Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
File: dciLHEH7612r73Q8V6zf_E-nRpk.mft (raw, json)
Hash identifier: cN+x+bYpCxOO595Qjw1wzKfbm6Yz5HdFKvVO/q3Pumc=
Subject key identifier: 75:24:05:CA:8E:34:4F:C7:AF:D0:32:47:92:F0:1D:72:99:81:36:CF
Authority key identifier: 75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
Certificate issuer: /CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Certificate serial: 019D38D310EF131DF289E165268A4E5F4C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
Manifest number: 131E
Signing time: Sun 29 Mar 2026 09:00:49 +0000
Manifest this update: Sun 29 Mar 2026 09:00:49 +0000
Manifest next update: Mon 30 Mar 2026 09:00:49 +0000
Files and hashes: 1: _QeltRwVrmIgCr-eo6LxBUwzpXY.roa (hash: q8bq7ENqcKxVLtJa6stK4wblRlHycCi1u+gxzHveo3E=)
2: dciLHEH7612r73Q8V6zf_E-nRpk.crl (hash: Q1mXFO1ILCUOkayF3JctK1pkG1DXOGPwJBFdp+9sNNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:10:ef:13:1d:f2:89:e1:65:26:8a:4e:5f:4c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Validity
Not Before: Mar 29 09:00:49 2026 GMT
Not After : Mar 30 09:00:49 2026 GMT
Subject: CN=752405ca8e344fc7afd0324792f01d72998136cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:ba:ca:d3:90:91:e4:ad:50:c8:f7:df:a0:
b2:36:89:f4:67:3b:15:2b:a3:01:6d:1f:ec:cc:0f:
5c:11:4e:e9:4e:e6:f0:33:82:12:b6:b4:df:b2:54:
6c:fc:a3:9e:64:49:92:d7:03:cc:2d:f2:c1:ee:4a:
4a:39:1e:d4:17:96:44:ee:d3:7e:a2:6d:b3:a0:97:
d6:28:04:bd:29:29:0f:7c:e8:6b:74:f7:74:0b:7c:
c7:e2:6c:6f:6b:f7:54:85:4a:a5:f4:ed:72:28:dd:
14:17:50:cf:b8:16:96:df:91:5f:d7:44:e5:92:0b:
31:2f:b0:8a:6e:1b:38:fd:2d:b3:b9:55:29:fa:8d:
db:d9:a5:3b:25:aa:a9:8b:40:ce:e8:46:68:9f:23:
18:b3:d6:d9:00:0f:31:eb:36:49:75:cc:09:98:ef:
cf:ca:66:2e:09:e1:45:80:04:53:64:c9:7f:cc:68:
c8:db:76:1c:12:c8:de:ef:65:f3:dd:6d:73:df:6c:
af:b3:74:75:02:85:57:51:4c:75:55:6b:b0:eb:60:
91:62:40:48:e5:a3:09:cc:7e:a8:0d:bf:78:d2:71:
cf:73:56:db:d4:c0:89:78:78:32:fd:9f:14:f0:1a:
62:44:bf:75:89:bd:fd:a7:62:55:70:c2:95:ed:d0:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:24:05:CA:8E:34:4F:C7:AF:D0:32:47:92:F0:1D:72:99:81:36:CF
X509v3 Authority Key Identifier:
keyid:75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:83:40:4a:8c:68:d8:2e:55:4f:31:76:fe:43:60:a8:38:ca:
88:e8:79:25:d3:3b:70:70:3d:3b:c6:f3:0c:bc:46:7c:b2:4f:
01:55:2e:2c:cd:aa:f1:b5:25:c1:59:de:41:44:c6:e3:e3:a1:
56:59:42:02:39:b3:d9:f3:3c:75:14:9f:c6:38:d6:ca:f7:e5:
3c:04:62:a5:21:59:1e:a5:bf:e9:88:78:b1:0e:c9:a2:b7:17:
bd:e9:15:c8:b3:83:44:db:4a:83:4a:40:91:73:e8:7a:3d:6c:
ae:c4:1a:c4:6e:fc:b8:08:40:e4:70:4c:f5:a8:af:fa:d5:c4:
3b:60:67:9e:4f:2c:0a:6b:1b:d6:f7:28:22:a3:78:28:42:6a:
ea:51:75:fd:76:5d:39:3e:29:18:8f:38:f3:ab:56:6b:d3:38:
34:f6:14:08:a5:78:80:8b:4e:f8:8b:e8:d1:29:42:f8:0c:fb:
20:92:ac:4e:aa:6a:35:d7:46:4f:48:14:6d:9b:5a:1b:3c:cf:
1f:89:2f:47:23:06:9a:ee:33:6e:e6:11:ca:b7:f0:9c:d7:3c:
78:0f:a1:7c:e4:89:ba:af:da:e1:07:73:ed:ce:08:26:7a:fa:
ac:b6:b0:09:74:0b:d4:c5:65:cc:26:ee:ce:f0:a6:49:8b:59:
42:0b:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:00 2026 by rpki-client