Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
File: dtS8ie60qcifEAXqrSJ8EyXtFWI.mft (raw, json)
Hash identifier: tyXPj4K3HpNJ+8hc7rzVyi/iS3RT8qa1Qz8IVuSTJ0M=
Subject key identifier: CB:DF:8E:B8:CE:1A:C8:C1:B4:7D:B4:B9:98:27:91:54:6F:32:13:55
Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
Certificate issuer: /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Certificate serial: 019CE4ECB53EF2A72D13F3E7C30C3DD44646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
Manifest number: 0B7F
Signing time: Fri 13 Mar 2026 02:00:43 +0000
Manifest this update: Fri 13 Mar 2026 02:00:43 +0000
Manifest next update: Sat 14 Mar 2026 02:00:43 +0000
Files and hashes: 1: 6pce1ex-9vMX3hxl4PHX2_iHdWU.roa (hash: 3DNO1VoVFCiygl4uZClSk2LR5+gj2SCI6v1gbjKpRWE=)
2: 7uEWRZhuKrrLrbz68WNBnRtyak4.roa (hash: lE6tlE6mE+L1kYKEpT6B92Zv+jxsgj3WHZA7o8EE7DM=)
3: dtS8ie60qcifEAXqrSJ8EyXtFWI.crl (hash: 4jzvukxvJBZPIdaQoUl0TT0zbZtwSC2iCnXWaAddfus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:b5:3e:f2:a7:2d:13:f3:e7:c3:0c:3d:d4:46:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Validity
Not Before: Mar 13 02:00:43 2026 GMT
Not After : Mar 14 02:00:43 2026 GMT
Subject: CN=cbdf8eb8ce1ac8c1b47db4b9982791546f321355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:76:31:d4:c1:e3:bb:3b:a2:56:31:91:f3:
6c:df:fd:77:37:54:d7:60:68:11:a7:4e:3d:b0:78:
19:3a:67:e4:fe:36:17:6e:5e:f5:c6:d2:87:0f:c5:
21:b6:52:4f:38:47:27:df:9f:5b:fa:d4:83:2c:a9:
a5:eb:b0:85:85:19:58:fe:0c:27:ce:a1:ed:6c:2a:
b1:51:5c:fe:6a:f6:e7:80:cd:e0:fe:0d:de:86:24:
8a:fc:58:07:de:17:0f:11:5e:6e:74:dd:d5:ed:d0:
d6:23:1b:2f:e3:4f:ec:95:ec:51:34:25:f1:d1:cb:
4c:9f:1a:5d:fe:09:ad:a1:bd:bb:05:66:8d:e9:3b:
a2:67:42:c2:85:be:c8:0b:5d:16:cf:06:aa:6f:c5:
2e:77:83:9a:2a:3b:a7:9d:10:4f:cb:2c:77:66:31:
c5:98:a4:a3:09:0d:4d:cf:f0:ab:28:70:e2:56:e0:
91:fe:94:62:6d:37:4a:d1:89:02:17:a7:78:1b:b3:
d9:c9:2f:0e:24:61:7c:a0:78:77:ef:c8:49:91:a1:
11:cc:f6:33:d4:c4:66:51:13:28:2e:88:06:79:9b:
7b:0b:0e:14:db:de:47:4b:c3:32:a2:d8:59:78:e8:
b4:07:52:5a:29:ac:f7:72:2c:b4:80:7b:b3:b0:fc:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DF:8E:B8:CE:1A:C8:C1:B4:7D:B4:B9:98:27:91:54:6F:32:13:55
X509v3 Authority Key Identifier:
keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:28:6f:c2:66:c7:3a:e6:5b:31:1b:01:99:9a:ba:08:4c:39:
ae:16:99:b0:1f:25:3f:ed:f4:2c:00:97:e1:23:e3:4d:fd:fc:
a6:00:80:68:a2:9d:07:0d:ed:6b:d0:86:70:03:13:18:67:7f:
29:4d:ec:40:5c:8e:2b:36:0c:d9:0e:bf:8a:aa:2c:03:82:8c:
a9:8d:cd:3b:78:ca:3d:a8:bd:de:93:a3:41:b0:e7:17:f1:55:
a9:fa:9a:87:f9:ea:33:62:ef:58:54:53:11:22:1c:ba:38:12:
09:4d:da:d4:d8:63:11:4f:69:30:06:12:df:d3:66:85:f7:42:
39:03:85:b9:2d:6d:6d:9b:72:20:47:54:2f:1a:70:36:02:f5:
2a:84:84:85:33:04:09:72:c1:30:d5:16:4e:dc:99:52:ac:71:
f8:06:9b:ae:d2:c2:bc:df:e8:51:87:57:74:29:ec:04:b4:4f:
57:b7:14:d1:94:e0:c7:ad:bb:da:e8:df:16:dc:a9:82:9a:26:
92:f0:93:d6:d5:fd:57:ce:57:b4:c9:f5:db:2a:e0:e9:70:f9:
42:ac:47:b1:fb:95:19:49:32:e9:41:f2:d8:ad:f6:64:a9:66:
26:67:e8:89:de:64:7b:db:df:a8:61:40:1e:0e:c3:cd:95:d7:
36:85:2c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:59:41 2026 by rpki-client