Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
File: DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json)
Hash identifier: thHLdbm+dPb77W2ZsHzxQ1vsXjnRQazbpUDvArOsHH4=
Subject key identifier: 1C:DD:A0:2E:30:57:ED:C8:3D:95:78:71:68:A1:13:8C:56:36:49:9E
Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
Certificate issuer: /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Certificate serial: 019D39781186C0207AD3E52F396CF945D00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 12:01:03 +0000
Manifest this update: Sun 29 Mar 2026 12:01:03 +0000
Manifest next update: Mon 30 Mar 2026 12:01:03 +0000
Files and hashes: 1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: QvNaWA9q2o1w77I6JwieUs9PHQbeNXAI5H3tmIFaxF4=)
2: sJbabSr0DQsUKcF8whYiP0keQLk.roa (hash: VLMKLJgJtAQMDHLOL+HZaV58yPgmwNt2u2OyVf266h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:11:86:c0:20:7a:d3:e5:2f:39:6c:f9:45:d0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Validity
Not Before: Mar 29 12:01:03 2026 GMT
Not After : Mar 30 12:01:03 2026 GMT
Subject: CN=1cdda02e3057edc83d95787168a1138c5636499e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:69:c2:cf:47:84:94:39:9f:00:04:4e:4b:
d0:7b:82:bb:54:a4:93:36:66:92:d9:8e:ed:09:e9:
cf:8d:27:f9:d3:34:35:14:38:5f:7d:4c:0e:4c:17:
fa:8f:37:a7:10:8f:d6:d4:dd:78:51:4d:14:45:d0:
23:7b:33:8d:c3:9b:a9:2b:8f:aa:74:7b:c9:3c:92:
26:29:c6:85:16:01:46:bd:13:e0:2d:b8:a9:2b:5a:
9d:9c:2c:1f:84:c8:96:c6:a3:b2:9a:b4:b9:cc:a4:
ac:aa:f3:69:a2:9e:0e:b2:06:64:c4:d9:ba:09:ac:
b8:a9:c3:af:8a:ba:9c:bd:9e:e7:1c:3d:50:38:d8:
6c:4b:ee:d4:56:a7:26:dd:12:86:5b:e0:f5:07:57:
33:e4:77:0c:46:9f:91:62:33:f7:3f:b2:7e:e1:72:
4d:59:67:46:bd:e7:29:64:b0:2a:a2:81:82:a3:61:
de:24:8e:3c:e5:62:f9:9a:47:3a:b9:bf:82:d5:28:
3a:01:3e:ae:16:20:03:06:79:05:5b:e9:a7:29:0a:
f3:7b:0a:19:1e:a8:7b:db:81:a3:4d:40:41:86:bc:
f6:32:7b:92:d6:9b:fb:46:86:9a:ed:f8:ef:66:d1:
f1:7c:e5:ef:c6:a3:57:0c:9f:87:6c:9d:56:1a:c5:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DD:A0:2E:30:57:ED:C8:3D:95:78:71:68:A1:13:8C:56:36:49:9E
X509v3 Authority Key Identifier:
keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:64:57:6c:7d:09:d7:f3:6e:15:51:14:11:ba:44:84:b4:2b:
e6:19:ed:64:b4:02:d4:ca:91:b2:cb:2a:f7:2f:56:50:b9:f7:
31:d9:ab:bb:89:a4:fc:3e:46:29:7f:5b:6e:c6:24:62:4f:13:
11:a3:2d:1e:91:f3:6f:4b:97:84:53:84:5b:29:72:21:59:ce:
8a:02:c0:48:e4:c2:34:83:36:b3:f8:f8:61:05:0f:6d:2d:0a:
10:c6:27:e8:d8:e4:0f:f5:43:46:61:07:dc:41:1a:45:61:2f:
3d:08:5f:f4:43:ec:49:57:46:60:c6:b7:43:05:c6:3b:cc:76:
96:3a:90:0b:07:db:69:91:7e:4e:7c:3a:f8:72:2e:b0:68:fb:
e9:54:94:1d:5e:f2:13:68:1e:d9:29:2a:a9:ae:f3:28:cc:e2:
7e:98:b0:37:87:12:87:3e:a5:1e:29:93:ed:67:81:2a:e6:11:
37:6f:e6:54:79:e0:1c:17:c9:0b:18:33:e3:cd:08:25:f3:85:
f1:58:fe:11:82:1a:01:f9:7a:fd:2c:d6:5a:88:e3:90:ba:d0:
a1:80:3d:96:e0:72:12:8d:e1:6a:dc:b4:e4:88:84:d3:ae:08:
77:bc:5b:9f:cc:c2:72:79:fb:08:69:63:72:1e:0b:7c:5e:ea:
e3:87:09:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:57:45 2026 by rpki-client