Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
File: dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft (raw, json)
Hash identifier: uACOEy3qdRqo8QrOXxtI7E1puIujXGPuvS/0jVsGrEA=
Subject key identifier: 64:69:81:AF:DC:17:EC:0C:96:31:9C:5A:9B:C5:2B:79:60:28:7B:D0
Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
Certificate issuer: /CN=75535bade37a3d6fc380442a285e157b984ca91d
Certificate serial: 019D38D2CDA0AA59A8A13A1245C8BFA1FDBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:32 +0000
Manifest this update: Sun 29 Mar 2026 09:00:32 +0000
Manifest next update: Mon 30 Mar 2026 09:00:32 +0000
Files and hashes: 1: OyLfbjr156VI2R6lu1s2sko4xuQ.roa (hash: wsr92dwS2psbt7DS2shBW+KX6UaQH5WPGbSf3r4UrZg=)
2: dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl (hash: D6+fPEl5MJURbvqlPn6Wy98Bw0Fu5CsWvg1zCvhBt7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:cd:a0:aa:59:a8:a1:3a:12:45:c8:bf:a1:fd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d
Validity
Not Before: Mar 29 09:00:32 2026 GMT
Not After : Mar 30 09:00:32 2026 GMT
Subject: CN=646981afdc17ec0c96319c5a9bc52b7960287bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:9a:2c:74:8d:3a:e3:0b:68:5d:ce:40:75:
d5:ae:03:44:0b:97:50:35:6f:db:0c:08:3a:4d:a7:
fc:cf:a9:ba:01:f9:7e:a1:5f:95:2e:b9:da:c7:f4:
b2:e9:ce:dc:38:75:aa:0d:18:02:fb:d8:f2:ea:ca:
a6:fd:5c:80:4c:14:7a:7e:56:fe:30:98:3e:e7:1e:
b1:d7:a5:03:04:f6:f2:9b:74:92:90:26:68:28:30:
17:f8:d2:0c:01:67:65:d7:38:dc:4b:b6:bf:fc:67:
36:78:c9:de:61:b0:38:48:b0:22:d2:61:4c:34:7d:
62:22:df:ba:95:5f:bd:75:f8:d3:18:76:e2:26:51:
63:79:f8:01:45:8c:39:fd:a5:6a:7f:72:dd:38:d8:
59:92:21:7f:00:b0:1d:fc:b2:bb:07:95:cb:35:49:
76:c4:a1:58:ec:ae:cc:88:5a:d4:d9:3b:2c:ec:35:
f3:d4:8a:b2:e5:da:e6:db:9f:f0:08:10:46:8d:71:
40:0f:50:38:20:ff:ea:4a:59:04:49:09:20:58:0d:
44:1f:e9:b2:67:db:b6:d2:e5:72:eb:e2:88:7f:29:
79:0c:30:fc:91:25:af:8b:37:47:5a:83:d7:b8:f0:
10:31:58:13:b5:4e:fb:1d:64:b5:bb:57:86:6d:8b:
07:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:69:81:AF:DC:17:EC:0C:96:31:9C:5A:9B:C5:2B:79:60:28:7B:D0
X509v3 Authority Key Identifier:
keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a9:6f:4d:1f:23:c4:60:5f:05:bb:dd:20:c3:f7:ac:a8:12:
a6:79:4b:84:40:c2:14:3a:1d:8c:93:3e:b9:a6:cd:39:b4:d2:
a9:2c:90:6e:c3:5a:b2:dd:a5:a5:de:9a:d7:ec:f7:79:7c:95:
19:d0:94:aa:f8:3e:8c:fc:1a:71:42:ac:82:0d:de:77:d0:36:
3d:08:60:db:55:f2:4c:d0:36:d4:52:57:45:5a:ea:75:96:cb:
c3:ce:92:a9:47:e5:ce:98:1c:9d:14:5c:b7:e0:94:1f:54:84:
76:08:80:f3:ea:a9:1e:b7:e8:b5:a8:0b:3d:b0:27:14:8d:6b:
dd:88:f7:a6:75:c1:73:34:73:b8:30:33:f3:72:83:76:25:17:
c3:3d:b7:3e:93:31:88:38:cf:de:6c:d7:5a:93:44:51:71:b4:
b2:ff:79:43:ca:46:98:6c:58:ad:b2:58:0a:fe:5a:41:b2:ee:
2b:b2:e7:34:61:d9:07:72:f6:4c:0e:fc:46:b8:45:05:83:eb:
77:de:4c:77:ab:90:8d:97:2a:e3:fd:8e:46:ec:26:f7:64:d8:
1a:eb:c5:1f:19:6d:a3:3b:af:37:66:44:cb:f0:b3:91:bd:03:
05:5b:15:52:bb:68:62:d9:83:0c:f2:05:00:12:8b:c7:b9:cb:
b7:2e:9e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:09 2026 by rpki-client