Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier: KXw98tuF9xP/mIvTrmu+heFhrnU8gED/nQjNnpizSCk=
Subject key identifier: A3:7F:F5:07:72:0D:5F:92:73:15:D1:A4:01:5D:95:04:A6:F1:06:7D
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 019CF9F47D4D67A6B4636965FE5C6CCFB5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number: 068A
Signing time: Tue 17 Mar 2026 04:01:15 +0000
Manifest this update: Tue 17 Mar 2026 04:01:15 +0000
Manifest next update: Wed 18 Mar 2026 04:01:15 +0000
Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: MvgwPKD58KtsC9RHKekVQOtL8IlAA8H93G1Gm3gmwow=)
2: YWPvVhMhWOdJq4IgusjcDgptc9E.roa (hash: VwHMf9+Fwh3KRyIosC2+XI4IaINip+46g+Oe4aIU/sk=)
3: oZhmNHo1g-fLhYbLEUh1GW508Ns.roa (hash: pc/tqbY3tzsPX8Y1oHBCD976XbZr/U1sHfOZb8voLLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f9:f4:7d:4d:67:a6:b4:63:69:65:fe:5c:6c:cf:b5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: Mar 17 04:01:15 2026 GMT
Not After : Mar 18 04:01:15 2026 GMT
Subject: CN=a37ff507720d5f927315d1a4015d9504a6f1067d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:c6:a6:3d:b1:8d:a4:6a:ac:78:8e:be:1b:
cc:3e:89:87:c2:46:e4:cf:c5:1a:24:d3:e2:48:8e:
e2:66:48:b6:8a:b4:b8:30:57:b6:d5:1e:ad:1d:59:
71:2e:8b:67:c4:57:9f:dc:03:a7:f4:04:0f:96:c4:
3b:40:e1:f6:36:53:82:8c:88:51:09:89:d2:88:16:
cc:90:51:3e:4d:5a:bb:a0:df:24:9d:b4:f9:a0:8a:
bb:4f:f4:b3:7e:60:9d:7e:e8:e8:72:2e:f8:41:bf:
56:98:f3:28:93:d0:ad:63:58:87:b7:69:44:32:dd:
c6:d3:0f:de:b2:69:43:d8:8e:a2:85:ac:32:c0:16:
5f:37:f1:0d:d2:4e:b0:68:9f:12:c5:81:d8:4d:87:
c7:62:ec:78:89:02:99:74:58:98:5e:bf:b0:8d:3f:
ee:80:ae:9d:0a:f6:ed:d8:d6:d6:0e:61:32:05:80:
5d:b3:82:6a:23:c5:ca:e9:b9:c6:5e:89:13:3b:e9:
9f:5a:2b:c6:d0:14:79:bc:5f:39:6d:e6:03:c1:99:
98:26:82:6b:cf:0e:49:62:58:57:82:fb:5f:4c:1c:
0a:08:e9:61:fb:c1:6a:f9:c0:9c:5b:51:2c:82:d7:
ee:66:76:9f:9f:78:9b:7e:2d:54:72:50:4c:d4:c1:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7F:F5:07:72:0D:5F:92:73:15:D1:A4:01:5D:95:04:A6:F1:06:7D
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cc:72:d8:46:11:b8:b2:8e:72:c2:dd:08:02:4f:bb:08:ab:
f2:58:8c:f0:2e:35:31:85:f8:8a:fd:3c:5b:d1:34:be:d6:1d:
f4:a6:d1:18:60:f1:98:bd:cb:27:e9:fb:2a:a4:c0:fa:97:c9:
b7:1e:24:67:ac:6f:fd:bb:ba:26:ec:60:95:43:71:47:30:a0:
64:66:19:21:5b:b8:16:75:2e:1f:f1:24:49:08:9c:d0:b5:19:
8c:25:18:b1:c0:49:8c:13:c0:0c:63:cd:e2:61:c0:d0:89:1a:
3a:d9:31:4e:4a:68:1c:43:61:be:ba:b3:3d:85:81:b0:4d:07:
e4:32:3f:49:34:b7:c4:59:4b:b9:cb:38:88:8e:d0:bd:33:9f:
fc:3d:76:87:32:ec:d1:38:fe:b2:62:42:5e:6b:29:46:db:44:
4c:6e:ff:92:5f:39:21:a0:79:63:2c:46:3f:5f:10:9a:f0:c1:
9e:8b:82:1a:d3:ce:de:a3:fe:ac:df:2b:c7:36:00:c4:da:77:
8b:33:f6:82:96:bf:e9:12:81:fd:d8:f3:2e:01:82:28:ca:61:
74:63:4d:a2:23:e5:dd:d2:46:14:a1:41:e5:53:5f:29:f0:f0:
06:08:19:40:9b:b0:6f:19:fc:bf:56:40:e0:1b:29:b5:12:dc:
e2:02:4b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 14:06:02 2026 by rpki-client