Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: WKkF+lr5mDGmJlXQsvbkaLRatymkoFetjrEMrlnoS6E=
Subject key identifier: 8A:53:CF:06:17:C6:0D:CE:B1:56:6E:33:53:BF:3F:C3:7F:B6:BF:B5
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 019D382DE908EF148E865C471FDF63AA90F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: 0612
Signing time: Sun 29 Mar 2026 06:00:25 +0000
Manifest this update: Sun 29 Mar 2026 06:00:25 +0000
Manifest next update: Mon 30 Mar 2026 06:00:25 +0000
Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: RoD/vnH0kPXvHN81oX/9uh6vo5fp0Eo801yU0ADTX34=)
2: elu1abDHd3RfzpApGEKnDnwdAcI.roa (hash: HHOSPK0nfYS+xwtq8H1DXb/qJlWmVpm7P0B6dxlEAcU=)
3: ygV7k6nVaZCAnScNFHt4paZc8MM.roa (hash: Fv0BlTXpeeDK0QHZ/q3zQcl9lKT33vm1AnUd5vQrW08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e9:08:ef:14:8e:86:5c:47:1f:df:63:aa:90:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Mar 29 06:00:25 2026 GMT
Not After : Mar 30 06:00:25 2026 GMT
Subject: CN=8a53cf0617c60dceb1566e3353bf3fc37fb6bfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2b:5b:57:30:d7:95:b2:84:e1:c3:78:96:8e:
ac:b5:ad:64:b9:44:da:5c:c5:0d:f7:29:e9:4d:41:
f7:0b:5a:ab:0e:a3:ac:37:df:06:2b:07:20:0c:bc:
0b:34:76:37:f5:e0:e1:0e:bc:67:6b:33:80:a5:1b:
5a:7d:39:b1:ab:3c:0d:6d:27:ec:a1:14:e1:70:62:
16:71:8a:b2:b6:17:d6:55:44:71:c3:48:4d:fc:83:
79:f5:d5:8c:50:dd:37:a3:a5:94:57:19:18:10:c8:
58:90:d8:8e:5a:35:31:63:a5:5b:ab:7d:18:22:38:
f7:89:3a:f4:c6:29:8e:78:78:ac:57:fd:f7:a1:cc:
f7:a7:75:5c:ec:2c:8c:bf:88:70:b7:81:18:a1:e5:
eb:c3:5f:8a:56:ae:dc:80:40:91:44:35:7d:fd:db:
23:86:48:a0:44:a2:9a:f5:6b:1b:f6:ee:ea:a7:13:
d1:a2:e6:5c:19:72:7a:0f:2e:94:f6:94:4c:d0:7a:
e7:81:21:de:58:83:b9:d8:3e:cf:14:fa:18:38:d6:
ce:bf:a7:1e:d1:b7:d5:5b:ea:22:44:79:49:94:4b:
8e:4b:55:a1:29:44:18:da:a2:2d:82:78:d4:6c:32:
7c:03:55:bb:cd:57:32:57:b5:dd:de:bf:a6:5c:ef:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:53:CF:06:17:C6:0D:CE:B1:56:6E:33:53:BF:3F:C3:7F:B6:BF:B5
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:36:f0:b4:f0:d9:9f:e4:c6:2c:95:de:f5:8b:16:44:68:6a:
71:2e:9a:0b:f4:34:67:9d:18:41:6c:a5:55:7f:96:ec:d7:c9:
dd:9a:d4:79:07:0f:14:a3:e7:54:30:81:b7:b4:3c:ea:58:0b:
d3:9a:33:eb:82:5f:51:50:3b:a8:2c:59:d2:a5:b4:cb:0b:87:
e2:c0:48:2d:22:88:3d:c9:6b:ab:57:ad:f7:ac:34:1a:17:0c:
41:09:b0:c0:07:21:06:0e:68:82:3e:64:66:61:cf:4a:58:f1:
17:0c:db:4d:f5:09:38:d6:0f:4b:5b:28:3d:04:19:01:f1:d4:
4d:50:df:67:ed:13:7b:59:17:45:c8:55:d7:94:e5:57:4a:09:
93:2b:d2:61:d1:fc:73:29:99:43:7c:21:e9:16:25:32:2b:93:
3c:e7:f9:39:7b:de:0c:ba:d6:f4:f8:bd:89:f3:0e:bb:61:cc:
8f:aa:ce:56:69:f9:95:68:ad:f8:a1:4e:6e:38:3a:21:14:fa:
c6:bb:51:9b:8c:ac:aa:09:2c:08:82:82:fc:8c:fd:c3:1e:e2:
9f:2c:1e:b9:34:e5:79:e8:5d:96:7f:35:0a:52:d0:6f:ae:0d:
97:ef:e9:91:cb:01:a3:f4:b7:9f:df:63:49:c4:3d:7e:65:31:
b9:a3:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:56 2026 by rpki-client