Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File: Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier: BlGDHXMr/9lEu93SCcicosel9h5ebNalrffAzXwBt6c=
Subject key identifier: 57:17:51:F2:ED:52:A0:8C:59:48:44:17:18:10:D3:51:9D:41:C5:88
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 019D37F7551BC2EAB23E534D2F573DD81797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number: 189F
Signing time: Sun 29 Mar 2026 05:00:48 +0000
Manifest this update: Sun 29 Mar 2026 05:00:48 +0000
Manifest next update: Mon 30 Mar 2026 05:00:48 +0000
Files and hashes: 1: 6-VbzQgi8XA2TJAq8RgMaysx0X8.roa (hash: nwaIi9ebrKp/Q5R4ShMm9TiJvoby9UkF3818QuosS1w=)
2: ByAZZvD6ZO4dFVGZCOox_IHwdzo.roa (hash: wGFO7OyD3Pn5gOzCEOeYwv/8FCnWxDnlJBKiFmfnr/k=)
3: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: f6bnl0ZZ6xTA/FcjHnTf4a1f5Xb7Lr8Osb6szNJE8JE=)
4: KM6PkAFxCJgnCXLELW5hiOAKjus.roa (hash: DuJVolLG90aax0OKvLaTyX/VTpILvcyZxRZVQhnBPeY=)
5: YoJZ9epoonqwiI5Cz_IYJxFC0KQ.roa (hash: rcBdfpWe95Pbv9jR1rFIiVQgv2ItDDK2rcgQtFQdM3o=)
6: kZOcgE-yQiEGZ59-58kZODUnVtk.roa (hash: NpX21ZAdgdJK8Ql3JOW4Xo/GtwmqnfCpzM6EirlUM7w=)
7: odPvkDMmAxjrc3ZPhrKtHv1Pl_Q.roa (hash: WbetbahmmvNLGyGKWf2niABo2rq9cUlLwj18Yb3Jj3M=)
8: ps2vvRE8em2BhpWugO8HL3Oy4sw.roa (hash: UVRw/RrZWURZppeHPUhCU3KyC7ib1pGilFd5giOzN0U=)
9: sT5NvgSrjzuwTioYpNTeZgud1ao.roa (hash: eCoPPFfnRnkLIs6eZVD/zHitzMoyIccre5mcG4E3t34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:55:1b:c2:ea:b2:3e:53:4d:2f:57:3d:d8:17:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Mar 29 05:00:48 2026 GMT
Not After : Mar 30 05:00:48 2026 GMT
Subject: CN=571751f2ed52a08c594844171810d3519d41c588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:4f:b6:81:e5:f1:70:0e:3c:ba:51:e5:fc:
1a:98:89:a3:f7:45:48:81:2c:ff:a1:ab:21:be:5c:
43:6b:0b:98:29:ed:f9:d0:87:6e:99:75:47:b9:ad:
c6:26:b9:dd:e6:0b:98:6e:3c:70:9f:88:ed:2d:46:
42:85:0f:2c:90:2a:fb:e7:38:64:9e:1d:d3:d9:09:
fb:45:af:cb:66:fe:9c:53:10:81:ce:41:4c:8d:56:
cc:7a:1e:1e:45:63:95:c4:78:6b:d8:98:b6:21:f6:
1e:bc:45:7e:5a:db:4b:f9:9a:26:a8:44:da:35:9f:
f3:33:b8:e2:20:f7:65:46:d5:a4:8c:86:72:91:2e:
0b:00:38:d0:60:48:13:d5:f5:1b:b6:0b:43:b7:71:
13:dc:52:1b:3c:77:6a:73:16:dd:e0:22:03:6a:04:
74:a3:b9:f9:ee:d5:6b:32:df:15:fa:d4:93:a5:44:
18:a5:3a:3a:a1:0c:0d:5b:68:b1:b5:2d:92:49:70:
36:e8:0a:fa:a6:27:86:e7:2f:b5:1c:fb:5d:ee:5d:
7f:15:7d:d1:7b:99:cf:d1:98:15:79:a3:b1:26:01:
db:b6:b8:b2:ef:9e:ec:7f:f5:36:f5:fd:16:98:51:
2c:cf:98:9c:9f:23:8e:c1:7c:3c:f7:e0:a3:49:93:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:17:51:F2:ED:52:A0:8C:59:48:44:17:18:10:D3:51:9D:41:C5:88
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ed:10:0a:ab:31:b2:4b:9b:01:be:47:20:e3:89:9c:57:f3:
4b:c7:7c:19:a5:02:90:d7:fd:16:d6:77:63:2c:5e:c2:6f:11:
77:c2:9e:e9:ff:49:f0:97:2e:c8:0d:56:4a:39:7e:4a:f3:fa:
c8:1e:ee:54:97:8d:0e:a2:23:51:35:33:ef:a0:e4:d9:c6:0b:
c7:6e:6e:b3:42:bb:ed:7d:e5:99:55:77:d4:95:91:ea:52:3b:
b3:43:95:91:87:c1:12:52:12:96:0f:6b:44:42:ea:3d:f3:97:
89:d2:13:b2:56:3d:df:6b:9a:dd:e9:b7:94:75:57:8c:67:24:
03:6d:5e:20:a7:88:20:9f:0c:6f:1b:85:df:47:82:3b:13:1a:
57:ad:5c:53:04:50:d2:2b:c4:ed:29:d2:63:4d:8f:3b:92:54:
70:2e:82:bf:c6:31:ca:2d:fa:6f:da:f2:6c:8b:2c:14:c6:2f:
de:d1:97:00:f5:9f:c1:6b:79:4e:bd:41:79:00:39:d3:76:6c:
7c:60:39:19:ab:f7:81:9d:9d:77:91:df:46:ad:a6:00:c7:d9:
4a:25:66:0c:1a:21:3f:0f:35:14:ba:73:a8:db:f4:8a:3e:b5:
5d:5e:e8:7b:a7:5f:d9:5d:ff:18:a9:da:7a:8d:ab:d8:8e:e3:
ec:ab:13:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:11 2026 by rpki-client