Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
File: dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json)
Hash identifier: 2/Qqs1w7/7G40vS0qo5VMSVaFQmQRKU2A8C2mJrPySE=
Subject key identifier: 08:00:83:0C:F2:15:F0:82:D3:E3:1A:44:AF:82:20:31:E2:BC:E7:8A
Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Certificate serial: 019D382E7C25CC75A4114487C20930F5D01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
Manifest number: 136F
Signing time: Sun 29 Mar 2026 06:01:03 +0000
Manifest this update: Sun 29 Mar 2026 06:01:03 +0000
Manifest next update: Mon 30 Mar 2026 06:01:03 +0000
Files and hashes: 1: NqpHuEMuxziK_s6FwV4-BlExn5I.roa (hash: vG3pCOebbp8ka7ppT4ebnWl3F1yFRDRI4TRKdbhBhzs=)
2: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: WgMWWJlusdwaBE7lUD+oDH/k7BMnSsbU8MChUCLtfyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7c:25:cc:75:a4:11:44:87:c2:09:30:f5:d0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Validity
Not Before: Mar 29 06:01:03 2026 GMT
Not After : Mar 30 06:01:03 2026 GMT
Subject: CN=0800830cf215f082d3e31a44af822031e2bce78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:29:16:bd:50:45:48:35:32:55:84:02:25:
de:02:66:2f:51:17:fd:37:7b:55:19:ba:6d:59:93:
df:81:d1:8d:60:f1:b4:c1:96:14:c2:b6:3c:5b:cb:
5f:c7:60:18:99:68:5c:c9:8a:5c:16:d2:9a:ba:ec:
82:94:5f:84:23:10:c5:b5:79:04:ec:62:0f:8d:28:
4e:5d:7a:1d:94:d6:b4:76:50:1d:02:78:35:ec:80:
ad:da:6a:3a:01:fb:08:26:14:d7:a8:f2:1c:08:1f:
bd:d9:2b:c4:12:b4:89:6e:da:4e:03:6f:a0:d4:71:
1a:9c:46:e7:04:99:b6:6d:4a:63:ba:98:23:8a:c1:
2c:cc:1b:a9:0a:8d:91:45:f0:2c:7e:0c:13:ba:f9:
b6:25:02:55:65:6d:27:9f:29:93:0c:b4:50:0a:6d:
6b:41:89:7d:e3:8a:30:cc:dd:2e:58:f6:36:b4:3a:
c4:7b:ef:ba:83:7b:fc:26:81:f9:54:ad:cd:b5:5a:
ad:6a:22:2f:7c:92:56:9e:40:77:0f:df:23:46:4e:
bb:fd:5e:9f:58:5c:28:c6:e9:00:7d:c0:f8:30:94:
43:37:26:f1:98:0d:e0:57:c4:d3:32:3f:1a:a8:6c:
a6:26:42:1a:69:0c:f0:26:7b:b0:5f:fe:cd:a8:91:
b7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:00:83:0C:F2:15:F0:82:D3:E3:1A:44:AF:82:20:31:E2:BC:E7:8A
X509v3 Authority Key Identifier:
keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a6:f5:50:0a:7b:23:28:77:e0:fc:ff:ec:f4:cb:02:77:db:
6c:96:cf:92:43:5a:2f:90:b1:41:6f:83:0e:bf:4d:f4:0c:6b:
de:3c:74:a0:3b:f1:a1:89:0a:26:7a:c7:c0:9c:5e:51:dc:e6:
b4:f4:2d:79:c7:e3:86:90:05:42:ae:be:84:0b:7b:20:19:e5:
cd:8e:de:65:4c:3f:a8:c5:7c:d4:cd:1f:16:d1:fd:ac:9d:4c:
37:46:fd:cd:a9:08:69:a8:2a:d4:9f:04:86:12:be:fd:8f:a7:
05:0b:05:bb:b9:81:5b:ef:f1:39:5d:9f:a8:6e:d1:b8:9b:06:
55:b5:bf:aa:86:99:90:c5:66:61:c3:8f:64:15:f9:c2:6f:43:
24:30:19:8b:63:68:6a:fe:85:c7:a7:67:37:9c:28:cc:c5:47:
0f:46:6b:33:fc:73:60:a6:26:b5:28:5d:ee:f9:2d:69:57:39:
33:ba:61:4b:08:74:7f:6f:67:5f:12:1a:68:99:66:ea:d1:6d:
65:d2:ee:30:70:b0:23:d3:e8:2a:cb:86:89:a6:14:f1:92:0e:
a7:33:dc:ac:18:5a:cf:57:d1:92:25:28:2e:e1:04:52:50:a0:
5b:e5:4f:79:aa:ab:c3:3f:97:49:64:13:58:9f:53:41:1f:fe:
c4:0c:2c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:22 2026 by rpki-client