Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: dSvDhBYZ8JZRiU86h6BgMCDP0JCXGeNag3lmsdpsZ1c=
Subject key identifier: 70:05:9D:6A:3D:D8:F2:B6:C9:19:B4:DF:D8:20:EB:2A:B5:2C:8E:87
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 019D38D2F9C4A8E79CBCAB08654B1BAE82F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:43 +0000
Manifest this update: Sun 29 Mar 2026 09:00:43 +0000
Manifest next update: Mon 30 Mar 2026 09:00:43 +0000
Files and hashes: 1: 3D6ST7VPwU1ruJHTqcORchHTAiE.roa (hash: NASIK7MkKYD9o//4ZODXB3XY9C+uWrjRQevxzYiJxB0=)
2: FsryNOkpTRhYXYiVpfSErxkdF5I.roa (hash: 7TnmsucFlZLELXfMUZN9SGlpQMX8+cF0eWaXdVfCFOM=)
3: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: lHCBRyHzWH75OCo43umYznmyd2s/tqOVZYjrNQHpvWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f9:c4:a8:e7:9c:bc:ab:08:65:4b:1b:ae:82:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Mar 29 09:00:43 2026 GMT
Not After : Mar 30 09:00:43 2026 GMT
Subject: CN=70059d6a3dd8f2b6c919b4dfd820eb2ab52c8e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:31:f6:7d:39:38:98:d6:9d:1b:f7:15:b8:52:
c4:13:21:70:b5:94:bf:53:2c:f7:1d:86:f5:6e:88:
f5:7a:5c:bd:82:e8:76:19:30:b7:dc:ba:68:cd:ac:
c9:9b:6d:c3:43:b3:78:5d:db:a8:a1:f8:33:68:39:
a7:83:93:f3:bb:ba:0b:d6:7f:82:12:82:c6:e5:5e:
52:f9:c9:3c:0a:cd:12:83:df:bf:e7:dc:0b:cd:91:
1e:47:db:32:b0:bf:ed:6e:1e:64:f0:80:57:0e:51:
15:c7:25:94:1d:f1:7e:62:b0:6c:a8:ad:bc:38:43:
97:ef:b0:78:e7:41:55:db:13:b1:6f:fc:3a:1e:b6:
2e:95:83:86:58:35:12:bd:51:9e:f2:e6:d5:a8:c9:
32:cb:b8:3e:11:b0:70:e2:a9:18:9c:8d:8f:cd:67:
09:ca:4f:f6:85:55:9a:88:17:0f:fb:f1:8e:47:a9:
20:a8:6d:79:db:19:c4:be:1f:a6:d7:a7:86:62:68:
54:e9:4e:2a:95:1d:db:43:7e:87:e1:e1:3f:7e:10:
fe:f2:fe:ff:24:cf:11:9e:94:07:85:9d:68:1d:a0:
c0:f7:97:e9:a7:d0:ac:7c:ba:d0:e3:f0:44:a6:9e:
83:e5:17:8e:8d:b5:e8:12:0b:11:d4:b5:91:18:c8:
2c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:05:9D:6A:3D:D8:F2:B6:C9:19:B4:DF:D8:20:EB:2A:B5:2C:8E:87
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:eb:60:80:6d:d0:79:13:f8:2e:e8:5d:9c:b7:82:8f:f8:6b:
d7:73:77:69:1c:7e:16:25:2b:e9:e5:1c:0f:ac:9e:43:8e:ee:
ce:d4:e4:bd:19:53:db:65:bf:d5:d8:0b:c9:20:18:bd:c5:8e:
c2:7d:56:42:fe:dc:9d:04:8b:56:72:a4:a4:f1:e6:e2:52:7f:
c8:cb:32:5e:5f:d8:85:be:76:be:c6:ff:c3:ea:d7:bd:1f:a4:
d4:15:86:22:bb:08:17:7d:26:db:c4:64:c4:3b:c1:f4:aa:16:
56:0c:7e:f5:28:1b:7b:eb:41:9c:eb:59:2b:b3:5e:23:5f:64:
2c:05:9a:3d:f4:98:88:79:03:5a:92:a4:20:7e:f1:60:81:88:
96:e4:de:62:13:8b:bf:2c:98:f9:d3:d5:56:b4:6b:54:dc:2f:
20:3e:d4:18:0f:0b:7b:95:97:ca:86:7c:b5:ad:ba:ec:e0:83:
e4:be:af:a8:1b:1c:d5:35:79:86:01:02:08:e3:d4:11:ff:c6:
a9:48:1b:b2:eb:b5:05:4c:b0:0a:63:27:54:82:1e:c1:79:63:
a1:b9:6b:bb:4a:83:8a:90:b0:30:1a:48:fe:de:5e:28:32:4f:
8a:b1:44:ce:6e:3e:fe:f6:9e:35:11:50:9a:4f:92:17:48:bb:
e0:83:23:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:08 2026 by rpki-client