Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
File: dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft (raw, json)
Hash identifier: XyZgusWK5KFbXb7pscnQNBx7FpUcAUfEWRNWHfbOIX8=
Subject key identifier: CD:44:E1:E1:00:B6:D4:7D:7C:C2:72:C9:55:6A:33:9E:D9:98:42:CD
Authority key identifier: 76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
Certificate issuer: /CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Certificate serial: 019D3AC1846DC1A34839892A80D22DC7E9D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
Manifest number: 0C76
Signing time: Sun 29 Mar 2026 18:00:53 +0000
Manifest this update: Sun 29 Mar 2026 18:00:53 +0000
Manifest next update: Mon 30 Mar 2026 18:00:53 +0000
Files and hashes: 1: UiW9TcEusiItMBq7nV2nhZZMmD4.roa (hash: QFbJs2g7PxyJWfYn1SH51WxmFD2sPMhhQe/rD/6hstw=)
2: dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl (hash: /0uWdkKCl/RIeINWu0kP58T8un7woI4nYqGhkeJCcto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:84:6d:c1:a3:48:39:89:2a:80:d2:2d:c7:e9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Validity
Not Before: Mar 29 18:00:53 2026 GMT
Not After : Mar 30 18:00:53 2026 GMT
Subject: CN=cd44e1e100b6d47d7cc272c9556a339ed99842cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:7d:70:e0:2c:b6:be:96:31:de:ca:b8:9b:
20:e6:b4:4d:85:e2:2c:d7:80:a6:6e:68:98:4e:ff:
5b:ef:96:29:86:c9:d5:11:01:12:cc:15:87:5e:30:
b7:a7:c9:76:a9:45:eb:97:03:fc:2e:fd:79:e4:de:
88:dc:d4:d1:a8:78:f5:0b:4b:f9:da:17:72:b8:ce:
c8:a9:41:b3:05:88:8e:21:b0:a9:72:60:ac:63:74:
dc:26:23:15:ba:0b:94:9d:a7:44:80:0f:d6:e9:43:
fd:25:d2:16:2e:87:55:ee:a0:8e:0b:48:82:fb:b1:
dd:55:40:39:03:13:48:2a:3c:ab:35:09:cb:5e:ec:
cd:81:79:d2:33:f4:c9:4c:2d:95:bc:88:76:17:69:
46:07:da:e8:7b:e0:df:d9:fe:71:ae:8c:2e:c1:58:
7d:41:3f:b4:7e:95:98:57:3d:00:92:87:e1:b2:93:
61:f8:b1:12:e6:67:77:d4:5a:f5:4f:1a:77:cc:73:
5a:f3:53:63:b4:f9:bc:f0:b8:2d:57:4b:df:ca:a3:
4b:6d:08:7a:2a:52:52:39:2f:20:d5:f6:51:05:8f:
ae:27:de:8a:e9:aa:a5:47:a6:be:77:8e:a9:9e:64:
e3:b8:2d:71:d5:b7:83:3f:21:24:ae:a1:d7:ca:38:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:44:E1:E1:00:B6:D4:7D:7C:C2:72:C9:55:6A:33:9E:D9:98:42:CD
X509v3 Authority Key Identifier:
keyid:76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fe:73:0d:a5:24:e0:78:8b:7f:ad:1f:93:a6:45:a0:4f:7b:
91:3f:ed:d7:29:d0:dd:60:18:d5:a4:6c:17:df:dd:b4:d8:79:
7a:fe:cc:3f:eb:03:84:4d:67:5c:73:98:ea:1d:df:e7:0a:92:
00:01:31:dd:60:3e:8f:84:86:f1:39:7c:7f:a5:8b:2d:51:36:
52:c6:ef:56:d2:52:3d:b3:bd:77:c1:5e:97:2b:2a:97:5a:4f:
fa:68:8b:a3:e5:3c:22:da:82:db:8b:5a:1c:8d:a4:fd:0a:22:
03:eb:de:98:04:f8:ab:5e:56:89:93:ff:df:78:fb:15:3a:08:
42:63:57:85:b0:36:f5:a7:05:f4:4c:0b:36:ff:73:fa:e0:61:
dd:91:48:4f:14:8c:85:e5:75:63:a5:30:9f:60:31:b7:4e:d5:
c5:25:18:ba:15:4e:77:04:f0:f0:cd:dc:ce:2e:02:f6:56:c8:
e4:35:e2:8f:66:4c:57:77:64:ac:81:f7:c4:12:0b:4f:70:9c:
21:dd:fd:73:82:ad:96:a7:ee:84:51:6b:4d:2c:a9:01:24:a8:
d5:8d:00:91:90:d8:da:27:a1:80:64:ba:99:6a:e3:73:72:69:
12:cd:dc:be:e7:10:ca:ca:4f:87:87:e7:a3:83:af:b0:28:7a:
f4:bd:08:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:03 2026 by rpki-client