Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: 9fOZYMhUHIMPMDL+pWikm5XWyhoasOg/dWHaXrzYtgg=
Subject key identifier: 54:94:4F:9C:59:FE:65:C8:7B:9D:8D:6C:52:45:15:5A:64:5C:DB:8F
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 019D39AF37309F946260B005A7EDB54D51FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 1914
Signing time: Sun 29 Mar 2026 13:01:17 +0000
Manifest this update: Sun 29 Mar 2026 13:01:17 +0000
Manifest next update: Mon 30 Mar 2026 13:01:17 +0000
Files and hashes: 1: aTug7YNO613h0EdhaVanobAofs4.roa (hash: JO+eAjDs3aZGB9gkmGCHWKFzmsIX3/pwIhE/HLe+REE=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: +LVJsFu4HiMgJHMIXH1Cu8wqVCC3T22YXw71KRwUJQ8=)
3: tZk_CaKCryAvJRReN7aPc9CJl5Q.roa (hash: GDF5SYSr5M1uY12BBc2vpgU4RwEGW3L9n697ONqnZ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:37:30:9f:94:62:60:b0:05:a7:ed:b5:4d:51:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Mar 29 13:01:17 2026 GMT
Not After : Mar 30 13:01:17 2026 GMT
Subject: CN=54944f9c59fe65c87b9d8d6c5245155a645cdb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:86:ef:ba:28:0d:44:30:6a:a0:bf:57:60:57:
6b:4f:35:df:3a:5f:4f:fa:c9:cc:64:f9:d0:83:4c:
2b:b9:4f:38:de:73:a8:a6:d8:7c:56:61:db:b3:b9:
5e:29:28:48:fa:e5:99:c9:7f:f8:53:da:f7:fc:dd:
e2:55:f5:32:65:67:89:86:3a:87:e6:e2:28:09:1f:
7e:31:10:06:a5:1c:c7:01:41:fc:0f:76:17:5f:43:
ff:6f:d5:3c:89:af:e7:ae:1d:7f:5a:e4:49:97:fb:
1e:91:d3:e6:a6:05:57:e3:ea:72:f9:fc:c6:bb:04:
c0:c6:fd:c7:13:5c:51:ee:a4:e8:98:de:df:ee:f1:
02:4b:28:e1:b0:67:8b:dd:fe:c4:d7:02:d2:9b:3d:
d4:0f:37:c4:d5:d3:14:a3:e9:85:fd:aa:18:c1:2a:
96:8e:05:8a:76:5d:35:47:dd:26:43:50:e3:b9:ba:
93:1e:7d:54:99:5f:4e:ae:58:4b:68:57:7f:02:61:
cb:f4:5d:eb:68:b9:86:7d:9e:47:59:96:25:25:fd:
85:08:40:1c:04:f9:78:99:da:85:de:05:32:b5:94:
82:90:0c:4d:a4:7a:f1:56:c3:9c:1b:bf:e8:0c:fb:
59:d3:81:f7:f8:2a:03:fe:a1:5c:2b:c1:19:a1:85:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:94:4F:9C:59:FE:65:C8:7B:9D:8D:6C:52:45:15:5A:64:5C:DB:8F
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5d:a9:b6:62:e4:33:de:ec:4e:20:a9:43:b4:0c:ff:b8:3a:
75:a9:43:b9:c3:6d:b1:57:26:d0:7a:2c:51:be:55:78:24:0e:
45:80:76:10:6a:9d:bc:4e:e7:82:85:72:91:01:65:1f:42:d7:
f4:bc:54:9f:72:fb:2b:de:f1:0f:3a:06:98:57:de:35:6b:c6:
0d:76:66:dc:a9:52:41:aa:c5:d4:dd:42:21:bd:44:5c:c0:4c:
3a:25:09:7e:15:d3:20:c8:e4:79:86:91:4e:ff:0c:9d:d6:f2:
23:40:73:dd:bb:65:ac:c8:e3:3d:8c:94:c5:83:79:05:0f:89:
f2:07:8b:f8:6d:27:61:8f:55:cf:6e:ef:10:18:46:eb:f8:b8:
67:33:bf:8e:16:20:19:50:51:a9:89:75:15:d9:08:80:4a:ae:
34:f0:7a:a1:df:75:34:63:06:90:2e:cf:6c:50:4e:f2:cb:a4:
ac:f2:8d:fa:06:11:15:55:99:a2:6b:d8:75:51:3b:e2:a2:61:
5b:d6:32:d6:37:d1:41:c8:4e:f1:a9:dc:85:2b:8a:c7:ed:9e:
a7:f6:eb:0e:9c:ec:c7:40:be:91:52:0e:b7:16:fc:76:3d:5c:
a6:f9:43:41:03:3f:69:f7:3e:80:12:d3:af:f6:2f:7d:94:43:
af:f8:a5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:12 2026 by rpki-client