
Files and hashes: 1: 6pce1ex-9vMX3hxl4PHX2_iHdWU.roa (hash: 3DNO1VoVFCiygl4uZClSk2LR5+gj2SCI6v1gbjKpRWE=)
2: 7uEWRZhuKrrLrbz68WNBnRtyak4.roa (hash: lE6tlE6mE+L1kYKEpT6B92Zv+jxsgj3WHZA7o8EE7DM=)
3: dtS8ie60qcifEAXqrSJ8EyXtFWI.crl (hash: h7qnuKWs4PriTK3pbBh1Y5swTax1dZEef5IXNHfGSYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:bc:2c:4a:3c:26:d6:c3:5b:81:6a:f4:06:db:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Validity
Not Before: Apr 27 11:01:14 2026 GMT
Not After : Apr 28 11:01:14 2026 GMT
Subject: CN=75fd37be7e0cefb0aaf0ada5994b54d854e1a56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c0:8c:2e:79:31:4b:c8:4c:8f:6f:25:7c:4c:
85:b0:cd:d3:95:91:f7:72:7d:d5:bf:1d:3a:bc:94:
0b:71:3a:c7:e0:8e:9c:c2:08:76:f0:90:55:53:a5:
2b:31:c6:2c:bc:4c:b9:89:cb:a5:a6:56:cc:f0:11:
69:fd:ae:3e:b2:cd:9e:28:67:af:e7:84:10:78:2b:
c9:f8:c7:fd:fc:d9:37:d5:0a:78:a4:ee:f3:1b:54:
86:4d:ad:0b:b5:bd:e7:1c:dd:bf:63:99:1b:01:2d:
7e:11:9d:cf:04:1e:62:b0:c0:ff:9b:9c:7a:39:59:
ac:de:09:24:85:d9:b0:ac:68:b3:cc:e3:e2:05:74:
0b:90:6a:28:f1:55:59:dd:e6:d4:63:32:4a:48:21:
7c:92:23:82:7d:32:2f:37:80:37:a1:18:96:24:33:
c6:ee:4c:b6:70:eb:99:fb:70:52:eb:e4:9e:0e:ae:
da:29:ae:3b:45:ab:44:fb:5e:de:e4:59:da:39:4f:
1b:90:f6:f2:0e:63:84:33:4e:17:ab:86:48:77:ae:
85:d4:41:ec:31:ff:be:07:da:5e:9c:44:43:02:6f:
a1:4d:d6:f8:0e:23:78:c5:56:e7:8c:68:61:09:b2:
1b:34:92:16:f5:c8:4d:e2:45:74:36:81:26:f3:60:
f2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FD:37:BE:7E:0C:EF:B0:AA:F0:AD:A5:99:4B:54:D8:54:E1:A5:6C
X509v3 Authority Key Identifier:
keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:10:10:d9:0c:67:e1:10:b7:d2:18:4a:f9:c7:0a:f8:07:45:
d4:5f:4c:d4:c0:23:d8:e7:5f:b3:d6:1a:2c:a7:6d:9a:fa:7f:
d4:25:e4:27:77:a8:4a:7c:cf:a9:60:98:2c:90:59:27:37:66:
2d:62:d4:ec:95:d6:3c:82:d5:a4:25:20:5c:4d:d5:59:84:69:
8f:13:d9:b9:0a:8b:85:2f:84:71:94:e6:96:ba:68:2b:85:ad:
d8:97:4b:68:21:61:14:e8:b3:bb:14:7a:85:68:06:57:38:26:
c2:7c:8b:ac:ed:d2:77:dc:cd:00:6c:43:2c:5a:37:d9:27:70:
f2:19:38:03:37:bb:48:40:4a:a8:2b:78:0d:64:6f:01:7c:91:
34:09:b7:d0:b4:e6:85:4b:54:34:34:f1:c4:3e:53:16:3c:62:
66:7b:b1:83:1b:ff:75:8e:a4:5d:f2:13:41:1c:f4:f4:81:52:
89:89:bd:83:d6:50:d7:2c:72:8d:ea:36:cd:ac:69:30:ef:42:
cb:ec:13:e6:12:4c:b0:cd:89:98:0c:d4:9a:d7:d5:b5:6b:8e:
db:64:e4:58:9c:e7:fe:91:78:05:99:d4:bb:8c:23:11:f1:e5:
6b:8e:19:6d:0c:b3:e6:53:d4:c5:b9:4c:c5:95:6e:4d:7e:df:
26:fa:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:49 2026 by rpki-client