Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier: FBCITjDd0hxL5g71z5dOQwROg+bEcUZQknzYiRVJXcQ=
Subject key identifier: 9B:82:6B:5B:CB:6B:52:B7:18:1E:CB:8A:E5:12:B0:D3:64:0A:9F:04
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial: 019D371B511970EC00885599EC9FADC48513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 01:00:30 +0000
Manifest this update: Sun 29 Mar 2026 01:00:30 +0000
Manifest next update: Mon 30 Mar 2026 01:00:30 +0000
Files and hashes: 1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: GXeqE3SusEjFNMmx/WH6gRt+eO/iL1R4hoKvnJRsWwY=)
2: pUIM7v10t5OGFrSPmfiKdj44TIc.roa (hash: Oo445ykGaPumhWQXMGT+U7KwU/ygHDEsLqsafB1c140=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:51:19:70:ec:00:88:55:99:ec:9f:ad:c4:85:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Validity
Not Before: Mar 29 01:00:30 2026 GMT
Not After : Mar 30 01:00:30 2026 GMT
Subject: CN=9b826b5bcb6b52b7181ecb8ae512b0d3640a9f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:fd:2c:b5:d0:ff:6b:b0:2b:b9:b2:6c:fd:
5e:4b:c8:2f:b1:ca:dd:80:41:77:2b:2c:44:10:7e:
48:0a:f9:32:7a:c1:5c:64:0c:8b:9f:e7:33:c1:7b:
a2:6a:e6:55:3f:0a:07:17:76:3f:e2:2e:d9:c1:e4:
b9:2a:a5:24:bd:70:d5:2a:17:8f:81:e3:d7:78:dc:
fc:8b:6e:25:d6:48:fd:91:e6:bb:d6:e2:3e:c8:ac:
a2:b1:45:a1:21:f3:77:58:81:11:d2:fb:44:66:e9:
b3:f6:e7:0b:5b:b5:a6:4b:6a:de:6b:33:ae:d6:c5:
23:13:ae:90:52:da:86:75:91:39:59:36:07:aa:8b:
de:30:66:4e:d5:58:f6:d5:97:72:1b:67:e1:8c:34:
70:ed:51:af:96:0f:23:b5:9c:ef:af:2b:c0:b9:bf:
f7:e9:57:a8:78:13:e4:df:b7:49:4d:55:76:04:22:
91:2d:9a:c9:53:b0:b3:e3:ca:d0:84:5a:55:96:07:
78:e1:86:ca:c1:e3:8f:fc:20:d1:6d:25:54:37:55:
b5:1f:b3:ab:7a:76:55:1f:4c:26:c6:f4:65:cb:6b:
4f:21:26:c8:2a:40:bc:ae:82:0f:5a:ee:4e:b7:60:
06:39:53:96:78:a7:62:dd:53:c7:d1:20:86:b9:91:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:82:6B:5B:CB:6B:52:B7:18:1E:CB:8A:E5:12:B0:D3:64:0A:9F:04
X509v3 Authority Key Identifier:
keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:12:2d:a5:ab:cd:43:8a:d1:89:40:04:d0:27:aa:c8:65:1a:
7b:6a:6d:7d:26:c1:df:74:ed:46:88:d6:06:c8:1a:db:05:1b:
02:65:04:c5:85:fe:54:49:0d:44:11:d6:97:52:14:94:89:4a:
f5:0e:26:1e:ec:30:a3:0e:cf:08:7b:34:da:d6:d7:1f:ca:54:
6d:a5:a6:6d:29:f4:19:39:d7:1f:04:64:ec:8d:3e:43:35:51:
0b:bb:17:53:2e:a5:89:07:b9:2f:13:ed:be:cd:e9:d4:83:20:
36:f9:bf:ff:34:15:50:29:99:12:d2:5c:f9:09:4a:33:7e:a8:
08:05:64:f3:3b:cb:ff:8a:03:ce:06:0e:af:35:10:26:07:c7:
46:33:49:dc:d8:2c:ee:0f:1f:37:4a:e4:f6:c9:7d:86:8e:b5:
3e:11:6b:61:9a:98:93:80:e5:a4:fb:e3:40:6a:28:14:d7:47:
49:ef:0a:65:e8:af:07:16:c1:53:b1:b3:9d:cb:e9:b9:9b:60:
62:4d:3c:40:92:6b:13:a2:f4:bf:b6:f3:2b:7d:c3:6b:7f:00:
87:4b:43:68:fd:91:68:4e:57:52:d6:04:fb:b2:56:f7:1f:f0:
ee:0c:bf:53:8b:00:48:d4:ef:c1:26:12:52:84:ec:73:3c:08:
ed:56:2e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:10 2026 by rpki-client