Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier: PAsLtVE8i8NKnAf2bB0Kk6H0T+GBqQ6nFidTyQZjTqU=
Subject key identifier: CE:FA:20:70:28:2A:03:76:43:D0:D1:CF:B1:B0:B3:95:B7:D3:DA:B3
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial: 019D3977FD4083745C3234E0DB0813C99A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 12:00:58 +0000
Manifest this update: Sun 29 Mar 2026 12:00:58 +0000
Manifest next update: Mon 30 Mar 2026 12:00:58 +0000
Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: io2GG6nIFifWIr4FM+eaHvQsYtF5Xz1FjdcysSyIvuA=)
2: r1owUcHIHUNrR_fArdJ-3GEuqbk.roa (hash: zJDM6tfQVuv+cogBgNYX5vbZST7r1hIuZqSJ4ODXwnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:fd:40:83:74:5c:32:34:e0:db:08:13:c9:9a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Validity
Not Before: Mar 29 12:00:58 2026 GMT
Not After : Mar 30 12:00:58 2026 GMT
Subject: CN=cefa2070282a037643d0d1cfb1b0b395b7d3dab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:43:65:a8:19:5c:20:c1:3c:1b:68:3b:95:
dc:88:43:b6:ed:c8:ff:82:2e:fc:c2:cb:39:48:1b:
11:5f:f1:9f:00:60:4d:8c:3b:3b:f5:72:54:a2:80:
2a:1e:90:e0:cf:b4:7e:b3:50:b6:c8:49:e6:96:a4:
20:9f:6a:09:19:67:23:b9:4e:22:43:a2:2b:1d:91:
93:47:b5:aa:36:5c:88:1b:af:f5:39:78:a6:2e:ad:
84:64:7a:0c:1e:a0:4b:82:12:67:23:d2:00:dd:5d:
1e:fd:fc:bb:dc:50:e6:cc:f6:a1:9e:27:51:53:9c:
fd:2e:60:7d:a9:9f:0a:ef:14:70:64:76:ec:55:15:
42:5e:6f:03:ed:bd:a8:be:1d:4e:48:37:e5:1a:0b:
be:0a:d2:92:7d:ab:de:de:fe:6e:2d:1e:02:8a:83:
18:72:d0:62:47:44:2a:28:a8:3f:97:fc:02:0c:57:
01:d0:15:87:ef:01:23:0b:36:9d:e7:e4:14:20:4d:
00:94:7b:fd:98:d8:25:20:bd:48:97:d8:aa:90:55:
94:05:27:85:37:bc:c1:4a:d9:e6:a5:da:7b:07:21:
f2:d5:5f:cb:64:a6:3f:46:67:41:d1:50:ce:85:7c:
13:93:df:31:8a:c1:2b:cf:f8:a2:e8:4b:4e:0e:a6:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FA:20:70:28:2A:03:76:43:D0:D1:CF:B1:B0:B3:95:B7:D3:DA:B3
X509v3 Authority Key Identifier:
keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2c:58:24:1b:d2:33:3c:bd:71:0d:c3:70:57:12:a7:bc:69:
21:e2:a5:cb:f2:3c:a9:ea:83:6c:06:72:27:ce:c3:ef:e4:08:
1f:07:fa:3b:7a:b7:d7:6a:51:24:34:73:03:3b:24:f6:e7:37:
19:1c:1b:a6:9d:25:0d:84:48:cb:ee:45:a3:9d:5a:1b:43:77:
99:85:dd:b5:e1:4a:92:b2:bb:e9:52:ea:65:d2:24:4b:9f:7d:
b7:c2:28:55:d8:84:c4:3c:17:0f:b6:93:e0:49:77:13:7d:7c:
2b:18:93:f1:92:e6:9c:54:77:43:fe:38:ba:aa:b7:ad:74:27:
2b:aa:35:fc:41:4d:73:8e:90:86:8b:87:58:c3:42:37:03:90:
48:76:b9:c7:bf:d2:1b:79:9a:52:c9:4d:37:44:11:9e:c6:d6:
53:70:a2:02:b3:91:c2:48:52:1d:35:b0:8a:f5:35:84:f2:9e:
e9:f6:43:b0:83:e6:58:e3:ed:ad:84:15:82:a0:16:d8:65:cf:
6b:96:47:33:dd:3e:45:20:05:b6:b3:3c:3f:99:eb:dc:96:de:
ff:bf:d7:3d:19:b2:08:c7:5e:d6:c1:40:18:79:76:a7:5e:95:
9d:94:21:ee:cb:96:fd:b9:03:f2:ec:82:4e:0d:90:22:aa:cb:
3f:bd:6e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:54 2026 by rpki-client