Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
File: dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft (raw, json)
Hash identifier: t/8EUdSaaNtzcrJGe6PDgftSrmLrzf1gjkDclwSWVAE=
Subject key identifier: A6:1C:3F:98:0C:3A:AE:01:6C:4B:16:04:21:A2:20:C3:AE:4F:B5:17
Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
Certificate issuer: /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Certificate serial: 019D382E34E9C07D0552E0A595818D1F6310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
Manifest number: 08AD
Signing time: Sun 29 Mar 2026 06:00:45 +0000
Manifest this update: Sun 29 Mar 2026 06:00:45 +0000
Manifest next update: Mon 30 Mar 2026 06:00:45 +0000
Files and hashes: 1: dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl (hash: XoP/uMXYN/y6gO+sClgf9eQZ3vuG4eNNjf4vtoZmS8s=)
2: g35Y0bPzssO1lbrgJzwXWhCbRPc.roa (hash: INqx3VY6OBJ/sPn/bpn2Ub8Zf1Q1lUdjFiGqKCwTVeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:34:e9:c0:7d:05:52:e0:a5:95:81:8d:1f:63:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Validity
Not Before: Mar 29 06:00:45 2026 GMT
Not After : Mar 30 06:00:45 2026 GMT
Subject: CN=a61c3f980c3aae016c4b160421a220c3ae4fb517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:c6:05:b9:09:25:15:f4:96:42:59:b6:2a:
14:de:5b:c2:c3:20:b2:c8:43:77:8d:7d:90:23:a4:
b5:f4:39:07:69:27:61:8e:35:03:a1:41:b4:1a:c9:
13:d5:46:10:1e:05:df:58:5d:14:dd:4b:fd:3c:86:
ab:22:ea:45:48:ef:b8:fc:62:c6:61:b1:bc:7e:9c:
9d:16:de:f1:16:40:21:2e:17:be:0d:7a:49:18:cd:
4c:a7:4e:00:fc:33:0a:88:97:d4:0c:76:c8:09:2a:
2e:7b:83:2d:9b:a8:ae:d1:5e:7b:43:b0:f9:11:9b:
f3:83:6d:0d:40:bb:b1:ed:07:2c:4b:82:ed:69:80:
11:ef:28:3b:b3:12:71:f6:44:5d:7c:54:88:09:a6:
f5:49:28:a5:87:98:a1:4b:d2:0e:d9:02:48:69:83:
14:de:ec:80:eb:0a:80:19:10:b6:9c:8f:e3:b4:73:
a2:31:ea:41:c5:f6:ed:24:66:e2:2f:ae:86:fd:98:
2f:14:b4:27:62:c2:24:27:97:29:be:83:dc:74:8a:
ea:5c:a2:18:08:60:9d:1a:a0:42:20:92:de:35:1e:
06:95:bc:0a:17:30:2e:d2:cc:35:92:66:1b:3e:92:
b1:59:2c:8d:a6:a4:3f:fb:67:44:30:b5:a3:b0:4d:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1C:3F:98:0C:3A:AE:01:6C:4B:16:04:21:A2:20:C3:AE:4F:B5:17
X509v3 Authority Key Identifier:
keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:59:4d:45:12:c1:00:27:05:8c:df:a3:85:84:23:2a:7a:f2:
d4:00:d5:ee:93:19:9d:86:d4:b2:83:b8:00:82:a3:8d:7b:a4:
76:4d:8c:c8:b6:a1:b4:d0:07:60:df:d4:22:0d:b8:0d:63:98:
cf:e2:2a:7f:4a:5c:03:6e:3f:8a:62:95:5b:ed:4b:00:83:bc:
3a:cd:42:59:5f:46:ea:5d:c2:c5:83:34:8b:77:7e:af:b7:b4:
58:57:6b:95:23:d0:06:e7:70:61:c2:56:9b:68:bf:90:5c:cd:
49:a7:09:14:f7:a2:9b:c8:17:b6:a5:14:b5:1e:96:a0:c3:43:
6e:55:84:3a:64:02:3d:0d:ac:45:99:50:77:e2:ba:dc:17:30:
a2:a4:6e:04:85:5e:02:63:75:3c:26:5f:00:c9:d5:54:1b:bd:
3d:af:42:79:cc:a8:22:b8:bc:38:f6:9b:0d:3f:6f:72:32:d7:
28:e9:65:d4:9b:82:7b:24:36:49:c8:35:c7:a1:9e:08:34:36:
5b:41:89:7d:51:a7:7b:0e:1e:b4:1e:c8:74:4a:b7:31:81:98:
bd:02:2b:57:62:e0:15:6b:e2:46:76:16:86:7f:99:6c:f6:88:
5c:11:f4:50:0f:c9:12:ef:85:54:c0:5b:16:a8:e8:30:fe:9d:
8f:dd:96:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LjTpwH0FUuCllYGNH2MQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0N2JiN2MyNDUwNWI2ZjU4Zjk0ODE3ZDdjOGQ1Mzc2NzU2
ZDM3ZmMwHhcNMjYwMzI5MDYwMDQ1WhcNMjYwMzMwMDYwMDQ1WjAzMTEwLwYDVQQD
EyhhNjFjM2Y5ODBjM2FhZTAxNmM0YjE2MDQyMWEyMjBjM2FlNGZiNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCnGBbkJJRX0lkJZtioU3lvCwyCy
yEN3jX2QI6S19DkHaSdhjjUDoUG0GskT1UYQHgXfWF0U3Uv9PIarIupFSO+4/GLG
YbG8fpydFt7xFkAhLhe+DXpJGM1Mp04A/DMKiJfUDHbICSoue4Mtm6iu0V57Q7D5
EZvzg20NQLux7QcsS4LtaYAR7yg7sxJx9kRdfFSICab1SSilh5ihS9IO2QJIaYMU
3uyA6wqAGRC2nI/jtHOiMepBxfbtJGbiL66G/ZgvFLQnYsIkJ5cpvoPcdIrqXKIY
CGCdGqBCIJLeNR4GlbwKFzAu0sw1kmYbPpKxWSyNpqQ/+2dEMLWjsE13uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYcP5gMOq4BbEsWBCGiIMOuT7UXMB8GA1UdIwQY
MBaAFHR7t8JFBbb1j5SBfXyNU3Z1bTf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xN2E2MjEtZWRhZS00YTliLTg0NTUt
ZmNjMDA5MWZlOWU2LzEvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8xN2E2MjEtZWRhZS00YTliLTg0NTUtZmNjMDA5MWZlOWU2
LzEvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1lNRRLB
ACcFjN+jhYQjKnry1ADV7pMZnYbUsoO4AIKjjXukdk2MyLahtNAHYN/UIg24DWOY
z+Iqf0pcA24/imKVW+1LAIO8Os1CWV9G6l3CxYM0i3d+r7e0WFdrlSPQBudwYcJW
m2i/kFzNSacJFPeim8gXtqUUtR6WoMNDblWEOmQCPQ2sRZlQd+K63BcwoqRuBIVe
AmN1PCZfAMnVVBu9Pa9CecyoIri8OPabDT9vcjLXKOll1JuCeyQ2Scg1x6GeCDQ2
W0GJfVGnew4etB7IdEq3MYGYvQIrV2LgFWviRnYWhn+ZbPaIXBH0UA/JEu+FVMBb
FqjoMP6dj92WTA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:53 2026 by rpki-client