Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: tDKpQAVuIy1IhCJrx7TMF29HrEUp2NfRtLJqM7kR1hk=
Subject key identifier: 59:B9:F7:A8:85:D3:45:C4:5F:96:88:7B:AD:2A:53:A1:84:36:62:87
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 019D04AEB210D9E55551420E0F64725013AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: 040C
Signing time: Thu 19 Mar 2026 06:00:50 +0000
Manifest this update: Thu 19 Mar 2026 06:00:50 +0000
Manifest next update: Fri 20 Mar 2026 06:00:50 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: 7t2pZXIeprnA7DpbiQqzog8Y9W9qVvVuN0lzkWqdpV8=)
2: WBE9XqEf7MFyalSUqu-vF0MYUwE.roa (hash: dqMxE1BdW8dFl07KbG3IeIB419vd91Jj1Eyr9ex+Uk0=)
3: WBO5Gvlksp1h2Nj2XcuQWgWe3aM.roa (hash: 21Q33n7ktv9Mw0KQGNV5mbgpviM4S02U0e8hX8gzv14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:ae:b2:10:d9:e5:55:51:42:0e:0f:64:72:50:13:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: Mar 19 06:00:50 2026 GMT
Not After : Mar 20 06:00:50 2026 GMT
Subject: CN=59b9f7a885d345c45f96887bad2a53a184366287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:73:2f:03:94:8b:71:3b:18:0b:b1:eb:f0:
39:cc:ca:9c:94:59:11:f7:9e:85:62:00:93:b4:a1:
8c:8c:4e:42:4d:50:22:bd:fa:fe:5e:29:c1:0f:12:
fe:12:ce:17:a6:6d:1a:b3:ce:2e:f4:02:d0:e9:0e:
59:7e:69:e2:93:99:9e:a7:23:9b:24:fb:90:af:41:
7c:2e:88:dd:3d:94:8b:5d:bc:f2:a8:68:bf:d2:f3:
ea:af:3c:c5:8b:9b:c4:80:18:44:8a:f0:b4:aa:bd:
c8:d4:d8:2d:28:66:0f:f7:5a:d6:b7:b5:f0:ce:27:
ba:40:19:c5:47:62:b3:69:d9:24:a0:06:9e:91:ae:
de:6e:42:de:17:a6:69:a7:0c:4c:04:48:c7:b4:da:
1d:80:78:fa:72:a6:11:c4:7a:30:be:da:4c:f8:cb:
2e:3c:30:48:99:38:88:43:06:f5:61:be:36:07:8d:
ed:eb:2e:c2:76:64:b8:b3:99:a5:03:c0:41:e4:54:
a5:1e:67:2b:8a:15:94:ad:57:01:c0:ed:ca:37:50:
46:ff:45:44:e1:6b:d2:32:7e:0e:ad:d8:fc:97:dc:
64:5b:66:84:92:1e:63:90:65:32:52:ff:1d:26:a9:
c8:fb:fd:64:0c:c9:b2:5f:29:55:5e:4d:9b:0c:d8:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B9:F7:A8:85:D3:45:C4:5F:96:88:7B:AD:2A:53:A1:84:36:62:87
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c4:7e:28:9b:0c:0f:60:95:30:fa:24:31:04:62:89:a7:52:
df:eb:13:88:d1:a5:07:d0:39:1b:85:a9:7e:29:cc:7b:92:1e:
fc:d1:bd:87:de:82:48:15:0f:c4:a1:68:e9:b1:fb:22:3b:1d:
e0:29:dc:89:f1:9b:66:ec:6c:a7:04:eb:b3:30:3e:82:9a:ae:
6a:0a:7a:a9:93:a4:8d:26:01:a2:03:96:f3:74:42:17:9d:eb:
3b:77:52:da:38:f0:cc:76:bc:ec:be:9e:1b:08:fb:44:08:44:
12:43:b8:d1:cf:9e:80:a1:42:40:36:85:1a:f9:95:6f:ca:dd:
91:74:2f:d6:27:42:83:0d:c6:0a:13:84:89:a4:32:3a:fd:63:
9a:cd:c6:b2:4f:7d:eb:19:cb:37:15:44:b8:ba:e5:cc:af:5f:
67:5f:65:5a:60:d0:6c:55:fa:61:13:a0:4a:15:56:55:9a:c3:
0b:ab:9f:e0:c6:20:d0:1e:b4:95:59:5f:c7:c4:41:0e:e6:38:
e4:cb:8a:6e:cc:4c:c3:24:e1:18:bd:cb:2b:f2:c4:eb:a1:e4:
62:68:71:6a:8c:bb:a3:28:25:31:da:a6:09:67:6a:1e:86:ec:
a8:e3:a2:88:ae:4e:ea:82:9f:d3:8f:f1:fe:c1:cb:41:8f:73:
05:c9:e1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:48:05 2026 by rpki-client