Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
File: Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json)
Hash identifier: FIohNsy9FdyVuSE3r8LwUHyPmlymtfyXsmiCA+g4/bY=
Subject key identifier: 8F:B5:44:BA:34:11:F1:69:32:13:04:1B:D1:50:93:C6:69:33:BB:FA
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Certificate issuer: /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial: 019D39E5B0AD8CD25C642DC01F56B63575D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
Manifest number: 1426
Signing time: Sun 29 Mar 2026 14:00:47 +0000
Manifest this update: Sun 29 Mar 2026 14:00:47 +0000
Manifest next update: Mon 30 Mar 2026 14:00:47 +0000
Files and hashes: 1: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: OWDrawjvhoQyqrmEK6HoFCxFwz3N1v137RJpPzW/nHc=)
2: _SVgDeMt7OyK763J59KOgA7Y4X0.roa (hash: JZm207g6Ascmgp0WtNlIOYunKJNalG/ciHHMl9wcILk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:b0:ad:8c:d2:5c:64:2d:c0:1f:56:b6:35:75:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
Validity
Not Before: Mar 29 14:00:47 2026 GMT
Not After : Mar 30 14:00:47 2026 GMT
Subject: CN=8fb544ba3411f1693213041bd15093c66933bbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:da:a8:88:2b:8a:5a:e2:d3:a5:19:c9:b0:b2:
31:4d:43:bf:a8:ec:e6:10:d3:01:a6:6c:62:79:12:
b7:74:4b:e8:34:7f:66:21:7a:d6:74:c9:49:d3:91:
e6:a3:c6:41:1d:9b:f1:8e:62:01:d1:e6:a9:c3:e8:
b6:11:67:28:4f:71:1d:8d:c2:1c:a5:60:d7:07:67:
3a:41:f3:40:0d:79:9a:bd:1c:3a:d5:bc:68:60:54:
f6:e8:da:da:b5:ce:23:d4:f9:9f:1c:da:b1:fd:89:
4c:10:c8:3c:fe:12:94:ec:8c:05:b0:5f:87:d4:ca:
b3:22:91:5b:b0:70:9f:8e:9c:cb:5c:53:95:5c:f3:
19:aa:98:1a:77:6d:ba:85:73:16:86:43:dc:2d:8c:
3d:25:09:a2:ce:d0:a6:01:3e:ec:97:b9:27:16:8f:
34:bd:1f:8f:bd:fc:39:63:14:60:65:86:5a:44:9b:
b1:50:1d:8b:9d:00:4c:bf:3e:88:9d:91:0a:bf:99:
ad:e7:63:1a:0c:d5:0d:bc:03:3c:e7:c9:2f:e2:71:
d4:8e:d5:02:d1:75:25:73:1f:64:30:6b:93:c1:92:
7a:a8:6e:3a:3e:5a:7b:6f:e1:7a:2f:5a:9f:00:36:
1c:e2:14:54:46:8c:49:61:11:4f:e4:16:54:69:c8:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B5:44:BA:34:11:F1:69:32:13:04:1B:D1:50:93:C6:69:33:BB:FA
X509v3 Authority Key Identifier:
keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f5:0b:9d:ca:d3:bf:07:94:54:63:90:ba:56:1e:b0:85:e0:
3a:9b:61:1b:a1:ae:1a:65:c4:2d:cb:c5:2e:11:17:00:84:89:
15:67:9f:c4:4c:d7:02:61:73:51:9f:ce:1b:22:93:5c:e0:06:
48:b8:a1:d7:86:fa:1b:13:db:9a:68:60:d7:7f:e9:00:4b:e0:
eb:3b:40:ae:71:25:75:c1:10:0a:93:61:b8:f1:c9:ec:df:3f:
2c:0a:33:04:80:6d:1f:d3:b2:74:b9:9a:45:21:51:52:08:79:
4a:fd:16:09:4a:e1:e2:17:51:0c:53:d0:5b:d6:cf:8c:59:c8:
dc:57:32:dc:93:83:55:04:39:24:99:00:93:2f:51:77:d7:17:
1a:06:39:72:19:ec:b9:32:7f:9f:91:18:e2:7c:8b:23:75:9d:
c4:e4:43:87:42:fe:5e:0f:71:3c:7d:42:4e:6f:0d:d2:21:d8:
ec:62:4c:bd:f6:df:87:88:3a:95:60:02:1b:ef:5e:25:c2:88:
35:24:f0:29:8d:75:e3:d3:9e:0e:d1:79:79:ae:55:89:17:a8:
fa:06:ba:1f:d2:05:ac:1c:ef:87:63:af:9a:4e:74:63:7f:98:
5f:79:f0:48:60:6b:e7:78:1d:ab:a7:0d:12:9f:af:74:62:d4:
78:9c:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:20 2026 by rpki-client