Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: PaUNvAIh2ge4J/6cnpHHcmplh+HB+wv49zLKkXTeGCE=
Subject key identifier: DA:D5:D8:36:35:D4:81:26:D1:27:18:11:1F:D7:DA:A1:F3:35:FE:A7
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 019D3940996B1E29FC1204E662317C274E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 11:00:27 +0000
Manifest this update: Sun 29 Mar 2026 11:00:27 +0000
Manifest next update: Mon 30 Mar 2026 11:00:27 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: t5udvG5XO29IZkO4Ba9J7ZuIftcGlk4H8h45X5+p/Eo=)
2: npNQdbBPSAtnOlq0Culg6ehSO3c.roa (hash: nzhX62ENfek+KzOEsFGqCHI0pXJKicAlbiFtnu/GhCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:99:6b:1e:29:fc:12:04:e6:62:31:7c:27:4e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Mar 29 11:00:27 2026 GMT
Not After : Mar 30 11:00:27 2026 GMT
Subject: CN=dad5d83635d48126d12718111fd7daa1f335fea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:f0:d2:23:d6:0e:a5:1f:fd:e4:08:88:2b:
09:d5:b1:46:5b:63:ac:8d:97:ec:f5:09:d2:c0:52:
f3:7c:37:84:38:bc:bd:a9:18:49:20:34:5f:d7:a5:
fa:37:39:bb:e7:c2:5e:9c:f6:ea:02:e2:d6:6d:43:
b8:d8:9f:e2:ef:67:3f:ac:a3:bc:9b:be:87:ef:a0:
bc:d1:c7:5c:0d:db:7b:15:1e:78:a2:86:e6:df:5c:
ce:38:20:de:32:c1:58:09:b3:98:6b:f6:bf:7a:13:
50:99:a6:a9:cb:e5:10:f8:cd:45:63:8a:e6:10:92:
0b:02:96:b4:f3:48:f9:78:7c:bd:42:97:9d:10:e9:
c5:8c:38:b2:5d:ed:4a:5a:7c:37:fa:cc:8b:b1:5f:
27:b2:e9:b9:f3:23:7e:2b:99:e5:6f:83:c2:c8:67:
f9:b7:1d:6d:21:93:fe:58:ab:1d:64:82:25:1b:9a:
58:eb:02:b4:c2:88:fa:48:6c:93:6c:0d:67:66:f4:
49:7c:29:10:dc:a7:84:90:33:2e:84:fc:0b:66:eb:
cb:91:55:44:a3:69:46:b6:f3:c7:c5:07:e2:e6:1a:
f8:ef:18:32:0a:23:ae:55:0d:5d:ca:d2:47:7d:2d:
1e:d9:40:f2:e9:84:f6:ae:56:f2:1e:35:d7:e5:81:
2b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D5:D8:36:35:D4:81:26:D1:27:18:11:1F:D7:DA:A1:F3:35:FE:A7
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:48:7a:82:35:40:4b:9b:6a:57:f5:7c:e3:67:d1:59:09:99:
51:da:ee:de:8a:95:dd:80:1a:04:28:c4:ed:4d:d1:16:b8:01:
4b:61:6c:93:ae:06:5e:92:22:a4:3b:35:0b:ca:ba:6e:8c:9f:
f3:aa:db:5b:80:7c:6d:a5:e7:ed:0e:06:e0:a8:61:95:48:89:
63:ac:69:d6:b0:e8:1b:21:cd:03:05:0a:46:ea:24:bc:cf:97:
ac:fc:fa:92:07:6d:f1:ee:94:04:a7:fa:3a:7a:b6:91:18:bd:
6c:59:b2:13:c6:8a:f7:b5:a0:3c:ac:af:07:f7:99:d2:93:ba:
2a:67:a9:63:db:91:7b:19:e9:39:40:b1:79:3d:ef:b0:a5:76:
69:08:c3:82:5e:06:51:d1:38:39:86:ab:2a:39:5b:f9:2b:03:
68:d2:96:9d:90:5b:ae:c7:d0:56:ad:3f:1a:f6:42:16:03:db:
f5:08:21:45:4f:a4:cf:a7:9c:0f:0c:97:2f:86:dc:7b:06:1c:
a6:99:1e:f3:e1:0f:38:80:c2:d6:4e:86:02:ef:d8:64:49:61:
29:fa:a6:0b:26:a3:8d:ac:1e:06:fb:70:d4:57:00:e4:de:4f:
26:ea:0a:63:3e:dc:20:34:cf:df:65:ef:1e:a3:90:d0:51:b6:
0d:60:3b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:32 2026 by rpki-client