Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
File: DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft (raw, json)
Hash identifier: jqma9L4i9ZMnCdRvpERphPdlXkxUuc322KLtkH8tlus=
Subject key identifier: 8B:8F:13:13:68:BE:B8:63:85:6A:CC:55:1F:E7:0F:8A:F9:07:E9:35
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial: 019D389BBC2C26BCC5EC2112F4C0331389C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
Manifest number: 152F
Signing time: Sun 29 Mar 2026 08:00:23 +0000
Manifest this update: Sun 29 Mar 2026 08:00:23 +0000
Manifest next update: Mon 30 Mar 2026 08:00:23 +0000
Files and hashes: 1: DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl (hash: 1SPxcYxaJohIcOu+KCUJpB4c+yQbAJzlg8cn1yEsZ6E=)
2: u6dKU2x8O3xV7S3OaviPva82180.roa (hash: 9A10Ud5zhJp6APcwr5M/hOCYfKIxkVszIE4bdVZOg/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bc:2c:26:bc:c5:ec:21:12:f4:c0:33:13:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Validity
Not Before: Mar 29 08:00:23 2026 GMT
Not After : Mar 30 08:00:23 2026 GMT
Subject: CN=8b8f131368beb863856acc551fe70f8af907e935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:f7:08:10:6c:25:f8:ed:aa:c7:d1:1e:20:
ea:85:32:f9:59:51:9c:7f:dd:4f:0a:ca:95:49:e7:
d4:91:04:e4:30:26:72:5c:fe:69:ed:8b:2f:b6:24:
86:7b:fa:cd:07:50:ef:c3:69:0e:62:00:cd:54:0e:
71:9d:84:ab:e4:97:df:99:71:76:61:81:c1:9a:98:
8c:c4:f1:a5:1d:22:34:af:4c:03:05:29:7c:17:b6:
e2:99:22:76:f2:37:12:0b:9f:d6:19:b7:52:45:34:
58:d9:ae:25:80:75:d9:61:ba:b9:12:83:a4:0e:63:
d6:b3:37:1e:ce:31:58:61:91:16:a7:59:ab:49:dc:
fb:63:aa:2f:df:d2:d1:78:d2:df:42:15:ea:87:2a:
02:64:29:79:1d:be:07:83:fb:3d:1a:da:08:03:7f:
7c:cb:00:72:e8:1c:a7:c1:ca:02:23:d1:dc:15:39:
f7:15:4a:e0:3c:ab:4b:a9:39:38:4e:9a:0c:d5:ef:
c4:7c:88:f0:91:72:5d:58:a0:ee:21:62:87:9e:60:
f9:92:7f:f4:a7:99:1e:b1:3f:5d:6d:ca:94:4d:5f:
c0:79:fd:55:3c:f6:91:bf:54:90:05:44:fe:dd:dc:
b0:00:39:7e:79:4f:97:42:93:b4:09:da:a9:a0:b0:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8F:13:13:68:BE:B8:63:85:6A:CC:55:1F:E7:0F:8A:F9:07:E9:35
X509v3 Authority Key Identifier:
keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c4:80:64:b8:dd:8f:7f:d2:a0:42:f3:ac:35:3a:13:b9:c2:
c3:2d:1d:23:54:b9:ed:42:84:5e:d9:23:f7:77:f0:36:00:b2:
28:83:bf:78:79:c9:74:58:9c:ca:d3:16:98:ed:bb:5c:a1:a6:
4b:a6:67:e2:9f:81:df:2a:54:15:11:a9:eb:52:7a:d2:16:85:
97:36:5d:4d:7e:23:00:a9:73:46:8b:49:7e:40:e4:66:ed:74:
98:9d:8c:b0:df:a7:8b:27:63:37:0f:11:0a:a4:5a:9e:84:21:
bb:74:2c:1c:78:24:af:cb:a6:c2:8b:bb:55:96:d9:e2:99:97:
16:fb:ee:4a:44:d0:05:89:bd:91:72:a7:6c:e9:a8:2d:18:48:
f0:ed:1b:e6:a6:9e:35:0a:e2:2d:90:79:be:14:4c:f3:71:43:
11:44:4e:a0:19:5f:db:8e:59:ff:30:b1:02:39:5b:b4:9f:93:
c3:da:11:3f:73:b3:ac:32:f5:aa:7d:68:92:d2:a3:a4:3e:87:
c1:dd:9e:e5:04:aa:ff:08:98:16:ab:5e:88:03:9c:e7:3a:52:
0a:6a:d1:bf:47:57:33:48:0a:a7:58:24:18:5c:9b:55:56:b2:
e9:db:40:46:01:12:0e:ec:3c:a3:48:bf:1f:2c:8c:8a:a3:3a:
02:59:0f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:20 2026 by rpki-client