Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: Yrn4eCSbYkIYuyei6nVLCu8rTgekaIDn1Lvh6GOOBaQ=
Subject key identifier: 8C:76:AE:9F:F9:04:1B:22:84:A0:E8:43:A9:EA:48:B9:C4:3C:15:62
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 019D382EA7613BAD9BC59D07BAA74E2BABCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:01:14 +0000
Manifest this update: Sun 29 Mar 2026 06:01:14 +0000
Manifest next update: Mon 30 Mar 2026 06:01:14 +0000
Files and hashes: 1: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: 0MGX78rC9n8VeqgiOUprq7S0HvUvj2Z/QkUnV4zgHEY=)
2: LINYNse5gTnQTaGpDC4P2orwLNw.roa (hash: jwdJGzlRoAppijnlgLmKSEl5CMBxNzYsYm+HHhXiWR0=)
3: Wu-LPUMqwocBNlt5ypkyRQ-BcG8.roa (hash: udr6u/rjNC9kwCUZ4fpiUpE5gr+CoJtYznz4JyS606g=)
4: dpzibW71BafVtewDmI9jnKwB0PE.roa (hash: Lb6hcW86Ys7t4OSo9igJpzp6AC9QU/RfmTo/e1nf/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a7:61:3b:ad:9b:c5:9d:07:ba:a7:4e:2b:ab:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Mar 29 06:01:14 2026 GMT
Not After : Mar 30 06:01:14 2026 GMT
Subject: CN=8c76ae9ff9041b2284a0e843a9ea48b9c43c1562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:51:95:41:24:b8:34:9d:2e:8d:27:aa:f6:
93:4f:c8:0e:08:95:b4:fd:d2:a8:b1:7a:e2:a1:2a:
a1:cb:86:c0:81:1b:1b:20:65:6b:a0:ea:0c:3e:90:
d1:2d:de:c7:77:59:90:e7:7a:c0:1c:b7:ed:10:b7:
46:01:aa:9b:ad:83:ff:31:df:94:25:59:fe:a2:f4:
95:d8:bd:53:49:0f:9c:a1:8b:a3:ea:27:c3:24:19:
02:6e:18:29:45:fe:65:76:50:aa:82:22:ad:74:6b:
18:cc:14:3e:8a:41:3e:25:0a:c2:45:bd:9b:9f:c1:
80:23:f6:06:2c:92:7c:3c:0e:a3:92:0c:3b:04:80:
17:3a:b9:2c:df:44:39:88:5f:60:b3:71:19:37:9b:
ad:86:04:76:3c:46:50:d7:7e:1c:6a:d5:41:a8:7f:
2a:9c:e9:05:e2:b9:2b:13:3c:1c:c7:e0:69:31:8c:
15:90:d7:3f:27:b3:ea:4a:19:a3:3f:b1:57:05:65:
0a:39:88:bf:66:f9:9a:8e:75:0e:2d:d2:3a:55:f0:
f3:ed:1d:a9:a9:b3:13:e6:28:f5:e0:1c:bf:3e:9f:
ed:4a:32:14:ff:69:30:9d:84:71:1e:e4:5b:d9:28:
05:52:8a:69:0b:0b:73:e8:2d:c6:53:d3:10:b7:4a:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:76:AE:9F:F9:04:1B:22:84:A0:E8:43:A9:EA:48:B9:C4:3C:15:62
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1e:bc:1d:79:3d:5e:61:29:26:3d:f1:c0:e4:cc:ed:42:e1:
db:f0:0c:48:3a:1e:9a:69:d1:dd:36:b5:bb:d3:a1:ac:5a:79:
8d:f7:09:58:9b:1b:63:1e:79:42:9c:3e:b7:b0:23:7e:26:1d:
99:ad:fa:fc:be:38:48:ce:56:ee:fd:3a:d6:13:72:87:6f:f6:
7f:a5:71:fe:86:ba:69:72:bf:5b:6d:99:a3:e7:5f:74:e3:65:
d2:ae:3a:3a:18:da:13:11:98:52:8d:69:3a:f9:2a:c8:cb:bb:
d3:15:4c:e6:64:31:a7:d2:8d:8c:fa:04:aa:1d:96:f4:91:72:
56:34:61:f6:c4:fa:ac:54:5b:e1:51:10:a0:81:71:83:bc:29:
d9:db:10:aa:65:ca:40:1e:73:53:9f:ea:32:67:48:47:af:99:
b1:aa:8b:4a:e5:b0:d8:21:7a:19:86:fb:dc:4c:ab:89:12:b7:
3e:cd:8b:e9:dc:d6:53:fb:ce:60:6d:1a:e0:7b:6b:bc:a8:37:
6a:7f:aa:0b:9a:c3:f1:97:92:a5:43:ba:95:5b:94:1b:98:b0:
ec:1c:ff:01:df:75:d5:95:67:3a:e9:ba:1f:90:fc:a7:d5:2b:
bb:5a:89:44:c4:b8:5d:f7:08:9b:de:f2:22:fe:6e:e3:f3:bb:
b2:35:86:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:06 2026 by rpki-client