Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: TPkzNt2cTLvIHse07VVADOPn2VnwyybwOkKHFbiHbFg=
Subject key identifier: BB:0C:F2:EA:A4:15:FA:50:65:95:0E:C3:BA:1E:27:CF:8B:1C:11:77
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 019D3865DB6C3C8C89F9C16B9AD9447D50B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:32 +0000
Manifest this update: Sun 29 Mar 2026 07:01:32 +0000
Manifest next update: Mon 30 Mar 2026 07:01:32 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: WkXnZVAQ5VmbRZQ/XlFhq+JXfAc+i1Cl5Mz88AdVmZg=)
2: NxS44xqtw9wnJjtyrxmTBDUCj5c.roa (hash: HUNSDs/gJPWUN3iy9W3sRGZH+ajPQ9ZIuVJ3VIFyz4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:db:6c:3c:8c:89:f9:c1:6b:9a:d9:44:7d:50:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Mar 29 07:01:32 2026 GMT
Not After : Mar 30 07:01:32 2026 GMT
Subject: CN=bb0cf2eaa415fa5065950ec3ba1e27cf8b1c1177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:d8:53:73:b5:79:80:ec:4d:7d:77:fa:5b:
61:7b:40:c6:98:70:6d:46:00:b4:0f:29:cb:a7:ec:
b4:18:e6:ea:c4:e4:f6:82:45:61:40:24:1b:fa:a4:
24:3a:99:51:f3:df:15:53:30:c7:c6:ba:e3:5e:52:
6b:4d:67:75:78:5d:20:cf:bc:f4:f7:ac:fc:dc:94:
86:9c:46:b6:04:86:f5:77:e6:81:0d:58:cd:50:5a:
63:7e:49:3d:d0:53:a4:38:86:7b:1b:f2:50:78:36:
23:72:12:e5:c8:2c:05:c3:b8:8e:57:bf:71:b0:96:
b4:ca:20:f4:da:ed:65:33:b7:3f:4a:70:ca:7a:b2:
f1:e7:dd:88:22:8f:e5:f8:bd:0b:39:3a:cd:13:88:
92:cc:3e:39:77:ad:5d:01:a9:99:cf:a4:3a:e3:56:
94:e5:c9:55:9d:7f:f5:26:9f:03:ec:10:45:6f:77:
8b:cf:f5:3a:cb:f4:d5:09:a6:e8:52:19:07:bf:dd:
30:cd:a5:de:42:a4:11:08:cf:f7:95:2a:21:88:68:
4c:0c:bf:43:44:cc:8e:3b:fc:ca:32:dd:cb:2d:92:
10:ec:7f:f5:9d:cb:04:a0:e4:f4:92:5f:ba:f0:be:
c6:18:0e:89:76:0c:d2:cb:a9:2a:5f:7b:69:1d:4a:
95:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0C:F2:EA:A4:15:FA:50:65:95:0E:C3:BA:1E:27:CF:8B:1C:11:77
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d1:dd:45:75:90:4d:9f:cb:17:e3:a7:3a:d8:f2:3c:8c:13:
1e:04:0f:8e:8e:ef:49:1f:75:06:3e:46:ee:4c:ff:f0:cb:0a:
78:ab:55:85:37:a2:c8:16:5a:07:98:83:8e:d7:ec:ac:3d:92:
1e:da:4d:c0:dd:db:61:f3:f6:b6:f1:3d:ab:f1:4f:20:95:17:
32:08:92:c2:c6:2e:19:61:f5:0c:ec:d2:fb:27:cf:12:4c:ab:
4b:7b:0c:f9:f5:ea:de:37:e5:15:0e:8f:98:1b:5f:44:d9:80:
23:d7:eb:9f:c7:e6:89:b7:21:ec:6d:f4:aa:18:e5:ea:91:f8:
8e:45:f2:75:8a:b5:39:9e:87:ce:a2:3c:b7:cc:c1:51:15:5c:
08:7e:01:0d:bd:a6:7e:f3:cd:42:b9:bc:2b:10:b3:19:a5:5d:
fa:57:65:36:60:f4:01:39:bc:4e:12:74:12:a9:ab:5c:d3:f5:
fe:5b:04:01:e2:f6:da:77:53:a8:25:ed:b5:65:43:5c:d4:18:
a5:dd:af:11:30:24:ac:0d:d5:c3:a5:df:8b:c4:3e:5a:22:95:
63:86:07:9a:01:d0:7c:6c:b7:07:74:47:cd:0e:8c:44:8e:f2:
ca:72:ca:26:88:86:c6:89:f8:8c:1c:1a:8c:d6:dd:0b:77:3c:
e3:50:00:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:39 2026 by rpki-client