Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
File: DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json)
Hash identifier: uPXaQktR5vAqPxJHxz8jXygzoRu45S7TFIZ7/4qFsGA=
Subject key identifier: CE:AA:DC:57:F9:51:DF:C8:9A:FD:C8:3A:69:B1:37:69:07:BB:C9:3A
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial: 019D386633C3E0BCFCBD3AEDB6DECF325A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
Manifest number: 0477
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: 1BkjwcP8AeLB8GlABJNzAWQsOGUBjCLYdndLKVWILKw=)
2: QSS55y_l3Gt0c8stWJWOK_nOGJE.roa (hash: sZpfsqBsL2z+jJ162ImPEwneGDPeOqBNZft5KqaSHfU=)
3: YWNDZTTIZoOnHoDXi9E6DGlDlqY.roa (hash: aIUQvaxY70pNpKSk5tmYluexw6bkZHt2gtc/Ueg8vRM=)
4: e1MeXi5jGEx2ghjXy4K7UMFk3kU.roa (hash: oPguTsrx3a7ULwz315fIeupuRdabV/wQF9vZA3Lwhi8=)
5: wF4dYnSli8MvKSkaalmJxK3BUuE.roa (hash: bRgCLzwSPr+zj8E46tEdf2riioRemK4V+6Zr2lWh/tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:33:c3:e0:bc:fc:bd:3a:ed:b6:de:cf:32:5a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=ceaadc57f951dfc89afdc83a69b1376907bbc93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:42:dc:ef:07:0b:09:44:47:d9:68:35:bf:
8f:ba:1f:51:ca:a5:43:0a:4f:91:0e:a8:a7:35:e4:
4d:d4:f1:c4:01:1a:43:e0:f2:3c:c0:33:1a:ba:0d:
89:90:69:a2:91:43:34:32:59:8b:5f:03:1b:42:73:
41:6d:cb:ad:d2:86:b9:6e:f4:59:e7:57:21:28:f8:
db:29:10:d5:2a:69:68:91:b4:ed:c9:9e:ca:da:bc:
96:33:34:3e:f4:63:c5:bb:25:e0:05:bb:4e:df:f3:
ff:9d:9e:65:32:2f:34:70:2c:ff:94:f7:f8:f6:31:
4f:b0:27:65:60:ef:50:3a:b9:95:ad:29:d6:3a:6b:
aa:e2:f8:12:a4:f2:ee:04:ce:d7:06:05:87:fb:e9:
8d:21:b5:0b:55:ba:06:c2:a2:04:56:c6:44:69:2c:
5e:c2:66:96:29:3f:bb:01:8b:bb:14:23:84:74:e1:
80:a7:cf:a1:4f:40:ca:48:4e:92:a0:67:29:f1:4d:
5c:cb:7a:d9:44:7e:a0:59:31:ac:61:26:ab:a9:2f:
d5:b6:62:3c:37:bc:c8:b3:20:de:77:3d:21:22:9b:
1b:34:e3:49:5d:e1:e1:04:63:ea:c0:e0:4d:b4:5d:
e6:82:0b:ba:b4:99:fd:bd:41:90:d5:14:ba:36:1d:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:DC:57:F9:51:DF:C8:9A:FD:C8:3A:69:B1:37:69:07:BB:C9:3A
X509v3 Authority Key Identifier:
keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:64:61:ae:7a:5a:8b:d1:67:71:6b:9a:f9:9f:bd:96:34:0e:
8b:98:c8:df:df:cf:5f:73:a1:5f:57:00:a9:69:b8:2d:ad:d2:
58:81:2f:f6:68:59:07:63:7d:7e:d9:94:47:87:4e:e3:e2:91:
12:bc:30:b8:66:01:47:a3:48:a6:f8:ad:46:a2:ba:44:63:cd:
19:fb:cf:31:f4:bf:cf:9e:1b:90:88:29:30:52:0d:65:fc:f4:
8c:dd:1b:33:3f:b6:be:8f:48:d6:58:c7:d9:ba:3e:e0:25:eb:
48:c1:56:4c:fb:3a:bf:2b:e7:5f:1b:51:cc:47:c6:b5:8b:e7:
60:2a:94:4a:34:8d:b1:c2:ee:4f:1e:00:fc:cc:0f:42:29:c9:
63:19:49:2d:d7:6d:a3:75:7b:c8:7b:49:70:2c:ef:10:29:09:
96:20:a9:44:bb:cc:24:39:3b:76:28:df:e3:21:f3:10:3a:f5:
ed:18:05:c0:ac:6a:59:4e:65:63:91:89:a7:60:da:a9:82:2c:
0f:25:32:09:60:43:b3:fd:5f:7f:5c:ae:a6:ea:7d:d6:91:49:
80:b7:57:35:c6:33:5f:b7:73:30:85:a9:2a:be:7d:0b:db:0a:
5e:3c:45:61:87:9d:60:f3:55:38:96:66:7c:1d:7a:7c:cf:7b:
55:e2:e6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:26 2026 by rpki-client