Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json)
Hash identifier: qPw9X5Fl265InBDor1A3WcXqTuH/Q4pQ9l1dRcLUd6s=
Subject key identifier: 4A:9C:D4:94:92:F3:C9:48:4B:BE:80:FB:2E:69:EA:93:91:39:72:64
Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Certificate serial: 019CE636D828E398A07BE87C9069CDB657B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
Manifest number: 0503
Signing time: Fri 13 Mar 2026 08:01:19 +0000
Manifest this update: Fri 13 Mar 2026 08:01:19 +0000
Manifest next update: Sat 14 Mar 2026 08:01:19 +0000
Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: JopJj3WzTE9DAn0PQoiZuz0RzI8UbOUQo3oZ2ynyAE8=)
2: wUZK58GnfnXrFcL-rJ6SW3dQ9lM.roa (hash: tpiKkysQtleOXY8s7JxmnW98sGuzWNG7qUWUKxa7byA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:d8:28:e3:98:a0:7b:e8:7c:90:69:cd:b6:57:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Validity
Not Before: Mar 13 08:01:19 2026 GMT
Not After : Mar 14 08:01:19 2026 GMT
Subject: CN=4a9cd49492f3c9484bbe80fb2e69ea9391397264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:b7:4d:a2:b5:45:46:62:2e:7b:d6:78:27:
60:f2:cb:a6:f2:d9:fc:67:46:69:a7:b3:39:73:19:
f6:49:a3:37:82:9d:8f:0e:b6:51:a4:f5:f4:0f:62:
6a:9c:a5:1a:33:35:fa:ec:9e:fe:91:da:32:c7:01:
66:f7:65:8c:f8:12:07:93:2c:63:5d:81:d9:ce:e3:
08:0e:e3:b4:12:55:ec:ce:a4:40:ac:a3:df:33:b5:
09:38:86:d5:ba:9d:5d:15:6d:21:b4:c4:bd:52:3b:
c7:fe:5c:e6:f0:ae:7c:61:4e:fd:9a:40:b1:eb:ff:
20:12:a5:35:4e:a7:d7:e9:b2:0e:05:63:d9:57:d2:
0b:2b:c8:ca:5f:e1:9c:0f:4e:6d:04:7a:4d:a6:e5:
2f:b5:21:4b:82:f9:72:fb:79:3c:79:4f:ff:bc:e4:
8e:6f:b6:a6:fc:cd:d3:f8:2e:28:f2:cf:a3:15:9c:
b9:4f:c4:ec:e2:54:18:a9:92:04:8e:af:a7:a1:d3:
7c:b3:07:be:6c:81:94:9c:0b:f3:97:a7:36:94:66:
e1:4b:0f:7e:0e:d9:44:3b:3f:c2:91:1c:f6:95:7c:
2b:16:bc:59:06:5a:16:99:1c:fc:7c:f6:7b:bc:c7:
16:80:5e:10:9d:8c:30:77:18:ff:00:ab:14:93:66:
c9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9C:D4:94:92:F3:C9:48:4B:BE:80:FB:2E:69:EA:93:91:39:72:64
X509v3 Authority Key Identifier:
keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2e:38:b0:1e:3f:98:a6:37:af:4d:97:ef:01:1d:4b:2f:e1:
03:66:c0:03:00:dd:27:40:d5:ad:a3:ee:84:d3:2e:cc:20:02:
ee:43:9b:4c:5e:10:40:6f:c2:31:ac:37:bc:f7:0b:88:2d:a1:
a3:90:9a:f9:9f:65:9f:e2:c7:8b:d2:ea:74:36:39:d7:e4:28:
ae:d7:89:b6:47:37:a0:ae:8e:cc:ec:02:5a:08:90:9e:cf:fb:
19:3e:7b:ea:19:2a:d1:09:40:7f:d3:25:e7:31:a3:68:3b:64:
e2:7d:7c:87:03:8f:cc:02:e7:9b:d0:83:6a:c6:b8:bc:fa:12:
f6:64:e1:1c:86:96:3e:86:c0:4b:39:93:ac:fc:e8:6d:2e:b8:
9c:28:76:b3:75:d4:83:7e:31:3b:f0:40:a5:8c:71:7b:3c:93:
5c:43:6e:c6:89:5a:71:0b:f2:96:1f:68:80:53:e1:e8:9d:64:
db:90:56:c3:e9:75:26:e4:4a:82:c6:3c:e1:b9:a0:5e:d6:22:
f3:61:0d:13:8d:84:04:c7:9c:4e:33:82:20:dc:fa:97:d8:35:
49:a9:9e:23:41:87:83:9a:0b:25:79:3d:55:4a:dc:b1:34:14:
26:d8:bd:53:0c:83:b4:3b:01:a8:91:38:1b:d4:43:83:cb:24:
61:57:28:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:55 2026 by rpki-client