Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
File: dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft (raw, json)
Hash identifier: c6Uq0+WGpYxQDEZ+V8GW76sc6k0wvHc6WA1lftg83ME=
Subject key identifier: DB:8E:22:82:9A:1D:10:28:1C:9A:82:7A:0D:AC:ED:11:60:94:B8:5D
Authority key identifier: 76:6D:18:B7:A5:A8:37:E6:71:4F:BA:B2:52:40:0A:3B:EA:BC:22:0A
Certificate issuer: /CN=766d18b7a5a837e6714fbab252400a3beabc220a
Certificate serial: 019D3865AF44E2E0A9F4565D3083FE11BEC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
Manifest number: 22
Signing time: Sun 29 Mar 2026 07:01:21 +0000
Manifest this update: Sun 29 Mar 2026 07:01:21 +0000
Manifest next update: Mon 30 Mar 2026 07:01:21 +0000
Files and hashes: 1: TPgJA7asD1USxd5F7pee5lciH88.roa (hash: J3JqRxhZZokO/izJrrFgyJGCYZDVRXSpr2zjvNoSLcU=)
2: dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.crl (hash: u8jy1bl3qrdRowHc0hox+gD8u0ELsPUy6Y+jfoXZrq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:af:44:e2:e0:a9:f4:56:5d:30:83:fe:11:be:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=766d18b7a5a837e6714fbab252400a3beabc220a
Validity
Not Before: Mar 29 07:01:21 2026 GMT
Not After : Mar 30 07:01:21 2026 GMT
Subject: CN=db8e22829a1d10281c9a827a0daced116094b85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:4e:a5:46:fc:b7:d7:1f:b1:d9:37:7b:17:
c6:d3:c8:7a:12:17:6b:2e:49:b1:7c:40:de:d1:a3:
b1:e8:0d:5a:58:da:25:f5:37:ea:d2:2b:73:38:01:
08:13:f3:27:66:e3:e9:53:73:f5:f1:19:c7:0e:03:
c0:c7:0d:6e:8e:97:23:7c:27:0e:76:3b:09:29:d7:
58:66:0b:9c:ad:d6:41:56:5c:55:13:d6:fd:b6:db:
bc:5a:69:12:eb:ed:71:40:0d:39:f4:30:d8:cb:cb:
c1:01:c3:0e:9d:37:68:6f:fe:39:3b:b9:fc:92:fd:
8e:dc:86:e2:2b:fa:5d:ae:09:79:45:c2:b9:d9:76:
71:9a:bf:9f:29:70:c7:de:dc:ac:fa:dc:0b:17:a6:
18:a6:52:9c:2f:fc:68:e9:ae:2f:76:7b:ac:30:17:
2b:2b:c8:93:ad:a1:d9:75:d9:6e:6c:49:df:a6:14:
de:14:6c:6f:f7:22:b3:09:9d:99:d1:71:8d:8c:6b:
6a:ed:b8:52:0d:e5:4e:c3:4f:1d:48:76:53:48:2f:
45:7b:2f:c8:71:c8:9a:c4:ea:d9:48:35:93:5e:69:
09:45:b9:46:b7:83:54:56:37:ec:ce:06:f2:af:e2:
52:fc:6c:de:ae:8d:c1:00:1f:41:86:60:44:e0:f6:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8E:22:82:9A:1D:10:28:1C:9A:82:7A:0D:AC:ED:11:60:94:B8:5D
X509v3 Authority Key Identifier:
keyid:76:6D:18:B7:A5:A8:37:E6:71:4F:BA:B2:52:40:0A:3B:EA:BC:22:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e8:97:9e:04:56:61:da:5a:f0:4e:dc:fc:8e:55:eb:4f:61:
49:c7:48:74:4b:76:bd:f1:3d:06:5b:53:31:28:27:d5:25:2a:
11:81:a1:e9:6b:81:75:2e:a3:35:29:3d:f5:a1:17:2f:98:90:
b1:12:2b:55:12:f7:f3:c2:f1:72:59:39:1b:87:e1:2b:46:23:
66:b3:5e:55:9c:e7:8b:1e:ad:f8:e2:b1:79:b9:7b:74:62:80:
76:b7:a7:8a:2f:bb:2d:0b:44:40:83:fa:dd:c2:bb:bb:71:09:
51:d9:5b:aa:12:f1:26:6a:64:2e:dd:fb:82:65:bb:36:05:57:
1d:89:cc:65:64:ca:4f:3b:25:64:40:99:c7:c9:6e:f3:7c:a6:
1e:49:94:ad:94:7c:4e:2b:26:e7:70:92:9f:d6:ea:47:7b:0d:
a1:7a:07:89:df:44:39:f8:f2:5f:a8:1d:95:5e:cf:49:02:99:
a1:ea:f2:f4:2a:40:40:ea:4f:f4:40:f2:07:c0:84:f3:1b:ab:
1d:08:6e:c5:54:1d:b7:e7:ad:1f:93:55:7d:1d:98:95:46:58:
df:e2:d0:a3:b2:48:c5:be:97:c9:64:0e:29:d4:db:10:41:f1:
98:19:0c:c1:df:46:37:e3:0f:6a:b9:24:4c:d3:85:b0:ba:9c:
2f:2e:c0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:11 2026 by rpki-client