Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
File: DNwH_ab01Vt8gYLJKaPErDwKgv0.mft (raw, json)
Hash identifier: U2NQHNMR5w9OuiPcjE24YlM+7rIZoJ0H/gTIa7Qnswc=
Subject key identifier: AD:3C:50:B5:B9:F1:69:C2:BF:31:42:9D:B2:50:7E:6A:55:7C:AE:35
Authority key identifier: 0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD
Certificate issuer: /CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
Certificate serial: 019D390A2193817B6AFEF5FBD71A0C859D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
Manifest number: 15C2
Signing time: Sun 29 Mar 2026 10:00:58 +0000
Manifest this update: Sun 29 Mar 2026 10:00:58 +0000
Manifest next update: Mon 30 Mar 2026 10:00:58 +0000
Files and hashes: 1: DNwH_ab01Vt8gYLJKaPErDwKgv0.crl (hash: Tm07T9/CUwjGmoE+aflmKzAQEVxEL6JDbmsEaqEdKBc=)
2: ywVzjPA1JlKTUm2ojiiIqywQkjA.roa (hash: Efr8yAzRIBUZFz+Fjffxu8b2LYG9UYl0V4c7dQtT9tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:21:93:81:7b:6a:fe:f5:fb:d7:1a:0c:85:9d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
Validity
Not Before: Mar 29 10:00:58 2026 GMT
Not After : Mar 30 10:00:58 2026 GMT
Subject: CN=ad3c50b5b9f169c2bf31429db2507e6a557cae35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:c5:6d:07:11:fd:88:41:a9:6a:a7:4a:ab:
d0:c6:96:00:98:f2:b0:77:49:1d:b4:03:8f:6a:3d:
f0:ee:86:91:ba:bc:3d:30:5f:82:9f:7a:b8:b3:70:
d9:99:ef:df:d9:79:81:49:ff:3f:02:ee:8f:b6:c7:
69:59:60:56:e6:3a:13:8e:1a:3e:6c:f9:4d:30:e2:
5c:cf:ee:a7:44:c5:eb:27:d4:64:df:08:e7:0e:58:
91:76:77:02:ba:8d:af:e3:c0:2b:a0:54:a7:90:24:
b7:b2:4b:04:81:49:27:6b:7a:7b:95:f5:12:a5:3a:
68:35:50:8e:31:01:aa:68:18:d3:43:86:fc:4a:4a:
2d:ac:c0:de:04:b4:a8:f6:5e:74:74:17:a7:9b:64:
e3:60:b1:47:7c:de:03:10:0f:87:5d:a5:0e:02:48:
27:21:5b:ac:cb:80:c4:92:8f:2d:62:64:90:24:1c:
ce:20:4a:b9:57:bb:82:8b:3a:02:bd:c3:c8:af:6e:
e6:b1:18:4b:50:3d:42:0b:20:e5:06:6c:62:46:07:
b6:e3:72:e6:e0:96:25:d3:97:96:c2:ca:f1:90:cf:
03:7d:9f:25:90:5e:6a:03:69:d2:73:5a:8d:de:31:
fd:d2:0e:25:00:29:43:0e:ae:0a:f2:cd:76:34:88:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3C:50:B5:B9:F1:69:C2:BF:31:42:9D:B2:50:7E:6A:55:7C:AE:35
X509v3 Authority Key Identifier:
keyid:0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:d6:fe:bf:3b:09:51:b1:73:ed:9c:84:7c:cd:13:18:05:81:
9b:d9:63:98:42:d0:05:b9:8d:b6:a5:07:4e:3d:17:a9:b6:55:
3d:e2:aa:bd:d5:9e:6b:88:e9:af:be:f4:ac:a1:d7:80:16:50:
91:2a:8c:a0:87:a7:89:81:94:95:c1:e6:80:8f:58:67:14:ce:
f4:2a:87:60:f8:e2:c2:80:8b:2d:91:bc:00:47:e4:5b:4f:00:
a8:d9:10:36:0a:de:36:d4:fa:aa:3c:b7:72:83:34:52:0d:98:
35:d7:04:8e:bc:2f:f7:77:42:d1:5d:ea:3c:8d:ef:81:07:58:
35:4e:31:b7:0f:7a:23:32:b8:b5:6f:18:4a:62:27:7a:63:23:
5d:26:12:41:5c:ba:25:54:83:2b:c7:0a:84:4f:bc:a4:cd:eb:
e6:8f:fe:54:59:8d:e3:99:38:a0:dd:8b:9b:5b:0c:de:97:3c:
8e:cb:e4:d3:7a:57:97:1e:eb:6f:3d:35:a8:47:91:a8:62:64:
4f:9a:f0:7b:10:63:98:2c:03:ea:04:dd:dc:74:0f:81:c9:52:
c6:96:e8:ff:44:a4:2b:a5:78:4e:32:8c:ce:82:d9:ca:b2:81:
15:8e:2d:7c:61:4d:05:f0:a3:32:1a:fc:68:f4:3c:3b:2a:8c:
1e:56:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:27 2026 by rpki-client