Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: 0JFiWJ4fdcB/5//4VTDTw7rXzTY9k/lscH2jdfo8S/4=
Subject key identifier: 5F:E1:C4:E8:FB:99:E7:EA:5E:2E:42:47:16:25:67:31:11:7C:F3:45
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 019D38660BE9B68B480BA11022F9D8432223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 1507
Signing time: Sun 29 Mar 2026 07:01:44 +0000
Manifest this update: Sun 29 Mar 2026 07:01:44 +0000
Manifest next update: Mon 30 Mar 2026 07:01:44 +0000
Files and hashes: 1: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: 1LcSN07NhBrn2IvmWSEWnnKxNDFoNRxYljDW4ofYXd8=)
2: HumGUcM3JA5WttmoWk-JTSCdCgM.roa (hash: HnfAs+SxCScsW89JwwIoJO2V9u8mCg1vCQuYyQrU9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0b:e9:b6:8b:48:0b:a1:10:22:f9:d8:43:22:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Mar 29 07:01:44 2026 GMT
Not After : Mar 30 07:01:44 2026 GMT
Subject: CN=5fe1c4e8fb99e7ea5e2e424716256731117cf345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:e3:f5:01:ed:53:0e:61:74:9c:4d:eb:d7:
73:ac:5a:b4:09:1a:53:f7:5d:98:d6:e1:3e:b2:e6:
ca:e2:48:4f:da:d1:50:d2:64:98:bd:9b:45:58:81:
15:fd:3a:07:8d:0c:07:cc:22:37:cc:14:cb:c5:d9:
2b:13:4e:2e:69:f1:07:94:dc:6b:ac:aa:95:c5:9e:
55:f8:c0:16:84:3e:84:c5:81:0f:87:37:d3:e6:68:
28:13:14:79:fa:6c:e3:a7:1e:0f:f9:de:a4:00:13:
1a:5e:7a:7f:f7:d1:30:1e:a6:80:0b:2d:f0:94:6d:
61:33:b5:e3:eb:5b:b9:59:c4:57:55:ae:ea:cb:e0:
fd:40:27:5c:7b:ca:1e:63:fe:46:e6:3f:4a:02:11:
5a:72:7c:d8:9c:bb:7b:e5:55:1f:aa:c4:90:5c:cb:
de:85:c5:b3:d0:ba:33:54:96:1c:53:02:07:c4:7f:
65:2d:32:38:bc:ee:9e:19:78:17:7a:34:e0:05:15:
d1:a5:f1:e4:23:fa:83:2a:5d:6b:e2:9e:ae:1a:c6:
53:bf:ad:8b:07:0c:7a:01:9e:67:db:71:0b:42:dc:
60:ea:cf:38:70:3e:62:9f:70:4c:3d:35:63:e2:ba:
67:95:17:e7:44:e9:ff:be:69:1d:76:8b:a4:70:52:
37:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E1:C4:E8:FB:99:E7:EA:5E:2E:42:47:16:25:67:31:11:7C:F3:45
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:dd:3e:5e:4c:af:b8:4e:11:4e:d4:d3:21:9b:c9:63:28:37:
57:1f:8f:c8:71:bd:9c:ad:57:86:63:a0:f5:99:65:1b:5d:0e:
59:35:bb:66:6c:b5:14:70:29:6f:34:52:a7:0c:70:5b:ce:95:
c1:49:3e:cb:b5:cf:c6:e4:e9:82:dc:29:71:5c:f5:20:e7:5e:
23:c0:d9:14:f7:30:74:0e:ff:2c:a4:7c:f0:3b:12:34:2b:87:
3e:b2:31:d4:d3:04:e2:e8:dd:d7:2e:50:da:4f:6e:5f:fb:cf:
e4:57:df:bf:5f:9e:79:ef:0e:93:ca:a3:b8:1e:83:d4:c6:e6:
5f:c3:a9:d9:08:65:cc:0b:59:1f:cf:c6:02:31:cf:07:78:cd:
ff:de:a2:5c:4a:69:26:b5:c1:9f:c8:c1:23:b5:4b:28:06:be:
77:ae:84:92:dd:44:3d:51:b0:1f:6c:6c:27:10:65:c8:30:7b:
b8:87:22:c8:3b:8d:e2:13:76:16:22:8a:90:60:e1:5b:73:ba:
63:9c:7b:f3:4a:a1:52:ce:23:3b:a9:1c:dc:1b:8e:ab:1b:8e:
45:9b:f5:73:31:fa:75:53:6c:e1:02:e6:46:dc:73:2d:4f:9f:
42:ac:9e:9b:b1:76:42:a0:b1:2c:d9:0e:39:f3:f7:56:5c:51:
4d:46:4b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:19 2026 by rpki-client