Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File: Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier: 6VJbGS3ST87NApo6JusTCRcKKYzuUunfyAN+4XDhykQ=
Subject key identifier: E3:B2:1A:A3:55:27:D9:B7:24:2C:97:D7:F3:0B:58:8E:B3:7D:3F:E1
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial: 019D39416144503174E110238AC7C86B5CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:01:19 +0000
Manifest this update: Sun 29 Mar 2026 11:01:19 +0000
Manifest next update: Mon 30 Mar 2026 11:01:19 +0000
Files and hashes: 1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: XFwvr2BR7uh4IHOcAGogGD0WV/FMnsQyRdLkrVNdAvA=)
2: SAugkdRYnSv4ry8bG61AtXCsozo.roa (hash: sEeAFM3bNI/ojfTwt1bUnazn3tLdAyJRyAzUqk6sRNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:61:44:50:31:74:e1:10:23:8a:c7:c8:6b:5c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Validity
Not Before: Mar 29 11:01:19 2026 GMT
Not After : Mar 30 11:01:19 2026 GMT
Subject: CN=e3b21aa35527d9b7242c97d7f30b588eb37d3fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2a:05:7c:d5:2e:f7:d2:fb:f4:80:09:0e:51:
d0:85:99:68:6e:01:36:57:9a:d5:d5:ff:3a:e0:47:
f9:c1:e0:62:8a:33:54:91:00:ff:7a:93:a6:37:ea:
9c:26:b6:9d:50:d0:89:17:4c:b9:c5:51:e9:e2:3d:
7e:88:cc:66:ae:13:f6:7e:ad:a6:40:fc:19:5e:4c:
48:a0:99:06:a7:d2:94:15:c6:b2:72:3d:7d:53:67:
28:e5:22:37:d2:f5:27:9f:48:ea:2e:c3:0c:ca:f3:
91:40:d1:c1:7d:51:4a:1d:31:46:d2:d6:51:44:9d:
0d:d1:bd:2e:05:11:d8:d6:c3:72:b0:a9:cf:52:ce:
93:ee:08:9c:ff:68:c6:a2:6e:26:b7:b8:a0:9f:19:
e4:92:93:d5:bb:50:2e:54:54:f4:cc:03:df:c9:6a:
79:fb:2f:8a:d7:d3:6e:ff:86:ec:c6:9a:4c:fa:73:
52:8b:38:61:f8:7e:68:9c:93:a2:8e:c4:a0:1e:01:
3f:fd:1a:78:6d:48:de:bc:2f:09:c8:3c:ba:cd:5b:
92:17:2d:c7:91:ba:17:27:cf:2b:28:0e:a7:51:82:
56:a9:ec:4f:c8:7f:37:16:0c:44:7d:6b:f6:1c:77:
74:f9:6a:68:de:cc:22:8b:b3:74:0b:51:ed:a9:19:
92:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B2:1A:A3:55:27:D9:B7:24:2C:97:D7:F3:0B:58:8E:B3:7D:3F:E1
X509v3 Authority Key Identifier:
keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a0:f1:2e:1f:01:0e:de:47:2b:71:f8:2e:93:66:db:df:bc:
14:9c:1f:42:55:10:bf:a0:e0:b5:8b:dd:12:f6:5f:84:af:e3:
ff:aa:ed:c3:54:d4:21:d7:1b:38:ec:41:1f:3f:27:ef:23:7b:
8d:0b:ab:52:68:b1:1c:37:8c:c2:75:45:7a:58:f0:bf:0f:10:
02:2f:e9:58:51:44:77:d6:aa:cb:ae:2b:45:86:f2:02:f7:c9:
03:57:cd:ed:99:b7:38:52:a9:df:d3:89:e7:56:2b:fa:12:4d:
55:fb:18:4e:6a:ea:f7:14:1e:fa:ce:0b:54:af:e1:32:a0:b3:
1a:f2:f4:d8:a2:cf:f6:eb:79:d2:54:3f:21:ac:63:74:7c:2e:
33:69:21:0d:3c:b9:a4:e9:78:31:3e:2c:6d:31:40:02:7a:e0:
d2:5e:e5:4d:b4:ac:18:a1:50:a8:fa:04:97:00:01:26:d9:73:
bc:2c:65:59:0e:72:56:2f:07:53:7c:28:5e:25:1e:71:88:50:
9e:91:77:0a:cb:57:06:26:68:f6:37:c3:f1:d8:66:b6:ce:b9:
74:f0:12:ad:27:ef:b7:96:29:62:0c:02:3b:0b:6d:a4:59:39:
9c:94:ef:2a:67:bd:e4:f0:76:d2:a7:e8:1e:da:c6:ac:02:50:
bb:b2:f9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:23:15 2026 by rpki-client