Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
File: DycDq41ZdUqyeopRaFRZG_sPLbc.mft (raw, json)
Hash identifier: mtanuaRtRuF/w4/RCJ9SvrfdCEQOElVir//d/cw0360=
Subject key identifier: 5A:99:4D:CF:AD:DA:B7:FA:D5:22:23:F6:B5:3F:37:49:3E:F3:37:11
Authority key identifier: 0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7
Certificate issuer: /CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
Certificate serial: 019D39419F988B3B5A6CEFEC10FFB84ED18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
Manifest number: 02A0
Signing time: Sun 29 Mar 2026 11:01:35 +0000
Manifest this update: Sun 29 Mar 2026 11:01:35 +0000
Manifest next update: Mon 30 Mar 2026 11:01:35 +0000
Files and hashes: 1: 1-L6Xar872u4_5jc1ukVWvIonRqU.roa (hash: v1Q3LXinOWm6sqSKFH1Z+RwnwoZCuDnEGlZUL13Yh78=)
2: DycDq41ZdUqyeopRaFRZG_sPLbc.crl (hash: UShG7ViOnI/pHyMpvM2ApgCnVLqFRRgtWkIosL7Qbhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:9f:98:8b:3b:5a:6c:ef:ec:10:ff:b8:4e:d1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
Validity
Not Before: Mar 29 11:01:35 2026 GMT
Not After : Mar 30 11:01:35 2026 GMT
Subject: CN=5a994dcfaddab7fad52223f6b53f37493ef33711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:6b:d9:c1:20:4f:aa:13:17:c6:8d:a9:f9:
64:0f:ce:91:c5:3f:56:92:03:72:9b:22:ca:79:9d:
02:74:d3:0c:70:e3:ec:ae:59:7b:04:05:54:84:70:
e3:46:a8:09:4d:78:dc:9b:90:e7:fe:08:a8:a2:90:
a8:64:9d:eb:e8:d0:17:cc:c6:bd:df:65:3a:c9:c8:
74:0c:40:ec:0a:8a:fa:64:b8:f5:7e:c1:31:72:ba:
7a:59:9e:ae:4e:00:10:ad:63:bd:24:e4:95:66:73:
ab:28:01:dd:9c:4f:f6:64:df:4c:6f:e8:d9:bf:10:
52:b4:20:6a:75:fb:0b:ea:9b:86:76:bc:15:94:57:
29:22:32:45:dd:5f:6f:93:f1:ea:2b:0b:d9:84:e7:
66:d9:43:20:b4:67:28:fb:ad:18:d7:bc:a6:7a:70:
a6:c9:08:29:28:b9:39:3a:d4:5a:94:8a:cf:aa:d4:
bf:f8:b1:78:2f:4e:91:ff:e5:14:d6:68:f4:2d:f8:
6a:09:a8:60:a2:41:e3:df:fc:e9:20:05:04:4a:ee:
b2:83:b6:f5:8f:f1:6e:e7:c8:77:b4:a3:76:f2:94:
0a:06:d1:8b:fd:cc:47:4e:e0:a1:e6:c8:30:a7:ca:
03:be:52:fc:5e:11:76:f4:3b:0a:ec:74:b6:ae:81:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:99:4D:CF:AD:DA:B7:FA:D5:22:23:F6:B5:3F:37:49:3E:F3:37:11
X509v3 Authority Key Identifier:
keyid:0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:80:17:42:f7:44:3f:a6:a3:ed:3c:99:97:2f:b2:39:db:60:
cb:f8:27:47:51:70:b8:ec:ae:6c:9b:8c:d6:6c:a3:82:a8:f4:
53:b6:7d:29:4f:b1:19:de:e4:5e:19:c6:ac:7c:25:92:03:84:
60:f5:bc:81:42:74:93:5a:e3:41:29:d9:71:ec:4a:78:59:e9:
33:1a:37:02:88:40:d2:43:73:63:01:a0:d4:3d:4d:73:ec:c8:
91:5d:c5:d5:f3:09:bd:83:d2:1c:91:d4:16:44:65:ca:dd:47:
7e:91:b1:a7:70:64:f1:c1:b6:1c:b3:6d:e3:17:90:38:8a:41:
79:88:fc:c6:0c:c4:17:ae:17:d7:70:81:ae:2f:32:99:d2:9d:
6b:0d:e3:1c:cf:8b:53:07:c3:d0:c8:94:bc:eb:d1:e7:e1:35:
a2:33:12:fd:b5:9b:67:08:ae:17:2a:5c:dc:b7:8e:aa:51:96:
0a:6a:a6:4b:35:38:39:53:49:10:66:bf:87:14:05:5f:06:5a:
b6:9b:4a:58:64:58:89:ee:9f:0f:5e:ab:d0:5d:e8:20:06:b5:
a2:66:fb:db:c3:39:1b:b6:d4:48:45:d8:91:97:4d:b3:f4:3a:
87:b5:2f:d1:42:bd:dc:5a:b5:c5:97:32:1c:fd:5c:12:b1:a0:
7c:a7:de:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:37 2026 by rpki-client