Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
File: DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft (raw, json)
Hash identifier: 9nn0PgROig9lAodwVbu3qv03FzbbzOiJV0GmkD6EjYE=
Subject key identifier: 90:C4:77:30:7C:26:E7:33:43:DF:0C:41:69:93:0E:71:AF:0D:A6:3F
Authority key identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
Certificate issuer: /CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Certificate serial: 019D38D3373671F304548EB3D4FF3F68FC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
Manifest number: 8A
Signing time: Sun 29 Mar 2026 09:00:59 +0000
Manifest this update: Sun 29 Mar 2026 09:00:59 +0000
Manifest next update: Mon 30 Mar 2026 09:00:59 +0000
Files and hashes: 1: Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa (hash: iX6v9+WjPW25JV4dSQdrR9Ylqr6/LIAKembF0Rx+4SM=)
2: DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl (hash: 9kwFZAaV+cXQYPdxMSbJmFYpi28vLwK4eZ/RcrnT5PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:37:36:71:f3:04:54:8e:b3:d4:ff:3f:68:fc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Validity
Not Before: Mar 29 09:00:59 2026 GMT
Not After : Mar 30 09:00:59 2026 GMT
Subject: CN=90c477307c26e73343df0c4169930e71af0da63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:0e:a4:e3:89:0d:4c:cb:fb:0f:79:fc:b0:
25:ae:1b:12:16:8c:74:96:e2:78:e3:30:ea:b3:f6:
f4:02:da:54:97:c5:3d:27:a8:c4:92:46:bb:9f:d6:
d4:f9:8b:83:91:a7:11:3e:d4:f2:01:ac:c1:7a:2e:
63:51:b3:8b:8f:bb:58:40:56:fb:8e:d9:0d:3f:cb:
6f:68:94:02:03:45:30:5c:2b:33:15:17:dc:d6:db:
b7:ba:3c:fb:98:31:62:b9:8c:5a:e0:f8:a5:51:5b:
fd:14:13:5e:ae:29:be:ee:f5:92:64:92:7f:f8:6b:
c0:d3:a5:cd:37:95:96:ac:f3:88:db:9c:2a:06:4d:
e6:2c:37:24:4a:45:61:50:56:c2:fd:ad:57:f8:3d:
b7:45:42:83:af:af:07:4d:33:a5:67:ae:54:c6:cd:
40:6a:ac:6a:93:8d:71:07:64:3f:78:3d:9c:98:6d:
cd:96:a5:65:bd:e4:cf:8e:17:24:b2:c4:03:aa:a4:
0a:5f:76:f6:f6:f2:54:f0:e4:d0:37:97:42:dd:b0:
bb:25:86:e5:9b:97:23:44:1f:8f:05:3d:78:d2:94:
90:2f:59:3e:09:0e:5a:c6:27:d9:20:1f:50:3b:a3:
61:2a:f6:e1:b5:f9:83:ad:3f:2d:71:62:b9:fe:e1:
99:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C4:77:30:7C:26:E7:33:43:DF:0C:41:69:93:0E:71:AF:0D:A6:3F
X509v3 Authority Key Identifier:
keyid:0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:74:06:81:04:1a:ab:d7:81:00:ea:ba:06:37:e0:da:d0:72:
aa:75:0a:67:0b:9d:d9:27:27:40:f9:9a:30:15:41:97:e1:85:
01:f7:a6:4a:c1:d3:24:4b:9b:10:84:14:b7:cd:ac:2d:ed:58:
e2:fd:46:46:b2:61:0b:64:67:25:e4:4a:0c:b9:04:62:d0:61:
38:f8:06:55:b7:e5:cc:e8:4b:9f:6e:81:ec:89:f0:76:e2:21:
ad:e9:d2:cc:f0:06:c3:d6:fe:27:bd:50:db:ce:94:7e:67:23:
d4:25:82:2c:bf:ed:82:bf:53:5c:3b:c7:59:3d:f8:a9:a1:4f:
1d:63:4c:55:80:41:eb:7d:1a:26:05:6c:ff:98:45:94:0b:6f:
5f:b1:f4:5d:a7:78:4d:72:eb:48:b4:e0:35:8d:ad:0f:50:9e:
01:41:c1:80:d6:e2:12:5d:32:25:e2:e6:0b:44:32:d3:61:e9:
d0:92:40:7a:8e:f5:36:9d:c0:57:a3:22:2b:5a:f6:48:0d:b2:
0e:45:56:6f:f0:2b:e0:45:91:09:a2:51:84:91:bf:f2:4c:9a:
81:aa:ff:56:9b:e1:22:f4:4d:93:08:6a:d8:c1:80:7a:4f:ed:
da:ea:5f:30:66:ca:48:06:43:a0:03:2d:a6:8d:7e:8d:66:f3:
14:87:9d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:47 2026 by rpki-client