Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
File: dHyzZv9uI99sCX9grcf6gHVZgZE.mft (raw, json)
Hash identifier: oZHUtoW6ljJmJ3smv8QjjaUJQNtOORoq3E729EpUWsg=
Subject key identifier: 11:DE:74:B2:D7:11:C4:73:F2:B8:C4:5F:65:D6:37:90:29:75:08:71
Authority key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
Certificate issuer: /CN=747cb366ff6e23df6c097f60adc7fa8075598191
Certificate serial: 019D3AC1B22C6FB38B862F63F67A0ABB1181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
Manifest number: 0C58
Signing time: Sun 29 Mar 2026 18:01:05 +0000
Manifest this update: Sun 29 Mar 2026 18:01:05 +0000
Manifest next update: Mon 30 Mar 2026 18:01:05 +0000
Files and hashes: 1: ZTaGvGPieOY_mdZ7DjbQhHhCnXs.roa (hash: xPpDP90fvRcRireZ1ICdhF9SMxSOwF26ckiak86gXOY=)
2: dHyzZv9uI99sCX9grcf6gHVZgZE.crl (hash: ejXCT84uMwntu9Qxr0dOPYvm2r02EVtcTeY/ksGPR48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:b2:2c:6f:b3:8b:86:2f:63:f6:7a:0a:bb:11:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747cb366ff6e23df6c097f60adc7fa8075598191
Validity
Not Before: Mar 29 18:01:05 2026 GMT
Not After : Mar 30 18:01:05 2026 GMT
Subject: CN=11de74b2d711c473f2b8c45f65d6379029750871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:c6:c3:8f:28:ff:97:e2:f3:93:8c:55:5f:
6b:db:ae:f9:31:ea:1d:1a:b8:9e:a6:b2:eb:73:58:
83:d9:62:b5:23:dc:cd:2d:ff:f1:58:f1:d2:f9:71:
72:33:f6:e5:fd:48:23:75:09:4c:e4:4d:44:ba:84:
3e:1a:9e:53:eb:d3:46:32:3b:19:9d:c0:fe:61:67:
09:7b:fc:23:0d:1a:da:40:f3:da:d8:5b:07:72:31:
10:45:53:bf:1a:a9:95:e3:b8:60:42:83:a2:be:23:
f9:f9:46:3d:3f:cc:e9:90:b8:c2:8e:e2:dd:fc:23:
e2:a2:cf:4d:24:e5:08:3d:49:a7:03:79:3e:f5:5f:
1f:17:a6:dd:1e:ee:b1:27:c3:49:f3:21:92:17:a6:
ef:c2:30:c5:b1:e9:58:1c:68:62:e3:f7:90:48:44:
12:e1:fb:3b:ec:03:ff:38:e7:f4:5d:25:26:0a:6c:
18:06:5b:c3:6d:fd:e5:9f:b5:19:0b:de:84:90:7f:
d2:8a:8c:d4:08:4a:78:b8:1a:b2:db:01:59:40:ca:
6d:84:17:d0:90:5b:f9:9e:0b:b1:4b:e8:35:74:8a:
f1:0d:eb:49:15:1a:52:71:2a:45:ac:68:ec:68:3b:
3c:e9:3d:5a:ed:4a:bb:66:38:6e:95:7c:17:53:73:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DE:74:B2:D7:11:C4:73:F2:B8:C4:5F:65:D6:37:90:29:75:08:71
X509v3 Authority Key Identifier:
keyid:74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c1:4e:79:61:65:48:81:fb:de:9e:b4:7a:3d:ca:85:d0:3b:
c4:ed:eb:b4:17:9a:d2:ae:d6:eb:19:b8:e1:fe:f1:23:84:78:
ec:8e:35:1c:f7:df:cd:6a:66:98:fc:0a:9d:f2:15:b8:18:ef:
4c:18:30:cd:be:ce:45:d4:df:95:66:f9:a8:30:7a:cc:61:79:
bc:79:b0:39:37:d0:d7:ed:ce:d0:c6:81:d5:b2:3c:11:4f:c9:
66:0b:73:0e:09:70:1d:bd:2d:c6:3a:bb:dd:de:7a:f0:a8:94:
9f:f6:a4:b1:e4:73:25:8f:56:9f:ab:ac:b7:d8:74:3c:1b:cd:
0a:f7:39:17:e9:77:c8:58:ea:05:b7:cf:19:51:13:a3:37:de:
2f:7a:75:2c:57:34:c3:2d:57:00:81:8a:7c:9b:34:bf:ba:7d:
81:be:1b:c0:a4:a6:cb:b4:0a:fa:a5:bc:13:e2:a0:ab:00:d3:
15:da:e7:c6:11:be:8a:74:d8:ba:46:2a:8c:0b:60:61:c3:90:
21:44:30:fb:3e:28:3b:8e:05:f9:23:ab:c3:67:6f:3b:05:6e:
af:8d:91:9b:93:91:29:12:95:a5:0e:33:d1:16:96:64:c2:34:
f6:1f:0b:af:e6:90:3c:e7:aa:98:4f:1b:4c:db:a7:c4:0e:cb:
fa:d9:fc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:29 2026 by rpki-client