Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
File: dQ_7ZVLViud0ukJNVSezUGJPqvw.mft (raw, json)
Hash identifier: 53K8NWS9hRlgsdKBM3ZVCnZxAAg9+jfcYKel15cDpEA=
Subject key identifier: 17:83:9F:BB:D9:25:8D:05:46:77:46:E2:F9:F8:23:61:5B:57:AF:82
Authority key identifier: 75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
Certificate issuer: /CN=750ffb6552d58ae774ba424d5527b350624faafc
Certificate serial: 019D3977C38FF71E1F4A7DCAA1D3A8F8E68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 12:00:43 +0000
Manifest this update: Sun 29 Mar 2026 12:00:43 +0000
Manifest next update: Mon 30 Mar 2026 12:00:43 +0000
Files and hashes: 1: dQ_7ZVLViud0ukJNVSezUGJPqvw.crl (hash: Ls2TbkmJS4k0N6NWQaRDISbYQ8pXVnOTTU9j+xqKStk=)
2: wpBz1cZtdv79Ar3akf9GaInWtzg.roa (hash: ite+6yHL6pp97dJQxSW2RVfxFWR32C053YIMvKgrigM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c3:8f:f7:1e:1f:4a:7d:ca:a1:d3:a8:f8:e6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ffb6552d58ae774ba424d5527b350624faafc
Validity
Not Before: Mar 29 12:00:43 2026 GMT
Not After : Mar 30 12:00:43 2026 GMT
Subject: CN=17839fbbd9258d05467746e2f9f823615b57af82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:b7:92:9e:4a:f1:df:48:e3:20:48:1b:34:
32:2e:14:fb:6f:5a:5d:50:71:e4:78:30:75:3c:23:
40:30:3d:3d:6d:a1:74:23:57:e9:71:17:51:f4:67:
88:17:40:b3:3d:53:1b:13:0a:b7:21:a8:54:80:4e:
b0:b2:5e:e2:bb:08:b0:9a:0f:10:1f:cc:d2:2d:59:
bb:68:05:b8:74:5b:52:99:3c:c2:86:b0:1c:07:14:
3f:c2:7b:ce:91:09:65:21:da:be:4d:56:e3:5f:2d:
d4:2b:13:57:ae:cd:69:15:95:76:cd:e0:bd:8b:39:
6b:36:b1:b1:dd:b6:a6:da:85:fc:34:c2:28:ce:72:
64:95:23:23:db:4b:86:cf:0c:c3:e9:c9:b2:df:cc:
2b:af:c4:64:10:5b:09:8d:cd:a2:80:76:b4:de:74:
55:40:a2:a4:92:aa:34:a4:4b:87:b5:fd:d7:38:9d:
56:ee:2b:9b:5c:e6:27:fd:92:c4:2f:c7:a5:8d:a2:
42:44:79:ce:1f:ed:98:b1:90:39:09:b0:7f:bb:1d:
d5:b0:46:bb:29:3d:d9:53:e9:cd:a4:8e:fc:20:8a:
4a:98:43:78:54:c7:f2:de:8a:33:f2:25:97:28:0f:
14:bb:b6:83:79:b7:a7:b0:ed:2d:22:f1:91:5b:c3:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:83:9F:BB:D9:25:8D:05:46:77:46:E2:F9:F8:23:61:5B:57:AF:82
X509v3 Authority Key Identifier:
keyid:75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b3:43:ff:73:a7:c3:93:9d:e8:e0:8a:e7:46:fd:2a:53:ee:
c0:fc:bb:6f:38:5b:14:c0:0f:d0:99:f5:7c:cd:48:ac:89:60:
2c:3e:7d:cd:72:c1:9f:24:c5:3d:33:4d:07:d6:18:43:5b:28:
e8:8e:68:15:e8:64:0f:dd:6f:3b:75:e6:52:16:8e:7f:a6:d9:
3d:10:58:e9:a8:86:d3:9c:90:26:3e:71:8a:19:fc:63:1d:8c:
82:68:b9:72:f3:ff:86:57:e8:92:fc:a2:5f:bc:52:7e:f8:f5:
05:93:58:d3:37:14:e6:32:7f:9b:87:e9:7e:cf:b3:96:cf:35:
ed:2a:d9:2c:c8:0b:cf:48:47:0c:a5:07:7b:d1:c6:d4:42:6f:
67:83:1b:01:89:fa:87:b0:91:45:16:a9:8e:52:1f:00:d4:79:
72:c3:2f:8f:34:b6:7e:eb:3b:ce:b8:26:45:b9:c8:49:c0:32:
47:99:08:bf:6a:e9:0c:3a:83:81:e8:bf:be:22:c6:6f:57:07:
0c:99:6a:ce:31:c4:e1:c3:ec:28:9d:34:67:b2:6b:27:d9:09:
e8:f4:f8:00:3d:90:fc:f1:12:f8:f8:96:3f:f2:b6:0d:53:15:
21:8e:c1:0c:6d:9e:1b:a6:89:be:ef:f3:19:9b:0e:67:ad:5b:
f8:5f:59:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:14 2026 by rpki-client