Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json)
Hash identifier: viSX75961XJPKBshm5BBoWcLCRaM+F3+BBcOe5358cA=
Subject key identifier: AE:38:7F:EE:4C:5A:1A:58:90:97:5C:F3:26:9D:2C:0F:EE:C2:EE:CA
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 019D37523F7363087ED5B351DAD38D3A3E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
Manifest number: 0F74
Signing time: Sun 29 Mar 2026 02:00:30 +0000
Manifest this update: Sun 29 Mar 2026 02:00:30 +0000
Manifest next update: Mon 30 Mar 2026 02:00:30 +0000
Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: SCo+7hB3K3FFmiC8x8sziBMCacILQBpw6GTLYmi+cpE=)
2: pEi1sXolFr3_KzzGy9GgxCb35YI.roa (hash: 0hWxK4UVYjDavdDARBqtyWujMUcunhSXg8YFegPVy8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:3f:73:63:08:7e:d5:b3:51:da:d3:8d:3a:3e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Mar 29 02:00:30 2026 GMT
Not After : Mar 30 02:00:30 2026 GMT
Subject: CN=ae387fee4c5a1a5890975cf3269d2c0feec2eeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:68:48:c0:40:a5:1a:a1:e7:16:7b:89:ea:87:
17:1f:54:df:c1:8f:c1:7a:9e:9f:37:53:19:fa:d8:
51:7b:51:a5:fe:fc:32:25:c8:af:ab:95:5b:f7:4c:
16:f0:e6:bb:76:d7:00:4c:64:14:5d:df:0a:3d:ab:
8d:92:8d:68:4f:11:2f:d3:3a:17:95:3e:8d:2b:2c:
d6:8c:86:7a:df:4e:90:cd:20:2a:84:a4:f1:b8:d8:
cd:40:0b:de:54:81:9a:ac:40:4b:6e:95:76:c3:5b:
c0:1a:14:1a:c5:5e:54:af:c7:ca:82:09:3b:53:ec:
e9:14:77:80:31:a2:4c:9c:2a:d0:fd:80:74:65:36:
52:e5:fa:35:72:a7:88:7e:89:ec:16:47:2b:bf:02:
6b:9d:7c:8f:50:3b:ee:29:eb:32:56:7c:2a:cb:f7:
61:d0:12:0f:3c:75:39:69:61:be:e3:c9:0f:de:91:
3b:74:f3:3b:52:75:74:3b:75:d4:31:f9:d0:10:92:
54:f8:4b:d3:b1:b7:65:13:41:16:d5:47:76:0d:60:
8d:28:36:91:d4:a0:24:6e:21:1e:51:0c:96:1a:74:
6a:f7:72:2e:ce:dc:e5:62:2c:09:85:b7:5f:5b:c5:
2c:ca:80:90:a9:5d:f3:83:03:11:1c:7a:d6:f9:6c:
f0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:38:7F:EE:4C:5A:1A:58:90:97:5C:F3:26:9D:2C:0F:EE:C2:EE:CA
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fb:ec:34:ff:9d:1f:64:cb:f9:4f:53:e9:92:bf:99:7e:bc:
32:f8:16:32:a4:91:ea:f1:c5:1e:46:e8:59:b7:48:5d:66:9a:
af:17:b2:02:e2:5a:a7:c4:e1:a3:dc:10:c9:cb:96:a4:f2:08:
16:a4:cc:fd:8d:c6:43:c7:f7:85:44:3e:42:0a:c6:4b:39:5b:
f5:ee:a6:3f:03:72:b4:64:5b:d3:13:59:cd:e5:f2:3d:7b:1a:
a0:17:83:5e:5b:06:3f:02:7e:c0:19:9b:cd:ca:62:46:25:71:
a6:30:e1:45:25:69:b0:8d:58:9a:35:f4:12:74:69:e7:86:e5:
5e:7c:7d:b1:27:71:d1:e4:4d:f4:f2:f7:0b:ba:e8:f1:15:5c:
dd:61:34:d4:89:a7:84:4e:2e:ac:d6:c8:7f:b6:e1:95:fb:80:
e5:38:7f:bf:d8:1a:bc:76:ac:41:a2:a1:61:d0:f9:e2:36:05:
da:05:f3:8c:51:bb:d9:93:15:28:40:79:ec:28:55:35:04:94:
49:e9:b0:8d:29:7f:e3:a5:25:c8:36:af:79:16:07:06:80:14:
b2:d1:ab:23:42:7e:57:ef:2e:d4:fc:ab:53:c1:34:f9:bd:92:
3f:58:5d:65:ff:0b:c7:6a:4e:4c:49:ed:b1:37:0c:e3:4d:4c:
6b:b0:b6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:55 2026 by rpki-client