Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json)
Hash identifier: FUeQFWdp9bvU0v6+81R85VfdxWPM0k6+O6+osQMNySY=
Subject key identifier: 93:65:F3:8B:CF:11:D4:F6:1C:18:90:A6:E9:87:F9:C0:89:9C:2D:1E
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 019D36ADBE66E8BF0E236D5015C3915FFC48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
Manifest number: 0FF2
Signing time: Sat 28 Mar 2026 23:00:49 +0000
Manifest this update: Sat 28 Mar 2026 23:00:49 +0000
Manifest next update: Sun 29 Mar 2026 23:00:49 +0000
Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: Oq0O7Z4kZwdbKJoKoK9Ls+rCzijp1L/fuXOqgGSd0D0=)
2: x5ebKc9_3qA7pEOC0_BnOS1B8oI.roa (hash: AqP1AEgenjD2KrPY+QLH5krFzTJA90JozOTpwzG6a5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:ad:be:66:e8:bf:0e:23:6d:50:15:c3:91:5f:fc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: Mar 28 23:00:49 2026 GMT
Not After : Mar 29 23:00:49 2026 GMT
Subject: CN=9365f38bcf11d4f61c1890a6e987f9c0899c2d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0e:68:a2:2a:10:03:6d:7a:fd:87:dc:73:3a:
12:9a:be:2e:37:f9:39:85:c4:9c:ec:c1:ff:88:33:
df:2c:4d:f2:b9:36:f8:91:ef:5c:bd:07:78:93:46:
ff:83:34:6d:2b:e0:49:ac:97:d2:9d:9d:36:28:8a:
16:a1:a4:0c:33:90:c7:31:d4:5f:9c:f3:7d:17:92:
5e:91:b6:ff:c0:1e:87:3b:6a:dd:19:07:6c:34:e1:
4b:bb:3f:fc:24:87:c7:fc:f4:38:9c:79:99:dc:90:
52:d4:64:37:fe:bb:71:2b:54:18:03:07:a7:84:8d:
44:22:39:7d:68:68:ae:40:a0:2c:63:e2:a8:60:67:
19:aa:3f:1c:58:76:7f:6d:44:d6:e1:d0:18:ea:6c:
71:eb:1d:28:12:b0:10:ae:c8:ec:4c:be:da:0e:62:
5d:8f:5f:6a:82:20:27:61:42:9d:32:ff:08:6b:53:
2a:4b:43:2f:dd:29:ef:1c:c8:d9:20:71:13:ed:4a:
46:dc:8a:77:79:55:e1:87:ce:ef:56:d9:83:56:e4:
be:44:72:1c:6d:00:be:0d:e3:5b:4c:e4:9a:32:df:
42:86:39:b1:6c:9c:e1:02:02:92:9a:75:fa:1d:ae:
af:2b:1e:ca:0b:19:89:e4:22:08:0b:21:19:1a:1a:
95:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:65:F3:8B:CF:11:D4:F6:1C:18:90:A6:E9:87:F9:C0:89:9C:2D:1E
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:94:e0:1e:af:a3:6e:85:d2:b1:e5:77:3f:88:69:e7:ac:30:
08:4e:fb:06:af:00:0f:74:74:42:82:34:7d:bb:f1:a2:8e:0c:
d8:6f:b6:8e:76:d0:1d:e4:06:93:ff:85:83:7c:34:cf:e7:8b:
44:12:d1:65:02:06:e5:b0:ba:5b:1c:e3:ca:11:3a:61:40:5b:
9d:47:58:fa:c5:e2:13:9e:17:5a:62:fb:32:0c:a1:a6:fb:e5:
cf:02:8a:96:d9:d6:b3:02:88:87:ae:05:7d:33:f1:df:9d:0b:
64:2b:aa:b0:c6:c9:c5:de:10:eb:4a:12:da:28:3b:6d:f8:8c:
99:fe:ba:80:de:0e:ae:a8:6f:b1:d6:4d:9e:87:01:23:2f:07:
6b:d1:eb:25:c8:6c:07:7d:3b:b3:d6:21:3a:bd:2d:1f:ac:91:
74:35:fa:a4:74:5b:41:8d:0b:7d:df:ff:fd:79:97:8f:dc:06:
bc:53:54:50:b4:0e:71:b0:80:a4:ce:8d:79:21:03:8e:1a:5b:
74:88:a9:30:ca:8b:ff:c4:dd:89:3f:03:84:0f:ed:f4:18:f5:
47:15:71:be:4a:0c:03:69:4f:16:b8:e1:fb:35:bd:2d:47:a3:
65:92:c7:fa:02:23:df:d1:3f:da:98:95:f2:17:8b:47:3b:c1:
fb:4c:a7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 05:51:05 2026 by rpki-client