Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft
File: DhEMl9XysftNNYKIwOpir18gxBo.mft (raw, json)
Hash identifier: zI6E/IzkMVlsMSTajdwHPzYDqJI0JU/yHeapHLEU52Y=
Subject key identifier: 5C:56:1B:51:41:8A:DF:11:AF:5B:38:90:12:8F:6C:EE:D6:B0:5E:6D
Authority key identifier: 0E:11:0C:97:D5:F2:B1:FB:4D:35:82:88:C0:EA:62:AF:5F:20:C4:1A
Certificate issuer: /CN=0e110c97d5f2b1fb4d358288c0ea62af5f20c41a
Certificate serial: 019D38D333953A462E6D2A4C20DD5B7B1AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhEMl9XysftNNYKIwOpir18gxBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft
Manifest number: 0198
Signing time: Sun 29 Mar 2026 09:00:58 +0000
Manifest this update: Sun 29 Mar 2026 09:00:58 +0000
Manifest next update: Mon 30 Mar 2026 09:00:58 +0000
Files and hashes: 1: DhEMl9XysftNNYKIwOpir18gxBo.crl (hash: afLoegXhlH6e7AppYcic9qiueXn802ViQHaqId3nFw4=)
2: UgJvQvKty6Zh2ac8QLWpSTJ3e9Q.roa (hash: e7Y0YkdCjz1xJOGFlqqNmoUkXvlhwJtg0uSF5GJoHhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhEMl9XysftNNYKIwOpir18gxBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:33:95:3a:46:2e:6d:2a:4c:20:dd:5b:7b:1a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e110c97d5f2b1fb4d358288c0ea62af5f20c41a
Validity
Not Before: Mar 29 09:00:58 2026 GMT
Not After : Mar 30 09:00:58 2026 GMT
Subject: CN=5c561b51418adf11af5b3890128f6ceed6b05e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:45:68:2e:1a:3b:89:86:f1:30:28:1e:53:
8e:07:0b:7f:b8:e3:da:23:01:0d:5e:93:b5:61:85:
63:d1:0b:cc:9a:bf:8e:8b:aa:d6:85:7e:f7:fc:89:
3b:ee:1c:b9:f3:26:cd:db:75:62:a1:ab:bf:8f:c2:
98:9d:97:c0:c8:ef:2e:9b:e5:9d:9a:59:66:5a:06:
fe:83:55:bc:f5:c6:d5:da:91:2e:ef:d9:88:b1:e9:
ac:45:4b:73:50:8b:f6:cd:ca:81:32:1b:f2:c2:86:
0c:06:2f:5b:e5:8d:2e:0c:c2:ee:49:7c:7d:c1:8b:
2b:95:0a:11:e2:07:d3:0d:71:3e:cc:35:ca:d4:f3:
45:d3:f2:7f:76:8c:55:7a:8f:3c:67:04:85:48:a4:
9b:df:93:3e:49:e0:da:19:23:3c:f6:83:e6:11:b5:
c9:b6:64:63:da:b9:15:9a:1f:70:00:80:bc:2c:b6:
8b:a2:8c:d8:4b:c5:d0:a4:30:69:1b:a0:fc:6f:c0:
43:fc:5a:93:f8:b9:1d:14:5d:3d:a6:22:d0:1b:14:
82:cf:e9:f3:49:aa:dd:04:75:19:50:6d:00:57:69:
80:1d:8b:58:fa:90:50:1d:e0:aa:cd:84:95:fb:67:
3f:4d:59:f3:65:f9:f3:8d:ce:6c:71:cd:33:3f:90:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:56:1B:51:41:8A:DF:11:AF:5B:38:90:12:8F:6C:EE:D6:B0:5E:6D
X509v3 Authority Key Identifier:
keyid:0E:11:0C:97:D5:F2:B1:FB:4D:35:82:88:C0:EA:62:AF:5F:20:C4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhEMl9XysftNNYKIwOpir18gxBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:61:71:b3:07:a3:fd:0a:b2:38:ca:41:17:98:c1:e3:01:a5:
97:7d:3c:45:57:73:76:5a:35:7e:0d:3b:cb:2b:b7:0d:22:e9:
2b:c2:a8:24:2c:04:cb:04:0b:11:b9:22:23:12:ef:fe:ea:05:
f1:a2:3f:d6:36:e7:6d:5e:ce:37:cc:42:5e:ca:c1:9b:cb:b1:
b9:5b:86:8d:7a:ce:9b:98:9e:24:7b:3f:d1:61:9a:83:a8:cd:
7a:0b:93:7c:97:1d:41:7f:87:d2:59:54:31:f6:bb:fe:e2:e1:
c9:bb:3f:62:5e:3d:fd:89:f1:7e:18:81:ca:39:1c:f9:13:17:
21:49:4b:7c:4a:30:bd:f3:56:30:48:03:f5:0b:a1:e6:21:40:
bc:18:7c:f7:96:95:a0:30:96:18:e5:93:39:a7:06:dd:d5:e8:
d3:17:a6:93:cc:b2:7a:72:60:ee:44:03:04:88:58:87:65:4a:
a8:6d:33:f4:c5:25:d2:dd:33:96:9e:7f:cc:6c:ae:05:b6:0a:
ac:15:57:fa:88:9f:74:01:58:01:e8:55:fd:1a:89:c2:dd:38:
b6:f2:4f:05:72:b9:02:85:85:e5:41:5c:10:a1:30:26:08:31:
96:68:f4:e3:0c:6b:1b:ef:d0:be:d2:fd:09:08:8d:fc:cc:7a:
b5:00:a0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:46 2026 by rpki-client