Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft
File: _dpVEEhBC7XEfr24O_WBiMSjBrI.mft (raw, json)
Hash identifier: mRk7wQgQlpPGEz2YhUdhjrcC9H55NR0OVtFkVH9+9cg=
Subject key identifier: F4:3B:B4:0B:65:6F:9D:64:C5:88:DC:46:72:FC:C0:6A:E8:34:D7:A9
Authority key identifier: FD:DA:55:10:48:41:0B:B5:C4:7E:BD:B8:3B:F5:81:88:C4:A3:06:B2
Certificate issuer: /CN=fdda551048410bb5c47ebdb83bf58188c4a306b2
Certificate serial: 019D3789595F0D7B6416B0ACB2E33C077B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dpVEEhBC7XEfr24O_WBiMSjBrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft
Manifest number: 0242
Signing time: Sun 29 Mar 2026 03:00:41 +0000
Manifest this update: Sun 29 Mar 2026 03:00:41 +0000
Manifest next update: Mon 30 Mar 2026 03:00:41 +0000
Files and hashes: 1: KtnocdddxJBdRD7_mxcbxQUVgAw.roa (hash: uodzOPNhYtz0DtIVS4bojcJg1Fc+vQzF0fTUS+I6as8=)
2: _dpVEEhBC7XEfr24O_WBiMSjBrI.crl (hash: 7oxEkG5PD4lYkyb8cqW5r4VTlwhKS9ndbW5+oP+qDIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dpVEEhBC7XEfr24O_WBiMSjBrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:59:5f:0d:7b:64:16:b0:ac:b2:e3:3c:07:7b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdda551048410bb5c47ebdb83bf58188c4a306b2
Validity
Not Before: Mar 29 03:00:41 2026 GMT
Not After : Mar 30 03:00:41 2026 GMT
Subject: CN=f43bb40b656f9d64c588dc4672fcc06ae834d7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:29:c1:0e:66:00:b5:de:42:be:07:6e:d4:
d0:ce:ee:87:8f:55:71:bd:dc:46:ec:18:01:cf:9f:
2d:ff:1b:e0:69:ea:e2:8c:ee:ab:be:74:3c:39:46:
eb:f7:00:bb:8d:03:56:18:4a:fb:16:28:c5:5c:28:
ce:ab:a2:a9:9a:4c:c3:2a:41:d4:1f:31:e4:47:0c:
72:b4:4c:fb:69:73:4b:8c:67:38:18:3d:08:e4:1f:
ac:65:e8:6d:c8:bc:80:13:bc:df:d3:30:8d:55:bb:
d3:f0:ae:09:03:8c:a5:55:d8:04:4c:cb:58:47:ed:
9b:ff:08:09:5d:45:bc:b2:98:e5:ab:84:67:38:51:
78:1d:b2:a2:2b:98:c5:f0:ac:6f:9f:79:0c:32:ce:
cb:f0:1e:80:29:7d:2c:b2:92:25:55:52:d9:13:76:
54:9b:47:3e:62:03:62:f2:1c:3f:2b:57:bf:0c:83:
5d:58:28:cf:06:0c:18:95:c1:49:be:5d:6e:73:61:
37:8f:81:90:7a:cc:5e:38:b4:94:a8:b7:a8:9c:e3:
83:2a:53:b9:46:2c:7b:31:62:6b:bb:f0:1f:b0:4c:
31:02:e5:c9:e2:b7:f8:9e:a7:e2:7d:2d:99:2f:d7:
ed:4e:99:04:49:aa:eb:e8:9f:e8:ef:05:8c:51:38:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3B:B4:0B:65:6F:9D:64:C5:88:DC:46:72:FC:C0:6A:E8:34:D7:A9
X509v3 Authority Key Identifier:
keyid:FD:DA:55:10:48:41:0B:B5:C4:7E:BD:B8:3B:F5:81:88:C4:A3:06:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dpVEEhBC7XEfr24O_WBiMSjBrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:dc:4c:14:c9:cc:6b:e6:fa:2b:04:38:f6:28:8c:8c:df:5a:
86:1a:9b:61:c4:8f:5d:eb:59:d1:9e:26:60:e4:ef:d5:70:8b:
1d:5c:7d:e3:0b:ee:3a:c6:91:b8:86:37:5c:1e:1e:dd:5e:ae:
2f:47:eb:7b:2c:a4:dd:51:5f:35:4d:af:de:88:23:3d:9b:e9:
ab:3b:98:69:77:15:eb:a1:ff:40:09:17:93:9f:66:f5:eb:9d:
4d:f0:85:2f:5e:15:fb:cd:b3:88:58:10:4a:96:ea:0f:7d:9a:
67:84:68:cc:19:b1:eb:04:69:75:0b:c3:0f:2f:99:41:f9:d8:
17:8e:26:8c:02:69:d3:09:27:b0:e1:65:9d:d0:8c:1b:80:9f:
d0:39:89:81:0a:90:00:36:f5:11:36:9a:3c:bd:29:b1:8a:49:
91:9d:fc:9a:c0:00:c2:a0:d6:c5:cf:ab:d1:8a:93:0e:e9:3f:
b2:ce:3c:3e:d8:dd:21:58:bf:25:5e:e7:81:e8:3a:60:4d:76:
fb:06:f6:5f:e3:5b:e3:68:1c:90:7e:f1:68:cb:d8:55:58:5d:
a0:e8:44:69:91:57:80:2f:53:ff:0c:51:d6:5d:7e:c6:83:ed:
6d:0f:61:68:e4:86:40:24:30:82:c8:41:70:a5:29:09:4f:4f:
c7:3f:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:39 2026 by rpki-client