Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
File: dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft (raw, json)
Hash identifier: 6VseK7YP0XM5O2vfukpyFZe+aXBVl/ro2QTi4zLD6R4=
Subject key identifier: F6:42:99:3F:B0:67:5E:21:38:88:92:82:91:18:97:5B:6F:30:E4:A0
Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Certificate serial: 019D3865D02D7E1A6F31A25F5590CBD3F67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:29 +0000
Manifest this update: Sun 29 Mar 2026 07:01:29 +0000
Manifest next update: Mon 30 Mar 2026 07:01:29 +0000
Files and hashes: 1: dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl (hash: jR3ifydFGkV0vMy0sejCw1GuCz8KD7B/E54YPlbrjhs=)
2: eBuAc98eLhdzaSpEXuI8KUheXdk.roa (hash: ZAyeKkTZKpzp6DSuRIfinH6S1nkpaZ2M6lG5LcE6ZAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d0:2d:7e:1a:6f:31:a2:5f:55:90:cb:d3:f6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Validity
Not Before: Mar 29 07:01:29 2026 GMT
Not After : Mar 30 07:01:29 2026 GMT
Subject: CN=f642993fb0675e21388892829118975b6f30e4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:48:98:a5:61:8b:cb:6f:7a:04:02:52:ca:
bb:ad:57:c3:29:a8:06:b1:e2:92:43:20:49:73:01:
58:80:d7:04:73:5a:83:8a:0b:d8:e6:cf:0a:1d:62:
75:21:7b:6a:04:26:71:84:9c:b7:7e:1c:ac:63:54:
26:7d:34:4e:2d:f5:f3:33:da:a2:c4:4a:ee:ac:cd:
49:b8:c8:d3:bd:19:e7:b7:03:f8:51:9d:6c:65:1c:
cc:1c:9b:7f:06:7e:e2:ee:56:a7:60:30:00:f3:37:
a6:fa:af:ab:18:0c:c0:30:25:2f:20:be:33:00:97:
8c:33:8f:d8:75:d6:3b:5e:c9:bb:e7:92:00:22:09:
71:dd:95:5e:b7:12:8e:32:01:43:cf:c9:ad:be:4c:
94:23:42:78:a7:bf:56:83:a0:23:f8:54:12:c8:84:
32:5b:ee:f5:f7:72:bf:9a:db:a3:96:e0:77:1a:5e:
75:15:d8:9f:36:1d:a4:ee:32:cc:94:c6:17:d7:42:
db:36:13:f6:42:04:14:d2:90:81:0f:1f:e5:07:6a:
ac:9e:9d:be:e5:ba:82:a8:09:16:47:dd:2f:61:8d:
3a:75:21:9c:d3:4e:c5:38:3a:ce:57:8c:12:46:d1:
f1:9e:af:a7:18:b7:5c:76:f0:54:43:8c:e3:af:25:
b2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:42:99:3F:B0:67:5E:21:38:88:92:82:91:18:97:5B:6F:30:E4:A0
X509v3 Authority Key Identifier:
keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:47:eb:ae:87:b4:d1:1d:2b:41:29:a0:91:a7:dd:cb:83:a4:
60:d3:5b:22:d4:b5:d7:eb:1a:10:7c:f3:58:54:97:e2:52:a8:
8a:41:f1:ff:92:25:17:d7:47:84:3e:88:8f:ff:46:45:24:d3:
56:68:06:34:6b:50:c5:a8:45:3a:55:5c:33:d9:9b:f4:71:f0:
8e:49:92:c0:86:df:d7:91:e4:55:13:1c:5f:d4:67:bb:85:40:
22:c2:1f:18:f1:56:39:fe:b0:9c:68:a4:ac:df:ed:fa:a1:c5:
c7:c8:63:0d:96:2c:63:97:e8:f1:80:0a:bd:8d:10:1d:bd:7a:
7d:6e:f2:b2:92:50:f8:06:ba:c3:27:02:21:51:e1:5d:a4:77:
d3:39:ff:92:7f:6f:d2:5b:b6:8d:89:5f:5d:e8:78:7d:57:39:
1e:a0:e0:45:c9:f9:e5:b8:7a:d4:ae:c9:5f:63:2f:de:76:51:
8a:1a:7b:87:28:d5:7b:52:87:17:50:97:b7:bb:99:6f:8d:5c:
73:09:b2:05:d0:7e:b7:75:ef:2e:e6:00:48:e9:de:a4:f6:00:
44:b7:52:66:74:e9:32:9e:00:ad:8e:3a:f7:13:93:f7:82:61:
70:54:a0:67:38:3f:06:2a:37:4c:74:04:91:ff:02:f0:8f:33:
18:51:d0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:07 2026 by rpki-client