Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json)
Hash identifier: Sg6ss5oPe+luZto3jxpL1IcXTw8wX/V5Psv7LsjO6qY=
Subject key identifier: 32:66:FB:1B:DE:56:FB:F5:1F:62:F6:DE:14:5C:40:F4:2A:93:3E:0D
Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Certificate serial: 019DCFE3CC788D69A2E7B3A8E766A582ED64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
Manifest number: 057C
Signing time: Mon 27 Apr 2026 17:01:45 +0000
Manifest this update: Mon 27 Apr 2026 17:01:45 +0000
Manifest next update: Tue 28 Apr 2026 17:01:45 +0000
Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: AOIhMUWD4/fTGi61+ERar12+hjh1BfwHvOc7nnCh6Gs=)
2: wUZK58GnfnXrFcL-rJ6SW3dQ9lM.roa (hash: tpiKkysQtleOXY8s7JxmnW98sGuzWNG7qUWUKxa7byA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:cc:78:8d:69:a2:e7:b3:a8:e7:66:a5:82:ed:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Validity
Not Before: Apr 27 17:01:45 2026 GMT
Not After : Apr 28 17:01:45 2026 GMT
Subject: CN=3266fb1bde56fbf51f62f6de145c40f42a933e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:fb:3f:d8:90:7c:65:da:05:eb:1d:48:81:6f:
e4:ca:f1:0d:25:72:1f:4e:4e:40:68:54:9d:74:dd:
8f:ca:e5:d5:1a:1f:99:71:b5:2c:2c:92:8f:11:a8:
ec:b3:28:37:a4:a1:16:4b:7b:e9:22:41:fc:c4:92:
2f:a8:a2:ca:bf:20:2d:cb:cd:1f:23:6e:e3:d1:2d:
20:3f:15:db:cd:8b:2e:e4:20:87:63:8a:93:6f:f8:
63:83:d0:81:9f:12:1e:12:6b:63:bd:5e:f2:80:e4:
ab:48:b2:0c:38:5f:d1:e2:51:6b:8b:15:1d:61:d6:
0f:58:65:c0:f2:a9:00:84:c2:bf:e8:c7:37:7b:91:
30:56:df:cc:67:fd:46:e3:7f:0f:28:6a:a8:e2:81:
3a:3f:8b:e0:c8:3c:fe:9a:ef:99:76:d8:e6:f9:10:
1c:f2:47:92:fe:83:cc:d8:ae:ba:b4:9e:da:cc:13:
44:5e:72:5e:1b:ed:9a:e8:20:a0:d7:c8:06:47:db:
bd:b3:0c:cd:a4:68:e8:dc:b5:b1:be:79:00:f5:70:
04:77:57:b9:28:44:ea:db:86:8e:c0:6a:f6:d2:50:
a5:dd:48:51:33:70:8a:b5:c6:2d:1e:e1:e0:94:49:
31:b7:3a:93:9b:66:ee:66:c5:e9:b5:a7:61:1e:73:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:66:FB:1B:DE:56:FB:F5:1F:62:F6:DE:14:5C:40:F4:2A:93:3E:0D
X509v3 Authority Key Identifier:
keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1c:33:cb:15:72:00:83:fd:7d:9f:7a:50:d3:48:24:89:62:
04:d5:95:60:07:f9:d4:6f:e6:19:b7:09:11:7e:b6:80:ff:9c:
1c:04:1d:45:41:8c:56:e5:6e:dc:0f:93:8b:a4:2d:ee:c0:e7:
e8:85:a2:c6:7b:96:2f:db:89:36:e2:47:47:47:04:6a:d2:e4:
c7:3e:9f:d3:14:51:c7:95:59:44:88:e2:c7:5a:c1:23:bd:c8:
d3:55:34:c5:21:15:50:83:28:0f:70:ed:d4:d1:da:f3:db:a6:
11:d7:9a:6e:4e:b0:30:78:e9:2e:a4:6d:6d:57:e8:4e:b6:cb:
31:6d:6b:34:82:aa:af:70:ec:48:47:7d:a9:a4:f7:c3:e5:c0:
06:05:ae:43:5e:7e:da:69:02:01:32:e0:76:e9:ae:54:96:6c:
74:74:35:de:66:53:a3:61:a5:b7:c3:8a:f1:56:87:3c:be:cb:
59:86:6d:9e:c7:8e:91:6f:24:e9:04:bb:af:74:f7:3e:eb:c1:
2c:61:1a:14:4a:ef:1a:e8:d9:ac:9b:11:af:eb:31:01:b5:91:
0c:fe:03:be:99:4a:6c:33:9c:00:29:8f:fe:86:72:d2:53:44:
e4:fd:1b:a6:6a:c1:1b:a7:27:04:1b:a7:3e:7d:ff:3e:1a:8d:
fe:e1:64:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:58:23 2026 by rpki-client