
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
File: dtS8ie60qcifEAXqrSJ8EyXtFWI.mft (raw, json)
Hash identifier: CNj+AD9nlJi6IrrpKptR1XsAqwAU4049nQxGrkpxP7k=
Subject key identifier: D3:18:8E:F4:27:43:AD:0A:7E:94:FE:73:BA:B5:2C:29:84:D9:C0:07
Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
Certificate issuer: /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Certificate serial: 019CAED9D992CEC32FB072656723A1978F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
Manifest number: 0B63
Signing time: Mon 02 Mar 2026 14:00:38 +0000
Manifest this update: Mon 02 Mar 2026 14:00:38 +0000
Manifest next update: Tue 03 Mar 2026 14:00:38 +0000
Files and hashes: 1: 6pce1ex-9vMX3hxl4PHX2_iHdWU.roa (hash: 3DNO1VoVFCiygl4uZClSk2LR5+gj2SCI6v1gbjKpRWE=)
2: 7uEWRZhuKrrLrbz68WNBnRtyak4.roa (hash: lE6tlE6mE+L1kYKEpT6B92Zv+jxsgj3WHZA7o8EE7DM=)
3: dtS8ie60qcifEAXqrSJ8EyXtFWI.crl (hash: XDZQrcH+ypYRTayL66VaepDnjJWznfbeHm9OiO8KbQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:d9:92:ce:c3:2f:b0:72:65:67:23:a1:97:8f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Validity
Not Before: Mar 2 14:00:38 2026 GMT
Not After : Mar 3 14:00:38 2026 GMT
Subject: CN=d3188ef42743ad0a7e94fe73bab52c2984d9c007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:83:38:e6:45:59:03:6c:11:4b:63:78:a6:
08:5e:7b:7e:e2:ea:7d:80:63:d2:10:c3:38:8a:37:
47:75:e4:6e:04:02:4b:59:4e:db:90:d3:91:b6:45:
ab:45:25:b8:7d:bc:a8:57:3f:9e:c6:5c:ec:37:4e:
c0:fb:39:69:fe:eb:d1:4a:07:96:11:0f:bb:94:8b:
5b:d8:55:54:5f:d4:e4:26:1e:db:0a:94:ea:0f:3d:
32:33:0d:96:76:2c:7d:19:0b:47:be:99:f8:63:1a:
30:13:a3:52:64:04:25:7d:e0:45:79:a0:62:a3:e7:
a6:f8:00:a9:bc:dc:7c:ad:46:2b:22:66:fa:07:7c:
8e:80:16:20:9d:3f:6f:05:a6:c6:cb:58:e2:32:f8:
bc:9d:9b:14:1e:f6:25:52:f2:19:9e:11:79:57:6c:
c0:14:c3:a5:70:28:66:b4:1c:93:3d:7c:44:f2:c4:
fc:22:b8:d0:44:9e:b1:5f:38:df:e5:52:99:7d:7d:
84:0c:5c:68:9c:d0:15:ca:b4:14:77:7d:ba:b5:32:
45:b6:ce:42:4e:91:35:66:5c:f9:43:b2:6b:2c:87:
cb:1e:4d:1d:14:3c:c5:e4:94:62:ad:e3:59:b9:2e:
ec:74:09:41:6e:e4:d3:10:2f:d8:b9:3b:4c:1f:95:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:18:8E:F4:27:43:AD:0A:7E:94:FE:73:BA:B5:2C:29:84:D9:C0:07
X509v3 Authority Key Identifier:
keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cd:7e:cb:da:07:be:94:c6:6f:fe:58:a4:3d:ea:af:33:0d:
0d:b7:57:34:9b:5b:7f:41:71:c2:af:97:99:af:0b:22:c9:90:
aa:22:49:bd:23:44:99:14:ab:69:11:1c:a4:89:8b:ff:b7:81:
c6:e0:6d:cc:05:bf:90:09:4b:74:6e:97:e1:2e:1c:46:55:13:
01:73:f7:7a:ec:8e:a6:c6:53:f7:c1:51:a7:12:34:b5:dd:9f:
00:67:ae:69:75:e5:8d:45:85:46:f6:d1:02:1b:ab:79:ca:88:
bc:4e:9a:d5:e7:b6:d2:3f:cf:52:2b:80:68:ac:e8:9a:7b:15:
68:74:0f:10:d6:56:57:e0:85:29:ed:eb:48:b6:eb:35:c8:b6:
8d:c8:d0:99:0b:34:e6:a0:93:5c:9d:98:76:2c:3f:68:38:7e:
48:1a:63:a4:5a:b3:b0:f1:7d:ec:70:d3:8b:0f:0f:60:f5:87:
4e:8f:a3:c8:fb:f8:08:d5:cd:04:09:9d:5e:e2:de:87:13:1f:
e4:c0:eb:d0:62:48:40:11:15:cb:7f:9e:8d:cb:ee:96:bb:cd:
3a:2a:4d:ff:28:cd:4a:55:c0:d1:bf:bb:a0:fe:73:56:7d:a9:
e0:b6:d6:10:04:bf:e4:21:a0:1c:ac:90:60:7c:f9:bb:5c:fe:
70:57:32:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:37 2026 by rpki-client