Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: LTlubi/yxeaQ6Z1NIsWWMmvM0mRCVbuyLvbChpqPGBw=
Subject key identifier: 77:78:01:69:6B:6A:94:1F:B1:3E:9C:EF:E6:1C:A3:C3:56:E4:D5:D9
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 019D389C0FF5BEFF392CD9310E6AF20AC020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:00:44 +0000
Manifest this update: Sun 29 Mar 2026 08:00:44 +0000
Manifest next update: Mon 30 Mar 2026 08:00:44 +0000
Files and hashes: 1: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: YrfBHTzJWnSfph3FsWVbqShjL74j0qVonjqiZc1wP9o=)
2: g7fYHM51W9swYseMkrEDa3soWXY.roa (hash: k9K4BHL4fbJsHQSn19Joe+3Hon27U4MZ6GclcBUO56E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0f:f5:be:ff:39:2c:d9:31:0e:6a:f2:0a:c0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Mar 29 08:00:44 2026 GMT
Not After : Mar 30 08:00:44 2026 GMT
Subject: CN=777801696b6a941fb13e9cefe61ca3c356e4d5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:4f:36:5b:bc:8a:e3:7f:aa:29:cc:69:38:
ce:e6:dd:e3:b7:07:a1:90:86:de:01:31:46:c8:ac:
88:b9:31:9a:10:40:40:9e:b7:3f:d7:26:3e:0d:f8:
d6:b1:af:af:30:08:b6:e5:0d:11:18:eb:81:37:7f:
fa:f1:60:0d:ec:fd:a9:48:99:ae:44:99:42:4e:30:
0e:c0:05:77:ed:25:24:5e:3f:ea:36:69:8a:0b:6a:
41:f8:d2:aa:f1:01:eb:21:b4:d7:92:e4:5a:43:6d:
c3:5e:c7:69:38:82:5a:6c:a9:3d:86:c9:2a:dd:60:
ad:8c:76:f9:8e:ba:84:d5:0c:a5:bf:0f:10:38:28:
fc:f2:e3:c8:63:76:bf:ce:97:95:17:cc:cf:f5:73:
9d:45:ab:7b:ba:a9:6f:27:ad:15:f2:ca:3e:f5:5e:
cc:17:cb:5c:aa:85:10:ae:e2:b5:b3:f8:ee:a0:c3:
ac:1f:6d:a5:86:91:2d:69:a5:68:ad:1d:d1:ff:20:
58:da:84:65:0e:53:71:1b:23:15:9f:97:68:82:27:
e2:69:38:5d:f4:85:19:78:df:d1:11:4a:dc:8c:31:
69:af:2c:94:c3:52:ec:b1:0a:b1:20:83:d5:ef:d3:
96:4b:dd:30:2f:03:0c:b8:aa:3e:35:b6:7e:85:65:
c1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:78:01:69:6B:6A:94:1F:B1:3E:9C:EF:E6:1C:A3:C3:56:E4:D5:D9
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3f:9b:83:3e:b5:eb:96:d6:0a:8b:05:42:cb:36:53:42:d8:
16:c8:c7:9a:dd:e7:5b:c1:4e:da:53:75:d0:df:64:f9:0d:f2:
b2:60:7c:cb:d3:d8:e8:f5:4a:a0:00:56:d8:1a:51:34:57:9f:
49:d5:67:7a:2a:ff:a6:c2:ad:ef:35:e0:db:4b:0e:0c:c8:19:
a2:d8:6f:f0:60:67:6a:f6:a5:53:3d:bb:51:d1:61:a4:3b:4d:
02:95:84:3f:d3:dd:fb:99:c7:a0:9c:57:2f:f9:66:c1:5f:0e:
83:4b:ac:51:43:0d:dd:de:6c:f4:c2:1c:58:07:dc:0c:a8:86:
cc:b3:dc:7b:54:c9:ff:d2:04:11:52:e4:1f:b6:07:a1:4a:9a:
77:7a:b0:2f:3b:a9:ea:b5:51:b6:00:15:b5:60:2a:d7:41:08:
6c:12:01:9c:e9:85:cb:ea:7d:fc:ac:67:70:bc:c1:a9:f0:3e:
26:e0:24:d5:aa:38:25:6a:c4:53:67:25:3e:bd:ec:c3:d6:f0:
54:d7:47:76:90:69:ec:5e:cb:9f:aa:f1:d2:e2:32:dc:8f:ea:
d1:dd:d1:35:88:74:f5:e5:07:ed:87:0a:bb:cf:2e:bd:19:b0:
27:13:d3:4a:07:9d:a0:a3:56:14:5d:35:6c:24:9a:cc:22:30:
51:56:ab:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:05 2026 by rpki-client