Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: QJRxWhXo7YB2Y47kJZNDwYtLxFNGRiUe987hPaaGBxg=
Subject key identifier: F5:9D:52:0E:86:3A:21:A0:01:2E:23:B1:C7:7F:C1:8F:12:22:27:33
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 019D38661FAE4D57A083294A85A138C3FF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: 1TwtEwBMlCxF8zqgEDzuBJ_MkQk.roa (hash: TD25ePA+FEqAqKpKYIGbiC60SkZANZcldOpqjTjdHRs=)
2: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: EaHudBcOv8mn7ouRQDhUT+MSlpITzDR7uc9P19HXUGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1f:ae:4d:57:a0:83:29:4a:85:a1:38:c3:ff:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=f59d520e863a21a0012e23b1c77fc18f12222733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:7f:c3:ad:ec:7c:82:39:a1:5a:0e:13:b7:
b1:12:60:0f:4a:2b:69:3c:6a:77:ad:a0:3c:8e:f8:
b9:83:b9:a3:88:0d:01:a1:e4:60:11:fe:30:5c:0d:
e3:4c:e9:25:a2:5f:e4:1e:fc:c3:0f:95:a7:b8:90:
24:9b:5b:c7:c2:d2:de:65:3c:d2:86:87:58:21:56:
9b:3b:23:ee:a1:36:20:66:a6:44:21:cb:93:d5:fb:
d2:b2:d6:89:ac:9f:2b:b6:b9:bf:ac:0e:ae:28:68:
f0:9f:3b:22:b8:39:84:61:1d:e8:2a:bd:96:b6:c7:
c8:d2:12:96:0a:53:f0:de:25:e8:65:b2:cf:59:4f:
d9:de:4e:79:10:20:7f:eb:ce:03:9c:74:95:df:d4:
ca:32:3d:d2:5a:ff:75:e0:fa:1f:07:8e:a0:6e:fb:
ad:82:26:c7:50:29:7a:84:a4:82:5b:3f:aa:71:7d:
2e:a7:09:9b:3c:1b:a6:f3:f8:56:d3:34:2c:45:f0:
95:3a:7e:f1:ae:d3:eb:18:6c:9e:0a:d7:5a:e7:76:
e3:a1:67:40:66:4e:ee:e5:96:2c:2e:dd:44:19:5c:
97:19:d4:ce:78:3a:84:42:44:da:2a:30:c1:66:bc:
40:d2:43:7d:ef:65:8b:66:44:39:42:99:ce:46:d2:
42:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9D:52:0E:86:3A:21:A0:01:2E:23:B1:C7:7F:C1:8F:12:22:27:33
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:79:b0:52:f9:9d:b2:45:e7:19:12:3e:61:ae:ee:39:11:dc:
83:b0:b0:0c:ed:49:da:a2:5d:7b:d8:f6:84:ea:86:a0:8f:a1:
8b:9f:47:fd:63:00:50:10:22:f6:d8:e3:ef:61:05:79:03:22:
b5:1d:36:d2:77:a3:84:9a:3d:2f:62:ab:cc:96:a8:b8:b7:5a:
17:4a:c5:d5:11:81:f8:dc:15:74:97:1b:28:59:cd:60:7e:a4:
d9:74:4b:65:f9:3d:07:f1:53:bf:e2:cc:a3:02:ab:68:6e:14:
44:f0:69:72:91:d4:bc:38:7c:f9:98:27:96:e4:5d:a0:99:d6:
71:d8:49:09:f3:aa:6d:c6:55:e4:8b:36:26:bd:81:c8:4b:c7:
b6:12:f2:14:0d:13:f4:25:5d:cd:bf:55:5c:1a:30:13:64:17:
7b:05:65:15:da:c5:4c:ac:52:d1:b9:23:bb:2f:d9:03:07:a9:
37:ff:89:fb:e0:ec:66:58:ba:11:9b:1b:68:b7:95:7d:72:6c:
ab:2e:1c:4b:06:17:5d:d5:80:8d:47:17:d8:64:f7:e3:c7:13:
fc:1b:d7:41:4f:6a:86:d6:e4:c7:2b:47:26:dc:d5:5e:ad:5b:
34:44:df:f6:40:52:bd:39:08:21:2d:3a:e6:8b:73:1b:9d:d4:
79:36:c3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:52 2026 by rpki-client