Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: RO1OAnAo8H6Enc6UiOUErvlR/4hJuUTmsdaJs8o3enM=
Subject key identifier: 85:23:76:C1:B1:4C:66:26:A6:53:B3:AE:7E:AF:6F:39:C3:DC:9B:AD
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 019D39AF7A023256A56DF4959291FC644779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 13:01:34 +0000
Manifest this update: Sun 29 Mar 2026 13:01:34 +0000
Manifest next update: Mon 30 Mar 2026 13:01:34 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: WXsRx9RLJ86k9WRgSC78fI+91JyAFlTNtkvJLiblgMo=)
2: bml28OP4KoXNao7A2GMBGmYqamQ.roa (hash: 0pR6vIDA6MRs37zqStEVFf7/l/MWTnFFDP3/gQtqi2o=)
3: ycbQTRWdjL9Qvr33IrnbqXH0Bqs.roa (hash: nglQg5MmKlEjssrWx8wngl2AAIBCB6KoQKV4TEUoUr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:7a:02:32:56:a5:6d:f4:95:92:91:fc:64:47:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Mar 29 13:01:34 2026 GMT
Not After : Mar 30 13:01:34 2026 GMT
Subject: CN=852376c1b14c6626a653b3ae7eaf6f39c3dc9bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:eb:57:db:92:85:c6:77:37:f9:d5:c5:7f:
8d:df:7d:e8:97:4e:e1:1f:3e:e7:c0:37:7c:ff:34:
24:04:5f:6d:a6:60:c2:94:e9:5a:0d:e4:68:bb:31:
3f:a5:df:80:c3:10:10:43:fc:97:6a:d4:2a:f2:e7:
18:6f:13:ff:7d:fd:df:3c:52:77:e0:a0:97:6c:4d:
57:aa:86:e5:3b:85:e7:e2:0f:1b:46:4e:6b:42:b5:
24:ad:44:c4:d0:80:24:f1:88:55:fd:a3:d1:f2:7e:
63:23:da:3f:e1:ba:df:0d:9d:b4:64:32:e3:2d:b3:
a4:9f:28:26:e7:7a:a9:b9:80:3d:76:3d:dd:0c:d0:
0b:79:fc:2f:1b:38:eb:2a:5d:f4:21:bd:22:f3:92:
7d:0c:58:24:59:25:8e:83:ce:f1:8a:cd:63:dd:5f:
b8:05:df:72:da:2f:a9:79:af:7a:c2:e0:2c:8f:10:
35:1f:00:26:27:5e:ff:3a:67:79:59:8b:32:54:ab:
da:c6:78:f2:a8:7f:95:b1:df:48:ea:2c:31:2b:82:
89:a4:a6:70:1b:92:d1:db:d2:e9:0a:59:a0:b2:a2:
6b:c9:26:94:0a:d5:21:fa:15:09:60:b6:ef:79:74:
ed:50:0d:19:77:12:57:79:39:e1:91:c3:b3:f7:c7:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:23:76:C1:B1:4C:66:26:A6:53:B3:AE:7E:AF:6F:39:C3:DC:9B:AD
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:89:4c:1b:1d:0b:ad:3c:1c:f4:7c:51:f9:86:53:f7:10:47:
e9:83:41:d0:ca:ce:50:9c:09:64:8d:0b:bf:d2:4b:d1:5f:48:
cf:7c:da:79:4d:b8:b0:e0:14:95:99:fc:fb:99:01:3f:0b:09:
0a:f5:59:f4:a9:72:31:eb:30:2e:4f:63:ea:aa:db:05:de:db:
46:e9:28:ba:c2:b1:e4:da:75:00:78:9c:46:85:70:01:98:7b:
49:5c:75:f3:bf:eb:b1:37:a4:c9:b1:39:cd:49:43:50:2a:48:
23:e6:a1:4c:1e:90:3c:c5:3d:f5:5d:2f:3b:62:de:79:ed:6d:
ed:79:b6:15:0d:9d:e1:1e:27:3e:50:04:25:57:c9:73:35:a9:
ce:42:6d:55:ae:b9:fb:8e:ed:81:dc:53:17:b7:ae:9d:51:b1:
70:a5:f4:89:86:1f:9b:6d:62:f8:30:fb:02:65:57:7d:5d:5e:
18:04:92:ee:bd:5b:e2:58:2f:bf:cb:b4:3c:b0:2c:32:57:65:
1e:a2:d1:e1:df:b9:6f:5f:ff:33:9f:0c:33:b2:4d:c9:8b:d6:
91:c9:29:b8:ab:e7:da:6e:45:22:40:2a:84:8c:53:03:a4:51:
9c:38:7e:97:9a:84:e2:c2:29:ed:73:cf:63:12:8a:9b:87:16:
f8:28:18:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:39 2026 by rpki-client