Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
File: dxLiD1ELIrghfN8NIRSWsbnB7bg.mft (raw, json)
Hash identifier: LOlYnQyCCHFlt7tuH0u/dypPhnJ4/OUCPySdHBRbK2I=
Subject key identifier: DC:C3:D2:D9:01:2C:C1:A5:D2:DB:F7:10:E7:6E:17:61:8E:8D:2D:C9
Authority key identifier: 77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
Certificate issuer: /CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Certificate serial: 019D3A8A6D53804889A4825014E85929BC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 17:00:43 +0000
Manifest this update: Sun 29 Mar 2026 17:00:43 +0000
Manifest next update: Mon 30 Mar 2026 17:00:43 +0000
Files and hashes: 1: dxLiD1ELIrghfN8NIRSWsbnB7bg.crl (hash: 09GP7hp7tuxLwmtJNusp4V8Fb7/BGBGbks0tmULmMDw=)
2: j2Zec19YMohuiWgyeOqj3yTZ1qE.roa (hash: 24aHxSxVGLUb8yk1YBdeTwbmPhDVWKEcsyuGoX47Z48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:6d:53:80:48:89:a4:82:50:14:e8:59:29:bc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Validity
Not Before: Mar 29 17:00:43 2026 GMT
Not After : Mar 30 17:00:43 2026 GMT
Subject: CN=dcc3d2d9012cc1a5d2dbf710e76e17618e8d2dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:b4:bd:a0:76:14:64:78:d0:0a:12:b6:e4:
0a:31:37:c1:a7:1b:73:00:e1:14:7f:4f:0b:8d:1e:
71:02:31:d2:11:9f:29:05:b0:a9:4b:bd:e7:d6:e4:
8b:ea:03:c0:75:2c:e6:84:6d:ec:e6:00:24:18:5e:
65:8e:29:d6:15:2e:80:80:5d:81:91:4b:72:85:4f:
ff:3c:64:5c:b0:78:95:7c:5e:b1:b5:37:5b:2b:8f:
af:70:14:00:0c:41:6d:e5:e1:1d:51:23:0c:e7:ba:
10:a0:8e:56:7a:70:7d:42:94:92:a4:0f:26:da:e5:
ab:05:65:6c:c5:84:f2:01:2c:2a:32:96:74:71:a3:
42:b3:76:f2:e2:06:67:16:f5:18:d1:63:ca:98:68:
11:96:51:86:fd:99:6d:8f:e3:e5:c1:05:07:dc:32:
e4:49:46:73:8f:65:ae:90:0f:27:61:ef:66:4c:1f:
f8:2d:4c:dc:9f:ac:7b:ec:5f:d9:1e:7d:29:8f:fb:
f0:e8:d1:05:cb:1f:0a:ba:51:a2:51:9f:fc:ab:78:
44:38:0b:5e:8a:65:90:eb:97:55:b5:5a:f3:d1:20:
2f:f3:b3:10:a1:3e:2a:72:1a:77:e7:78:cd:ff:ef:
db:ac:1c:d4:12:8c:32:ca:ba:01:96:01:1f:58:ef:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C3:D2:D9:01:2C:C1:A5:D2:DB:F7:10:E7:6E:17:61:8E:8D:2D:C9
X509v3 Authority Key Identifier:
keyid:77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ba:09:e1:57:9e:2c:38:d7:26:8c:93:88:57:3a:2a:a9:95:
69:90:73:2f:64:71:c9:08:3e:7c:e0:94:a5:86:72:cb:1d:2a:
51:3a:84:08:f9:91:4d:c6:b6:be:41:bd:bb:ec:00:40:b8:36:
c6:e9:7a:94:5e:f8:c2:70:b4:9d:03:96:0a:a7:f9:19:c3:fd:
16:08:ad:23:2a:96:40:1c:b1:78:d0:ab:50:60:40:66:7b:c9:
8d:76:56:91:85:c9:8d:79:54:2c:95:43:a3:f6:2b:de:a1:17:
73:ed:41:1b:0d:4f:e2:d5:ef:6e:43:d7:6d:84:d7:ad:5f:9a:
a7:ec:4a:dc:e6:97:26:72:a7:7d:90:97:d8:e2:1e:90:d3:5a:
03:23:98:37:1f:8c:93:70:99:6b:9f:d8:83:6c:c7:a4:4b:ba:
64:bc:ec:64:03:14:25:a9:dd:5f:d1:91:1a:48:96:ea:4a:d4:
9f:f4:dd:f7:5c:45:ad:04:d1:89:20:ed:46:14:bc:4b:83:34:
0a:66:d5:b4:09:f3:a7:76:ea:f8:be:5c:c3:6c:a8:8f:c4:a8:
ca:a1:6c:43:d0:76:ac:40:f2:19:ea:9e:07:24:ba:1a:24:1c:
d9:f0:26:13:80:c7:b2:87:3d:7e:68:91:d6:57:25:6e:fb:8d:
ff:f2:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:46:16 2026 by rpki-client