Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: JUrZMrvUreFFQkBbUqszswvF//roTj4K94lpvioDygM=
Subject key identifier: 9E:2B:5D:E9:4B:B0:3F:B0:07:AC:A5:F3:96:A9:0E:C5:01:E6:6C:97
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 019D3A1CE306ED967E12CE0E6C8BB3BE0E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 15:01:04 +0000
Manifest this update: Sun 29 Mar 2026 15:01:04 +0000
Manifest next update: Mon 30 Mar 2026 15:01:04 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: QwF5XrpitA689KuEfFU1I520GAdQLwXSJ+8f/ESvn/Q=)
2: KAtyNFRu0nGkFIQ31UZVhuZVup8.roa (hash: YYWx9qqk5yZ7cfiJEDfLmx13WTy9RC2Y4Yty+5dwt2A=)
3: Mx6UIzbNO3Bm-ZPN13wn4uov6Qg.roa (hash: KtCxVhRpFwySEkS5UZDhWr1MQTEnHKhuscd/bkCMZDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:e3:06:ed:96:7e:12:ce:0e:6c:8b:b3:be:0e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Mar 29 15:01:04 2026 GMT
Not After : Mar 30 15:01:04 2026 GMT
Subject: CN=9e2b5de94bb03fb007aca5f396a90ec501e66c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:e6:a0:e0:01:32:0e:e5:f3:ac:fe:63:94:
c7:c9:f7:83:f7:d1:5e:ae:41:99:b4:66:d6:bb:ed:
ca:68:34:38:23:30:c9:17:43:01:94:c4:67:52:ce:
0c:1b:7d:6f:2f:eb:6f:c3:b8:0c:26:ba:6f:a6:ba:
7f:b2:11:2c:c1:18:36:61:a3:6b:db:55:94:f3:32:
7b:b8:96:1a:0c:dd:0b:ac:83:34:f7:85:8a:ff:a2:
1c:44:ed:18:2e:da:46:a4:8a:26:66:0f:5e:8c:d0:
b8:cf:c9:5b:c5:87:8f:ca:9e:bd:14:bb:9f:74:79:
e0:1c:56:29:84:28:6f:08:15:0a:35:5a:5e:73:60:
75:c6:4a:46:c2:ab:4c:7c:8e:c7:42:f7:3a:d7:d5:
b6:59:db:58:e9:43:b6:b6:cc:db:31:29:5f:0b:8f:
c3:eb:ae:3b:91:50:bc:8e:e1:32:de:cf:49:3b:44:
04:86:05:4b:d1:ea:ef:a2:4e:fa:96:df:4b:0a:5b:
3f:96:7b:33:c1:f5:0b:26:e5:6b:6a:f6:71:90:81:
71:59:31:a2:bd:15:a1:2a:37:b8:68:7f:82:1a:b9:
bb:c3:a8:4e:6c:30:a8:74:71:45:25:b2:58:42:80:
6d:78:93:96:91:63:f5:18:fb:e9:c6:37:18:dd:28:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2B:5D:E9:4B:B0:3F:B0:07:AC:A5:F3:96:A9:0E:C5:01:E6:6C:97
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:10:7d:7a:7d:6d:19:04:4a:68:f4:d9:16:59:25:07:cc:47:
c9:88:6e:42:b9:2e:74:54:ac:f9:b8:0d:7b:ca:3e:1c:f4:7f:
cb:51:b3:cf:1c:9e:f3:2d:15:95:7b:0c:26:c4:6c:72:41:14:
88:c9:4a:f0:9f:6d:7e:06:52:23:ed:ad:41:c3:6b:38:0d:e8:
e6:06:22:d5:da:f4:c2:e2:d0:7c:35:51:b9:ee:ae:1d:41:f7:
31:62:c5:8d:b3:b2:47:f9:3c:99:de:d4:9f:0d:c0:33:fe:32:
d5:84:5e:4a:b3:d3:0c:54:8c:1a:06:6e:87:53:1a:08:68:31:
80:eb:dc:5d:81:21:23:ea:2a:e8:79:ac:3d:e6:c3:86:7b:81:
de:c1:e6:4e:60:8c:08:f1:72:51:13:be:a4:a5:83:f2:7b:84:
14:11:e5:30:d2:f6:27:44:e0:f0:a5:a9:90:3e:04:a1:23:28:
91:55:6e:a0:f5:17:b4:5c:d0:5a:d3:04:0a:44:89:57:17:a2:
77:e1:1f:50:d0:b1:a6:d2:72:4b:e2:02:b1:c7:d1:78:e6:de:
1b:48:2d:bb:8f:06:05:86:63:e6:0e:0b:46:d6:01:2c:8d:01:
2a:69:e7:bd:8d:12:a1:bb:34:f9:65:f3:6c:a2:0d:3b:58:f5:
38:92:d6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:53 2026 by rpki-client