Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json)
Hash identifier: oPfG70j0+/2H8oqFPwrVSoN77PwwTQKo+oZN1zb6guI=
Subject key identifier: 85:42:8C:EB:A8:9F:5C:08:57:3A:7F:6B:E1:96:58:01:B1:62:D1:25
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial: 019D3977952A17930FE8CD7021DCDFBAEBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
Manifest number: 15A7
Signing time: Sun 29 Mar 2026 12:00:31 +0000
Manifest this update: Sun 29 Mar 2026 12:00:31 +0000
Manifest next update: Mon 30 Mar 2026 12:00:31 +0000
Files and hashes: 1: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: jinzh1i4GbCjFlENXkmreR/dp0mMCpWl4elZnapSdG8=)
2: oQCJF4siUdcpboMPfHP2EbeM0ps.roa (hash: IesKj0DCrmac38Ifbjs7D9byS/qB5f4vRUYllQm6ZFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:95:2a:17:93:0f:e8:cd:70:21:dc:df:ba:eb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Validity
Not Before: Mar 29 12:00:31 2026 GMT
Not After : Mar 30 12:00:31 2026 GMT
Subject: CN=85428ceba89f5c08573a7f6be1965801b162d125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2e:49:57:71:c5:5f:2e:f6:22:1b:e3:d3:7f:
27:8b:68:78:dc:f0:74:b7:f9:29:10:78:a9:ca:c2:
52:09:ea:ae:80:26:9b:09:a0:a6:fc:49:6c:e9:cd:
f6:01:d7:da:47:4e:84:b8:40:db:87:c5:50:4e:cb:
df:21:ee:19:4a:28:3c:d7:bb:ed:e2:eb:48:46:25:
c9:e5:cc:43:22:41:97:1e:43:2b:65:f9:78:da:a8:
f9:b5:18:62:b0:6e:16:06:ef:60:4d:af:47:45:3b:
9e:24:c6:da:99:0d:a5:6e:b9:66:92:f8:3d:80:2b:
ad:49:b3:ca:82:52:28:aa:06:15:be:76:67:d2:4a:
2d:f6:a7:4f:82:52:cb:08:df:b7:e8:bb:02:a4:2a:
8d:88:da:89:c3:1f:d2:b8:ac:b8:c5:25:65:31:0b:
dc:fc:79:df:c0:b2:9c:a7:5e:26:20:1a:7e:7d:f4:
83:a7:f4:37:f4:73:6b:b4:56:08:6a:84:d2:2e:f5:
0e:9a:4f:33:ad:6b:70:19:59:9d:71:fa:41:83:b6:
06:e3:5b:e3:72:28:76:3b:93:8d:2b:89:16:03:15:
34:47:ae:3c:8e:9a:39:0d:22:fa:41:28:95:41:54:
ad:f6:17:12:6b:0b:f3:09:2d:bc:1b:eb:76:2c:f3:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:42:8C:EB:A8:9F:5C:08:57:3A:7F:6B:E1:96:58:01:B1:62:D1:25
X509v3 Authority Key Identifier:
keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:17:1a:5a:c1:2b:d8:05:ee:53:5c:be:3d:f7:12:5d:02:60:
23:c5:a4:d3:3b:1d:c5:41:6c:52:d3:5a:b2:76:6f:05:85:1a:
e2:a0:89:f4:35:c0:cb:cc:ef:0d:62:9a:79:15:7c:6a:b5:b8:
e9:4e:6c:11:17:d4:a5:2e:b3:24:49:eb:85:e0:0e:01:f9:ac:
b7:80:da:4e:96:93:0b:39:0f:d4:0b:75:e5:29:96:c0:c1:70:
77:15:ec:8d:d2:09:8f:68:ac:39:d0:32:0f:e6:09:76:14:c8:
ea:d0:24:a0:3f:5b:d6:37:8d:b7:49:9f:f6:fc:2a:49:d1:ba:
92:25:62:b6:cd:45:9e:56:e7:e9:d8:54:42:62:45:2f:c0:7b:
68:dc:37:11:2d:1a:92:c1:51:d7:56:3a:20:83:d1:19:c7:0d:
07:ee:fa:86:ad:b6:06:c3:d3:a8:52:7e:f5:9e:11:ae:2a:55:
1f:62:75:8f:ed:63:76:31:2f:a9:9a:7f:7d:91:b9:4d:e3:12:
04:03:ae:39:21:30:be:63:45:01:41:72:4a:ef:80:47:9e:35:
c7:3a:e6:08:e2:97:1f:64:4f:c8:4f:4a:98:01:fb:97:64:97:
be:9b:a0:44:a8:18:4a:ed:d6:45:91:d8:31:c5:a7:f6:10:ad:
58:4c:7a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:26 2026 by rpki-client