Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier: hmfe+UjXihkMuwHqVedTphXyiZObHzCaAEFg3e1EpL8=
Subject key identifier: 33:84:5A:07:57:94:1B:DF:20:B1:D6:9A:01:9A:47:FF:3A:C9:02:86
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 019D394072798BB73F4661A50BBBCDFFD2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number: 0941
Signing time: Sun 29 Mar 2026 11:00:18 +0000
Manifest this update: Sun 29 Mar 2026 11:00:18 +0000
Manifest next update: Mon 30 Mar 2026 11:00:18 +0000
Files and hashes: 1: RirrsvwYX5j7L-75yH60raw263E.roa (hash: IOJ4XETq/n9kBBATZy+5z0L1BPBp5v7kLy/O5w5iiLM=)
2: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: JMMME9Z1ZcD7NJoiECuiRmEReHt9wTf5dFSHxvLLPgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:72:79:8b:b7:3f:46:61:a5:0b:bb:cd:ff:d2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Mar 29 11:00:18 2026 GMT
Not After : Mar 30 11:00:18 2026 GMT
Subject: CN=33845a0757941bdf20b1d69a019a47ff3ac90286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:7b:43:ef:02:b5:47:62:42:b2:ae:03:fd:
c5:3e:c6:59:2b:99:d9:89:0b:3c:0e:cb:a2:e1:fc:
dc:06:9d:bf:7a:25:9e:4d:d0:b3:2f:82:f5:85:a7:
fc:25:74:fc:69:d4:86:6e:67:dd:ef:ca:ec:77:6c:
3f:88:e1:3a:9f:85:81:b9:a3:2c:7a:c2:74:49:f1:
64:e0:51:6b:ca:31:73:ff:d4:36:02:7c:10:34:04:
45:53:25:12:4d:12:29:38:07:72:28:2d:50:a2:72:
af:f3:e1:a3:10:52:87:d9:d8:95:11:ca:7b:00:29:
44:89:74:c2:2b:f1:d8:2f:d2:78:61:e2:aa:dd:07:
6b:8b:0d:cb:c8:da:f5:21:ee:6d:de:12:4f:74:ce:
12:04:5f:d0:dc:f0:2d:3b:01:0f:48:9e:0d:d1:61:
24:88:b8:0a:17:ed:83:7f:0f:a4:b5:c1:66:bc:9f:
a9:38:9e:80:48:a3:1f:ce:57:81:a6:4d:66:d4:f5:
a2:0b:b3:37:dc:28:67:05:48:db:4c:4c:9b:db:48:
e0:20:24:ce:7a:4c:f9:0a:3f:f0:03:2a:95:78:1e:
33:ee:05:ea:b8:83:3b:8e:d6:7f:a7:02:d4:58:4f:
81:24:a2:98:c7:5e:d4:68:b1:13:59:81:b4:94:41:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:84:5A:07:57:94:1B:DF:20:B1:D6:9A:01:9A:47:FF:3A:C9:02:86
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b7:8b:1a:45:65:1b:a1:c1:9d:dc:3e:19:81:5a:ec:3c:ca:
48:87:79:d1:b0:42:0a:9b:16:c8:12:42:ce:5a:7c:17:4c:8c:
f4:33:ff:9f:c9:80:88:70:f5:0d:23:11:a4:7e:5d:7a:94:3a:
b8:bc:f2:e2:c2:c7:42:59:5f:78:66:1e:67:af:3f:eb:3b:5c:
09:37:09:13:90:71:c5:71:d9:8d:20:f5:b6:84:ae:0e:2b:41:
25:0c:db:9b:14:2b:9f:90:8c:0a:6d:8e:9f:07:a5:25:f1:5d:
39:33:28:87:b1:ad:7c:1b:ff:0b:29:a6:83:b5:78:c6:0d:5d:
80:e3:18:73:7f:15:b1:72:27:d4:dd:09:41:0c:ae:52:6e:3d:
8b:94:3e:33:0c:44:73:2f:79:b1:0d:3f:9f:12:60:82:c2:9c:
83:34:ee:5f:4d:e6:02:8e:03:2f:2d:21:0b:30:aa:ec:80:93:
a8:fa:81:32:04:e1:1e:78:a1:a5:8b:71:12:78:c2:42:76:89:
c8:6f:9d:f8:dd:2d:9c:a6:a1:8e:9e:27:7c:75:55:21:d8:4f:
99:d4:fd:0e:83:80:7a:9c:f9:4d:02:fa:20:7b:60:5b:44:ff:
72:1e:ec:b6:74:72:14:b5:b2:1f:f3:cf:2c:8b:5b:5b:1b:80:
37:0a:95:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:54 2026 by rpki-client