Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier: YbTURgFfus97+YbsR0KiIBuzLHZq2RAphIHJJBz//dI=
Subject key identifier: F9:4A:D2:EF:00:5A:74:2E:FD:D0:AD:3E:8F:E9:53:DE:8D:63:04:CD
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 019D37C0903B320A7C53220D1157F93691F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:00:59 +0000
Manifest this update: Sun 29 Mar 2026 04:00:59 +0000
Manifest next update: Mon 30 Mar 2026 04:00:59 +0000
Files and hashes: 1: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: QRnFmpcN1Jo7EUAjosslgg0yMoJaScOwnW/pLnwPGL4=)
2: dLnEEciYoxf4zHYKdVd3Cs6UXwE.roa (hash: fuSsuZb+gCHUO48DwmuXqWY4VCL5Q795gkNmczjB/Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:90:3b:32:0a:7c:53:22:0d:11:57:f9:36:91:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: Mar 29 04:00:59 2026 GMT
Not After : Mar 30 04:00:59 2026 GMT
Subject: CN=f94ad2ef005a742efdd0ad3e8fe953de8d6304cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:a5:8d:fd:2d:dc:51:45:3b:45:37:5e:a0:
49:33:a8:c6:2b:06:a1:e3:ee:e1:5f:64:9e:40:81:
1f:a2:83:dc:91:85:28:ce:69:75:15:fc:69:32:5a:
37:19:24:16:40:4b:82:8a:c0:1b:e6:75:5d:d6:18:
d8:ee:1f:ef:25:db:13:7c:4c:4e:4f:35:87:2c:00:
4a:1b:ea:64:b1:10:58:ac:53:55:36:3e:83:6a:c5:
14:2b:98:21:9e:44:9e:50:b1:7c:c9:0d:a1:8f:00:
b7:21:ac:16:4e:c9:5c:2a:bd:f7:7b:b8:d4:7b:16:
64:61:ab:90:f1:f5:c5:d8:e3:c6:d2:40:93:43:9f:
ac:4d:b5:fc:f2:34:05:c0:1e:ac:4e:cd:45:27:84:
d2:e2:90:7a:c4:79:95:a5:e3:07:34:7f:ba:ab:81:
c2:c7:39:f9:fe:91:42:48:85:7b:da:5b:6b:ce:03:
6d:e8:68:6a:47:0a:09:7b:7d:05:9a:8e:4f:af:21:
05:9a:52:27:b9:28:6e:eb:b7:02:13:99:c5:ba:f8:
4e:20:ca:43:1c:ef:b0:00:f5:79:d6:e1:3a:67:91:
cf:d0:6f:50:9c:33:ff:6c:e2:a4:29:ed:b2:13:a7:
a9:48:da:d3:bc:b5:ac:72:58:ed:b5:a3:a6:4a:2d:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4A:D2:EF:00:5A:74:2E:FD:D0:AD:3E:8F:E9:53:DE:8D:63:04:CD
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:72:6f:35:ee:3b:8d:7f:48:61:05:34:f2:81:f6:5b:98:17:
38:7a:56:99:e2:18:c1:51:2c:bf:6d:7b:6e:8c:7f:35:2c:10:
16:78:1e:ad:3a:e9:40:8c:7b:40:70:92:4f:fe:bc:b1:e7:23:
32:de:85:0c:87:97:40:e8:37:f3:49:80:d8:0e:19:67:8c:4f:
bb:c5:e1:f9:d5:44:60:9d:1e:81:ff:9b:9b:1f:76:15:5f:1b:
ff:d9:91:06:18:bc:be:90:f7:ad:c5:03:0f:95:27:54:27:b9:
a6:7b:c9:0b:d8:af:8b:bb:c1:0b:06:3c:9c:30:3e:ee:44:6c:
b7:88:39:26:49:d6:fe:27:50:52:77:63:94:cc:7a:19:8d:9f:
98:e9:20:04:14:20:31:7a:52:4b:62:21:e6:44:8d:70:ae:e7:
fd:2a:35:6d:a3:3f:dd:32:7e:bd:d1:bb:42:a2:78:14:cb:59:
d0:fd:43:e0:12:49:ab:d7:ca:f9:c7:a9:89:50:f3:c4:ac:07:
40:66:76:d5:0c:0c:04:59:35:e3:ab:26:38:7d:95:1c:61:d0:
96:f6:2b:07:56:9f:e1:91:b8:f3:eb:77:83:30:d2:30:75:59:
17:d2:83:2c:d9:d5:4a:c3:1e:17:fd:dd:64:9e:b3:53:ea:c9:
c0:42:e6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:54 2026 by rpki-client