Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
File: DpXDrONm20G83CVsXVs75JCk92E.mft (raw, json)
Hash identifier: qiv2kjJLrMQRzt4x1r62j39s+i3AwCFxmvRG3XX+P94=
Subject key identifier: 56:59:67:79:72:A6:26:CC:8F:C4:CD:48:5B:6F:29:8E:96:EE:81:1C
Authority key identifier: 0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
Certificate issuer: /CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Certificate serial: 019D3752B0BAD63F0899DAF946F0CEE3273F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
Manifest number: 0CE7
Signing time: Sun 29 Mar 2026 02:00:59 +0000
Manifest this update: Sun 29 Mar 2026 02:00:59 +0000
Manifest next update: Mon 30 Mar 2026 02:00:59 +0000
Files and hashes: 1: 37dXvYDoLLgkPUjF4NxD-XXFFYI.roa (hash: kSAD/e0L34SLlOnuXBzFWv60he1Bjkrs051xSNxh2jE=)
2: DpXDrONm20G83CVsXVs75JCk92E.crl (hash: ugLh+N/mrm9DK9pOkMS4quNgVFBeMMjnqhN4sbPiU6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b0:ba:d6:3f:08:99:da:f9:46:f0:ce:e3:27:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Validity
Not Before: Mar 29 02:00:59 2026 GMT
Not After : Mar 30 02:00:59 2026 GMT
Subject: CN=5659677972a626cc8fc4cd485b6f298e96ee811c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:87:41:6e:d8:17:27:2c:47:93:98:95:12:
21:a8:86:d6:d4:62:3e:df:cf:2d:4e:b8:dd:8e:04:
78:76:f1:c6:00:d5:07:63:60:69:cb:f0:12:f2:ca:
fc:45:08:81:a5:d5:b5:cb:cb:e8:99:0f:6f:6d:ce:
a1:8d:d3:f3:15:1b:24:9b:df:cc:1f:6c:9b:9b:64:
3c:65:12:fe:9a:8e:ad:de:83:8b:48:27:5a:9b:b6:
df:a4:cf:f0:de:67:85:c7:b0:dd:87:8c:a4:fc:5f:
4b:bf:c5:38:bd:f5:9b:82:0c:31:fe:aa:f2:2e:2e:
f9:f1:43:b4:56:1c:9d:f7:f1:52:27:b5:7e:27:fb:
97:9d:0b:3d:e9:5b:d3:ab:fd:4d:7f:ad:bc:72:8d:
df:2f:c1:b9:62:98:3c:c2:20:66:32:5b:3d:6e:ac:
4e:a9:8e:6d:03:56:e5:c2:1d:dc:b3:8f:17:0f:ad:
90:87:24:6c:28:1b:c9:d8:ba:1c:24:f1:04:cc:54:
45:bd:e2:99:d1:91:76:48:4e:cb:6a:88:0f:45:af:
3a:5e:7c:ba:50:d0:ab:86:84:33:75:53:57:29:8b:
88:24:1a:60:20:ee:18:ec:3b:1c:46:24:bd:50:db:
c2:85:f4:e5:38:a9:1e:ff:44:b9:e9:70:2c:a2:5d:
fe:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:59:67:79:72:A6:26:CC:8F:C4:CD:48:5B:6F:29:8E:96:EE:81:1C
X509v3 Authority Key Identifier:
keyid:0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:25:f0:1e:c3:a8:60:53:99:53:ee:a9:26:d7:48:a7:fe:e9:
4b:5b:31:0d:79:8f:00:b2:d1:28:09:94:53:90:80:39:66:23:
a0:7c:a5:76:e6:78:1d:89:46:b3:62:63:3a:28:31:f3:d3:e6:
f2:9a:cb:57:65:24:0e:2a:c5:e7:4a:05:fb:ad:91:d7:67:e7:
af:bf:3b:64:d7:48:45:20:3f:d4:58:11:7f:30:6e:d0:fc:26:
f6:e3:48:29:f4:15:33:98:55:aa:e1:26:27:88:29:e5:b2:4c:
4a:33:fd:d2:16:95:3c:b7:4d:65:ef:0a:18:b9:90:0f:7b:39:
f6:64:dc:d7:af:ef:af:61:a6:9a:14:f1:64:50:5b:5f:9d:9e:
d6:5c:9d:d1:a1:f3:04:9a:03:b3:35:40:31:5a:11:27:e1:18:
cd:7a:3b:f2:4a:99:84:91:a2:e0:a5:e6:47:fa:ff:16:67:5f:
e1:0a:7a:52:e5:46:cd:b6:b8:76:11:8b:fd:ad:63:eb:2f:7f:
e1:d3:ec:9d:62:8d:2c:d4:c0:02:e1:2b:61:26:3b:00:b7:20:
07:0a:80:72:a0:5f:c9:64:46:54:71:16:bb:02:a7:9f:92:ba:
78:d9:1f:9f:a9:66:e1:53:3d:4c:15:cc:14:72:a5:c1:6c:41:
fc:45:ef:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:40 2026 by rpki-client