Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: rEZB0/1dgtQ4VBP23e6aSTJC7yFrCInff4I0f9XTsKU=
Subject key identifier: D4:1E:72:52:A1:2D:89:82:C1:9F:95:26:4D:89:F6:AA:9B:7D:3E:9F
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 019D3789717A90134A987B74C00D1EC00678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:00:47 +0000
Manifest this update: Sun 29 Mar 2026 03:00:47 +0000
Manifest next update: Mon 30 Mar 2026 03:00:47 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: vmqESEp50rSEqpU9jaWIQRp1/GjAuyn1FQl/az7XXYI=)
2: qB9Z-zHdmjEFSIG2vfJGfIMdpA0.roa (hash: MxW4mBfsVBC2g/oHLcgSIPQNdBtdZMBf3Vv3p/+UNxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:71:7a:90:13:4a:98:7b:74:c0:0d:1e:c0:06:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Mar 29 03:00:47 2026 GMT
Not After : Mar 30 03:00:47 2026 GMT
Subject: CN=d41e7252a12d8982c19f95264d89f6aa9b7d3e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:80:1f:7b:e1:a0:f4:5d:dd:f8:fd:4c:84:1c:
cf:aa:a1:0c:bd:52:ff:83:5e:a5:c5:f8:28:fe:12:
4c:a0:d1:ec:1c:8e:d9:7b:69:01:6e:99:88:fa:31:
68:4e:c7:27:7d:01:f6:4c:85:5a:7c:a2:99:ab:3f:
a5:eb:db:48:ae:57:c6:a1:c2:b6:d9:4f:6d:be:32:
06:dc:97:e7:42:73:be:fe:14:d2:5e:4d:56:eb:be:
0c:43:44:e8:0d:79:86:11:d4:eb:db:4e:ec:69:f9:
dd:39:6d:05:b5:1c:39:38:bd:89:06:fc:71:6b:36:
0c:2a:e7:02:02:46:92:79:81:32:1d:c0:af:00:f2:
7f:bd:3d:93:73:7c:0f:12:27:95:51:88:d1:79:4f:
9a:bc:b2:b7:8b:e8:46:44:87:cd:16:4b:e4:9c:2b:
b3:1e:14:86:68:7e:4d:2b:44:36:ad:75:3d:dd:df:
fd:e1:cd:36:b9:06:ca:bf:cf:0e:40:1d:03:10:31:
0d:50:cf:1b:c6:b4:41:01:03:6e:ad:bd:48:60:75:
56:19:4f:12:d8:fb:1a:07:dd:3b:63:1e:27:54:f8:
bd:80:1b:40:f3:c8:2c:b5:25:44:27:90:69:e8:47:
d3:78:6e:e9:f2:7c:bf:51:a0:c8:fd:26:e0:0c:b6:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1E:72:52:A1:2D:89:82:C1:9F:95:26:4D:89:F6:AA:9B:7D:3E:9F
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d5:bb:52:10:db:85:e1:a8:a9:6c:0b:50:a4:7d:6e:46:95:
3e:84:61:b0:c0:3a:fe:dd:f3:46:7c:f7:01:cc:ea:2c:44:68:
e9:73:31:6a:39:cd:20:bd:cb:b8:63:78:7e:e1:4b:c3:42:f0:
6a:16:bb:81:11:02:11:e7:a1:87:d4:e5:2b:b5:e5:65:7a:83:
c0:40:c7:10:96:24:c6:71:fd:2d:02:85:8b:99:12:d0:ad:d1:
34:b0:26:b0:e1:e3:14:00:ac:ae:e8:dc:eb:8c:37:36:23:c4:
ec:69:c8:04:fb:aa:fb:ba:30:87:c6:10:36:e0:3d:55:f2:07:
a9:04:b1:6e:3f:44:ab:75:21:43:33:62:9f:f5:7c:e6:01:ce:
55:58:13:57:6a:b3:89:a8:34:5d:28:d3:3c:24:46:3e:c1:3d:
a0:f0:2c:cc:9a:61:b7:55:3c:46:f3:93:de:08:ac:c8:d1:0d:
99:ad:5a:a7:77:72:fb:1f:a4:9b:7b:ad:12:29:d1:11:73:13:
df:88:50:a1:24:0b:56:2a:a3:fa:6d:58:b3:41:0b:eb:2f:9c:
81:68:0f:03:56:f4:83:7b:4f:cf:d7:0d:dc:3f:37:8d:e3:07:
cc:f9:34:07:59:ce:a3:46:8a:4f:a0:4f:31:40:49:b5:5a:f8:
5e:07:1b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:34 2026 by rpki-client