Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
File: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft (raw, json)
Hash identifier: gFXOJ+/chFZuNyF2aSCLYOpze0C7+DoyBV0PUE3hBd0=
Subject key identifier: C9:8C:AB:78:03:53:E0:D1:44:1F:A5:FE:15:F8:21:CD:ED:21:9D:5F
Authority key identifier: 0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
Certificate issuer: /CN=0e1dd539525a39d847014e8fea3c641d973cc866
Certificate serial: 019D390A53B69DA8150378AFADC6921419DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
Manifest number: 0813
Signing time: Sun 29 Mar 2026 10:01:11 +0000
Manifest this update: Sun 29 Mar 2026 10:01:11 +0000
Manifest next update: Mon 30 Mar 2026 10:01:11 +0000
Files and hashes: 1: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl (hash: sA/iBp1cdur/M8yjGZnLUFoP4AhHK17XXvgDeEv5eJg=)
2: wWu-RpwUyxS5-QEBD4scp9HUjmY.roa (hash: Vz+DIxi0X/mIEqFNyd8Fjt4ub221xLszyBI1vupEUnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:53:b6:9d:a8:15:03:78:af:ad:c6:92:14:19:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1dd539525a39d847014e8fea3c641d973cc866
Validity
Not Before: Mar 29 10:01:11 2026 GMT
Not After : Mar 30 10:01:11 2026 GMT
Subject: CN=c98cab780353e0d1441fa5fe15f821cded219d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:85:87:34:f9:dc:30:97:af:bf:e3:b8:bc:
3d:36:2b:d5:25:84:9c:c5:1a:ee:b1:cf:b7:0f:e7:
79:53:5c:21:b7:68:c4:e5:35:5e:ed:ac:7a:2f:a5:
3b:2c:11:ba:85:96:45:03:a6:26:fd:df:b4:57:cd:
81:09:79:e0:0c:0b:54:78:2c:28:61:e7:07:a4:b2:
32:f8:fd:4f:c4:d5:fe:b2:a1:0f:6d:d1:2a:63:19:
86:f5:b4:49:ef:56:7c:f3:05:45:a4:fa:b9:7a:b8:
ce:fe:2e:24:4a:c9:13:f6:dd:39:54:0d:1a:47:50:
bb:31:ac:5c:9a:7b:00:35:89:4e:f6:5b:df:ff:8f:
1c:71:30:c4:7b:1e:7a:31:ff:e7:e1:cb:72:6b:03:
24:1a:78:5a:64:b1:b3:16:dc:eb:0e:b8:08:88:d9:
f0:fc:9f:be:09:82:96:45:6d:e4:d8:8c:a1:0b:fb:
55:cd:10:c2:a8:cf:d0:29:61:53:24:cc:2c:c4:e0:
25:4c:1a:f7:a4:43:39:4a:82:31:38:c9:28:17:b7:
96:cf:a7:7b:96:94:73:23:8e:29:57:33:40:56:d9:
57:ef:ce:7c:75:9a:17:f7:76:24:15:f6:c5:55:11:
9e:a9:ba:fd:d1:06:67:c9:80:1e:58:cb:5b:cc:88:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8C:AB:78:03:53:E0:D1:44:1F:A5:FE:15:F8:21:CD:ED:21:9D:5F
X509v3 Authority Key Identifier:
keyid:0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2e:7a:94:87:b0:0c:ba:df:22:a9:73:e3:3f:b7:e2:77:0a:
1a:0b:36:d7:50:bc:42:7a:ad:95:97:e2:dc:29:6f:9b:c8:22:
e1:8e:59:68:e3:7c:07:0f:78:8d:52:41:e8:54:94:6c:56:1e:
eb:86:1e:62:f2:99:bd:f5:d0:55:26:b1:66:c9:52:c6:1c:d6:
fe:79:ac:f3:1b:8e:1e:42:f2:07:ac:44:ac:82:ad:0f:59:ef:
6d:59:cb:dd:87:77:2a:5f:2d:aa:33:bc:31:39:2f:b7:ef:73:
c8:2b:49:6e:88:d1:22:d6:3d:f9:67:0f:12:8f:b2:98:a6:48:
61:aa:3b:eb:0b:52:22:5a:07:00:a5:92:41:eb:f5:fb:14:ab:
a9:d3:3e:ea:27:1e:90:07:34:09:8a:32:6b:20:aa:41:2f:97:
c0:9c:c9:6b:30:7b:41:72:a6:48:d9:ba:a2:3d:fe:1e:2f:8e:
47:6a:46:68:ef:5f:a6:28:46:a7:bd:05:a1:a8:56:56:74:64:
f6:9a:17:8e:b4:59:cf:dd:bb:b2:3f:1f:1e:7e:43:f1:a5:79:
9e:ef:ae:39:1a:41:dc:fc:76:2f:22:35:9c:32:c2:30:b4:9a:
79:d5:c0:6e:07:8d:96:66:c9:2c:5d:c0:65:df:ae:63:b7:8e:
27:66:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:12 2026 by rpki-client