Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/58b023-499a-4ace-bf27-9192663580f5/1/dHBWcQnylixWvvsWessxhw68ZJI.mft
File: dHBWcQnylixWvvsWessxhw68ZJI.mft (raw, json)
Hash identifier: 8OdFM6o8dVUuyUfU3/jSmV+YWWMzShIEBETwcg+Cdws=
Subject key identifier: FC:B3:31:56:3C:87:4B:44:B2:C0:F3:9C:BB:83:BA:01:96:65:DB:45
Authority key identifier: 74:70:56:71:09:F2:96:2C:56:BE:FB:16:7A:CB:31:87:0E:BC:64:92
Certificate issuer: /CN=7470567109f2962c56befb167acb31870ebc6492
Certificate serial: 019D3977CA559508F3EF464E67022F6F6ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHBWcQnylixWvvsWessxhw68ZJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/58b023-499a-4ace-bf27-9192663580f5/1/dHBWcQnylixWvvsWessxhw68ZJI.mft
Manifest number: 12
Signing time: Sun 29 Mar 2026 12:00:44 +0000
Manifest this update: Sun 29 Mar 2026 12:00:44 +0000
Manifest next update: Mon 30 Mar 2026 12:00:44 +0000
Files and hashes: 1: 5NBoP5YJg3VJIdV3zP-gsUBPfjA.roa (hash: ZyXwC5m+97/K647Lw0XhFO8y4yo8d1DbZKjoAZlIn7k=)
2: dHBWcQnylixWvvsWessxhw68ZJI.crl (hash: /SuQ9X6+ZX34Za9sAT8K3vZZ7ZvUMxDQfolOoMjN7HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/58b023-499a-4ace-bf27-9192663580f5/1/dHBWcQnylixWvvsWessxhw68ZJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/58b023-499a-4ace-bf27-9192663580f5/1/dHBWcQnylixWvvsWessxhw68ZJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHBWcQnylixWvvsWessxhw68ZJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ca:55:95:08:f3:ef:46:4e:67:02:2f:6f:6a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470567109f2962c56befb167acb31870ebc6492
Validity
Not Before: Mar 29 12:00:44 2026 GMT
Not After : Mar 30 12:00:44 2026 GMT
Subject: CN=fcb331563c874b44b2c0f39cbb83ba019665db45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:1a:80:4f:86:f4:12:1a:b3:73:ef:fe:67:
0f:32:36:c1:ad:fd:a4:7f:13:1d:4f:eb:f5:57:52:
17:93:fe:83:d4:ee:14:5c:5c:6a:67:9f:75:9c:7b:
d5:c1:86:94:a9:45:0a:d5:85:89:52:7c:08:d9:12:
61:ac:12:6d:eb:63:3c:4b:bd:7d:7c:c9:4a:7a:ea:
0b:c2:8a:13:f6:5c:a7:a1:1d:0a:fb:8c:e3:96:ed:
73:ed:01:5e:9f:78:c8:c1:a7:a3:17:9b:19:91:63:
85:c9:5a:4d:c9:cf:1e:b5:02:78:6a:f0:35:0c:e2:
04:3a:96:2e:f1:21:5d:2e:9f:a8:f6:37:b7:de:b3:
1e:d1:eb:db:f4:ba:c5:08:fc:95:a9:cd:f7:21:39:
22:7b:84:6b:0b:27:a4:57:1b:cf:97:2a:c4:69:90:
91:0c:4e:af:1c:87:b6:14:39:a9:a5:c0:a6:c1:70:
e2:3e:6a:b2:51:9b:ab:33:40:d3:9e:f3:67:13:d6:
86:04:38:f8:f0:2a:74:ad:01:6e:f4:6f:d5:ba:f6:
e9:cd:bb:f2:7d:98:78:37:2e:53:b7:24:82:2f:93:
0d:dd:68:a1:39:67:ad:2f:ba:b0:f4:27:81:8a:6c:
0c:af:4e:9c:87:dd:6c:f3:8d:fd:64:ff:91:55:dd:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B3:31:56:3C:87:4B:44:B2:C0:F3:9C:BB:83:BA:01:96:65:DB:45
X509v3 Authority Key Identifier:
keyid:74:70:56:71:09:F2:96:2C:56:BE:FB:16:7A:CB:31:87:0E:BC:64:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHBWcQnylixWvvsWessxhw68ZJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/58b023-499a-4ace-bf27-9192663580f5/1/dHBWcQnylixWvvsWessxhw68ZJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/58b023-499a-4ace-bf27-9192663580f5/1/dHBWcQnylixWvvsWessxhw68ZJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:bb:97:00:68:44:a9:e4:17:95:a2:2d:84:57:28:94:00:b4:
b6:3f:7e:bb:89:7d:1c:80:d0:5c:a3:59:94:50:dd:a2:2a:e3:
cb:22:a9:86:ef:1a:18:71:49:f3:db:a1:bc:cd:15:cd:2f:bb:
36:5a:2d:75:8c:e6:93:60:c2:cd:cf:06:fc:d1:fb:6b:4f:5f:
68:fc:44:31:c8:3c:bc:16:84:67:a9:1a:f0:1c:c4:e9:e3:a0:
22:94:e6:6d:83:23:63:2c:de:2d:84:25:36:40:71:38:fd:1d:
3e:de:74:27:00:7a:a3:57:89:3d:84:9d:36:eb:11:12:64:03:
a0:be:a2:24:3f:28:74:1e:e9:7f:94:4f:ae:87:32:d4:6b:d7:
af:ad:b1:21:a6:df:3c:f3:26:57:ce:0a:39:0a:f4:24:fc:32:
de:f4:e7:24:c7:04:ff:9c:4e:5c:9b:02:bb:11:2f:1f:ba:8d:
bc:06:e4:af:b5:68:a2:bc:ef:2e:0e:9f:6f:3a:c8:17:83:de:
52:49:46:e1:b0:c7:98:84:43:42:25:74:88:2d:ef:6e:06:97:
dd:e1:ae:95:ec:e9:3f:f2:4d:b7:73:3f:73:00:a1:06:28:04:
49:c1:b6:9f:f5:e6:0d:7c:a6:3a:77:bb:74:84:dc:76:3c:55:
d0:92:69:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:19 2026 by rpki-client