Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
File: dIisPOfpHiQMr_IZy-OPzwI78rY.mft (raw, json)
Hash identifier: mO+8g6PMXohRcJ1QvvhtqVmPb9HDV1OnEgBOX7isqdk=
Subject key identifier: 61:41:DB:6A:D0:CE:06:EA:E8:F9:BF:C9:C3:61:B7:EF:93:B7:EC:40
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Certificate issuer: /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial: 019D38D2AAB4B6D2999424AE7EE5459AFB07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
Manifest number: 0DAC
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: CbxnjlJBX1CICFT1kGWKTEy-Z-0.roa (hash: a7S+YgDlHzYeUVzNU2fan5Qha2NudAAgRA43fxRQexg=)
2: dIisPOfpHiQMr_IZy-OPzwI78rY.crl (hash: fLY6IfqBZqVAxCuITSfD4ctl3tfRXKx8Gm1Eq4Bt9xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:aa:b4:b6:d2:99:94:24:ae:7e:e5:45:9a:fb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=6141db6ad0ce06eae8f9bfc9c361b7ef93b7ec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:78:d3:a3:95:58:22:59:8f:78:9f:a9:37:
ed:01:ee:eb:7d:27:5c:dd:b3:61:e7:07:d1:05:a1:
04:32:7f:92:e1:83:9c:40:3c:33:39:a1:d5:b1:f6:
c1:04:84:1b:84:2c:6f:ae:a7:3f:b2:98:ad:f6:61:
ea:3d:b6:d0:9b:2d:3b:b6:d8:7c:ad:07:7e:3e:d0:
9c:ea:9d:41:6b:82:fe:84:82:77:22:89:bf:ad:be:
49:2e:82:e5:22:2b:5a:4f:ba:c4:99:84:ba:f3:36:
8d:b5:b8:66:a2:09:7a:cb:52:06:91:e8:72:24:e2:
a8:62:47:5a:39:6b:40:28:1b:7d:48:fa:95:99:42:
21:ca:2d:79:a1:0c:6a:2d:2a:5f:e8:e1:1d:4b:d3:
71:08:9f:7a:03:73:f1:d4:f1:b5:43:5a:5e:8a:6e:
a6:00:5e:e6:db:c1:08:e1:67:94:87:67:ab:77:a4:
d6:fd:3a:e5:cf:42:f6:31:54:a8:3a:90:ac:07:41:
01:60:c5:01:9c:a2:20:7b:e5:31:84:82:ee:62:fa:
d0:cc:36:53:e2:c7:16:fb:9b:f2:f8:5a:5f:a5:50:
7c:6f:47:64:c9:1c:5e:7d:41:ee:be:67:c7:8c:dd:
1c:c6:a3:48:99:c5:ad:15:07:35:f1:dc:48:80:5d:
b3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:41:DB:6A:D0:CE:06:EA:E8:F9:BF:C9:C3:61:B7:EF:93:B7:EC:40
X509v3 Authority Key Identifier:
keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:88:bd:0a:21:15:55:a2:a7:c1:6a:bf:5b:4e:7b:12:30:bf:
cc:f9:13:90:f4:27:e1:a6:b9:13:07:45:c9:e5:2b:c3:b2:b1:
3a:55:6f:b7:f5:ed:23:c6:62:62:b1:99:48:e9:16:35:ff:ff:
0d:23:80:a2:88:6c:30:1c:6c:bd:00:05:2d:dd:21:ef:a2:a3:
4b:b4:d7:b4:be:65:37:40:c4:0c:b8:d7:a5:57:90:d0:df:95:
0a:d6:18:c1:67:75:ae:57:f3:e5:3e:ef:d2:cc:f6:e2:f0:e9:
df:77:05:5e:7c:f5:dd:4a:a5:1e:37:7c:23:b8:63:19:7f:d9:
2a:e7:a4:5e:af:09:e6:df:48:8f:58:36:37:82:81:2d:b3:7a:
4b:db:a0:f1:bc:ab:c3:53:ee:52:0f:69:8b:8e:e6:b4:e5:89:
73:f6:f1:29:bf:bd:99:66:fc:4d:58:c3:08:89:f3:29:3f:c2:
dd:96:9d:9e:a7:35:f1:3f:07:f8:22:2c:b3:c1:f1:99:84:5a:
e1:0b:bf:bb:38:0a:94:71:a9:67:9f:17:41:c4:18:37:26:26:
41:32:94:21:f9:93:1a:5f:29:b1:71:4c:ce:28:ff:dc:9d:0a:
78:f7:20:a2:fe:32:83:d9:1d:68:cc:bd:75:c8:62:3b:a9:71:
15:f7:ca:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:26 2026 by rpki-client