Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
File: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft (raw, json)
Hash identifier: kaMN0EbysgsA1FxBPkzYr9EGOoabDy+KaHmEnRlx3Mo=
Subject key identifier: 64:7D:19:DD:1A:B3:02:84:9A:21:60:BB:40:16:8C:9D:89:90:C7:CF
Authority key identifier: 76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
Certificate issuer: /CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Certificate serial: 019D382E8634304C861C9E6793349D01F9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
Manifest number: 07D7
Signing time: Sun 29 Mar 2026 06:01:06 +0000
Manifest this update: Sun 29 Mar 2026 06:01:06 +0000
Manifest next update: Mon 30 Mar 2026 06:01:06 +0000
Files and hashes: 1: cljflfngv7VZa65xQ-duBbtPRE0.roa (hash: 9lokgvNxPt+p28kHYXp3QH4rvvO9XazJeqstX10GvAU=)
2: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl (hash: tjnBrVGMYvoGeD8G89satKBXcujv2ZZY2HcHg4MOR/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:86:34:30:4c:86:1c:9e:67:93:34:9d:01:f9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Validity
Not Before: Mar 29 06:01:06 2026 GMT
Not After : Mar 30 06:01:06 2026 GMT
Subject: CN=647d19dd1ab302849a2160bb40168c9d8990c7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7e:6b:f6:2a:2f:98:2c:58:63:3e:51:27:6a:
aa:5a:85:a5:9e:7c:36:23:1b:6d:77:b6:16:d1:6d:
bb:24:5d:d3:b8:14:35:f2:7e:b3:cb:41:ba:7a:b0:
0e:05:6b:41:65:12:41:2f:20:03:e3:78:e2:55:c8:
b7:fe:2b:0a:dc:5f:74:fc:a3:02:23:36:e4:34:bd:
63:9a:1a:5e:56:e2:57:8d:d3:ab:0e:4d:f4:a6:10:
a5:3f:1c:bf:64:4a:df:93:50:f2:c6:ec:6b:5d:a9:
ce:bd:73:79:8c:55:77:3c:dc:f6:f1:17:7d:84:55:
e3:cb:59:a9:ae:00:dd:6e:73:dc:d3:30:b7:08:33:
64:a9:fe:4b:0e:56:68:b8:11:2a:ad:27:a8:34:ed:
6d:24:09:62:dc:b9:1e:67:31:6c:3c:4a:d3:f0:b5:
72:f4:81:c8:3f:59:3e:8a:1b:19:01:e6:de:81:05:
79:3b:e3:ab:f1:db:d7:73:9f:5f:6d:2f:0d:3a:dc:
89:02:2f:6a:fc:ac:a2:ee:d2:57:69:d1:9b:7b:60:
9f:17:7f:36:7e:20:e8:52:66:df:be:dd:96:14:c9:
eb:c2:2b:09:c8:5f:13:14:eb:70:bc:fa:15:5d:f2:
39:1a:43:f8:9d:9d:7d:0e:e6:da:68:17:1e:5e:67:
a8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7D:19:DD:1A:B3:02:84:9A:21:60:BB:40:16:8C:9D:89:90:C7:CF
X509v3 Authority Key Identifier:
keyid:76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ef:21:7c:e4:d8:65:0f:d9:a6:cd:53:fd:53:41:e9:a4:f7:
c9:e5:18:91:15:34:b8:ab:fe:2e:a2:a0:09:a9:bf:05:bd:13:
f8:70:97:64:4f:84:b3:b6:4e:2f:45:2e:d1:05:c9:6e:41:42:
87:6c:cd:c2:80:09:ac:5c:14:dd:bf:a6:72:70:05:5a:e7:dd:
ce:c2:a0:92:15:9f:fa:e0:bf:be:94:6a:be:af:ff:f1:bd:d9:
d2:41:13:00:e3:38:64:89:58:a4:ed:eb:f9:4b:10:8b:c2:9a:
a3:a3:10:07:6c:f7:38:e9:07:bf:2e:11:63:70:22:1a:e6:62:
06:38:7e:f6:1e:2b:a2:64:dd:ed:1b:c9:8f:cc:ca:9d:b4:51:
e1:b4:de:68:23:cf:db:93:a1:a8:5b:bc:17:9f:ca:9d:35:53:
29:65:77:9b:7f:34:70:a8:c5:81:c8:fa:d8:6b:a0:8c:5e:c7:
21:b9:4e:a0:d3:9b:69:d9:93:ee:f5:a6:fa:4d:03:81:cb:1e:
aa:2d:1a:c0:2f:9c:c1:5c:bb:a6:01:72:3e:4a:80:76:59:16:
bb:df:7f:b0:c4:7d:a0:e9:59:dc:fe:59:a8:b6:35:fa:32:f7:
d8:e3:30:60:0a:5a:06:ab:52:73:41:44:f4:ff:02:08:00:d3:
b6:63:91:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:37 2026 by rpki-client