Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File: dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier: b7mA/+QdZhZhHi15KpNSHGKV9lkOy6qEvcB1tmsGV+c=
Subject key identifier: 61:6D:10:70:45:E7:CB:B8:34:31:5F:7D:94:D0:75:91:B3:2E:16:77
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer: /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial: 019D389C3904E1DAA6B4626E9C71AE729373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number: 06DB
Signing time: Sun 29 Mar 2026 08:00:55 +0000
Manifest this update: Sun 29 Mar 2026 08:00:55 +0000
Manifest next update: Mon 30 Mar 2026 08:00:55 +0000
Files and hashes: 1: 2VmhrnY1R-y6rxXotPMotrQDcR8.asa (hash: Ap3BdSC63YcAczUKkEzGKumr15/KgLHB6Jp/DYCbOq4=)
2: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: KeVCtjzhUFFiZ9mtFnjcodneqSgLfzTQOLZSNLyareo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:39:04:e1:da:a6:b4:62:6e:9c:71:ae:72:93:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
Validity
Not Before: Mar 29 08:00:55 2026 GMT
Not After : Mar 30 08:00:55 2026 GMT
Subject: CN=616d107045e7cbb834315f7d94d07591b32e1677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:70:e4:37:9d:11:13:33:25:05:9c:6c:a0:
00:ab:f5:be:94:80:bc:be:f5:d6:28:75:16:c2:44:
6b:3f:81:36:8c:36:a5:82:68:3b:5c:43:5d:70:e5:
4d:d6:82:42:39:b4:cc:cd:ef:d2:8c:d1:91:69:b3:
70:b5:aa:17:b4:4d:11:83:e9:a3:e2:5d:71:14:1f:
ab:98:4a:3c:ce:2d:b4:3e:09:fe:59:96:fc:60:2b:
35:11:94:24:82:4c:80:d3:23:90:b3:18:6b:7f:07:
bf:53:ab:01:d9:5b:bb:0b:0c:a5:88:a8:68:f6:aa:
2b:79:c9:79:cd:e8:5e:10:28:e7:4a:56:d7:40:06:
76:43:22:7f:29:cc:f8:3a:fb:9f:70:12:35:a9:34:
1e:af:a4:37:1a:a4:42:74:f5:e3:c8:8b:3a:dc:fc:
8f:56:b4:25:1f:57:c1:6c:bb:97:5c:c3:2b:ca:27:
24:8e:8f:7a:64:9c:a6:d9:8a:ea:16:a4:97:e8:e6:
d2:c7:29:33:ac:5e:1c:90:0b:1a:cc:25:60:2f:54:
54:46:e0:6d:21:6c:8c:d5:e3:19:d8:70:88:69:fb:
37:c1:d5:bd:0c:b5:e3:bc:1c:20:d8:38:f4:f6:c6:
c7:fb:55:c5:08:60:c2:f6:be:fa:c1:79:49:b7:3d:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6D:10:70:45:E7:CB:B8:34:31:5F:7D:94:D0:75:91:B3:2E:16:77
X509v3 Authority Key Identifier:
keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:86:7c:9b:20:34:bc:5c:8a:16:61:e5:e0:ac:1e:11:20:de:
21:32:31:56:b0:1b:12:db:11:7b:50:57:00:52:2a:eb:4b:5a:
81:fa:30:c8:be:63:e5:7e:8c:8b:3d:4f:86:02:5c:de:20:64:
05:5a:e8:db:1d:01:b7:7d:db:0d:86:93:d3:66:ed:1f:4f:67:
89:a8:f4:28:43:61:08:98:86:75:f1:36:2c:d3:66:b9:90:af:
61:01:4b:cd:39:c3:28:58:91:7d:a5:aa:f4:d3:2f:ae:38:8e:
37:3e:81:cc:72:1e:66:62:f3:ce:c1:3b:31:93:86:17:8b:9a:
a4:0b:c8:70:03:6d:16:67:3a:e9:70:82:f9:a3:b3:59:8d:f8:
29:44:30:98:10:47:89:9f:6c:a8:6d:96:6a:c9:13:63:31:d6:
5c:71:94:48:b1:57:ed:20:2e:5a:5e:80:42:f7:c5:68:09:4f:
29:60:51:d6:87:54:65:33:6c:d5:58:37:2d:c0:28:ce:5c:90:
0a:99:80:78:56:d7:d7:87:99:69:2b:b3:ee:a9:5e:e2:eb:53:
7f:3a:a9:db:9a:85:3f:c5:f3:e3:f9:20:f7:b8:ce:8a:ac:ba:
d8:0b:10:84:f3:1f:4c:74:cf:11:49:7e:fe:89:37:3f:ea:6c:
69:c0:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:43 2026 by rpki-client