Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File: Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier: IlH+N14RO0BQtK/sV9sdmTQ9tOEeP39KZ3QHokD0Xes=
Subject key identifier: 85:0D:46:E2:FA:26:1F:BE:51:0E:FB:B8:17:F6:C1:2B:CC:EE:82:43
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial: 019CAE350C30A7F2B1FE5B90F4DA6BD20795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 11:00:37 +0000
Manifest this update: Mon 02 Mar 2026 11:00:37 +0000
Manifest next update: Tue 03 Mar 2026 11:00:37 +0000
Files and hashes: 1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: PF7WhqvBLfEwWV9zb4dq6mYMRror6wOZS3XN6KPL8Sw=)
2: SAugkdRYnSv4ry8bG61AtXCsozo.roa (hash: sEeAFM3bNI/ojfTwt1bUnazn3tLdAyJRyAzUqk6sRNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:0c:30:a7:f2:b1:fe:5b:90:f4:da:6b:d2:07:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Validity
Not Before: Mar 2 11:00:37 2026 GMT
Not After : Mar 3 11:00:37 2026 GMT
Subject: CN=850d46e2fa261fbe510efbb817f6c12bccee8243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:94:40:06:9b:a1:b9:60:c7:37:9c:b1:b9:
a4:77:59:45:57:66:2d:9d:b8:f3:f5:c0:1e:40:47:
bc:ea:2d:88:b1:b6:41:b6:33:59:16:d7:d5:df:36:
16:82:ac:26:5e:cd:59:90:81:a5:96:a5:db:82:51:
7b:a7:86:17:d2:77:6b:22:c5:7d:2d:a2:3b:77:c4:
b3:6f:e4:02:c1:d5:b9:dc:c4:23:45:7a:e4:8e:a5:
aa:ae:57:69:01:f7:7e:72:67:52:1f:95:ce:f7:63:
3f:c0:be:5d:74:4f:53:20:e1:2b:29:94:5e:6e:c2:
c1:ff:30:9e:de:a4:10:7e:76:5e:bd:8f:45:5f:85:
d7:91:f9:52:5c:dc:fb:89:75:ef:63:76:eb:b4:d5:
d2:34:5c:7b:44:9e:95:9b:e3:8d:c4:85:56:ad:9d:
d6:28:c0:b0:c9:4d:ec:8d:97:9b:77:d2:5d:43:11:
d2:a7:af:99:cf:e2:e7:d0:e2:4c:7d:e5:67:f6:9e:
f5:fb:a1:df:28:97:69:9b:9f:d9:e2:4b:7f:91:17:
5c:76:ea:1b:cb:d2:00:c0:ef:79:2f:7f:38:46:c8:
da:81:89:a6:7b:86:b6:51:42:0e:87:51:ff:31:b0:
2f:a9:12:47:48:b6:af:9e:2c:a5:05:57:9a:2f:ca:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0D:46:E2:FA:26:1F:BE:51:0E:FB:B8:17:F6:C1:2B:CC:EE:82:43
X509v3 Authority Key Identifier:
keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c3:81:df:06:8c:31:4e:b0:18:6d:a0:21:a7:05:ef:15:7c:
a5:ef:a8:8e:e8:10:ed:2e:4e:d8:71:1b:f4:e3:ee:86:61:55:
d9:7e:84:02:8b:c2:f3:cc:e4:4d:6c:d8:ba:57:c9:ca:14:93:
fd:89:e6:ef:be:3f:12:21:97:be:66:9e:99:0b:83:82:03:84:
73:81:8b:b1:d9:ad:92:c1:1a:11:63:0a:17:08:72:e4:ee:bb:
73:8b:c0:af:17:34:b9:13:22:50:99:e1:55:e4:4c:f0:06:d9:
58:3b:28:51:ba:c0:58:28:47:ad:00:ec:49:28:cc:05:1b:02:
37:b1:a0:48:81:0d:f2:05:cc:88:d0:1e:a2:bc:f5:88:67:ad:
37:f8:47:c8:15:52:3c:48:e6:7b:85:e4:8a:07:04:2b:3b:9d:
84:8e:c1:73:b6:00:48:f9:fd:4d:6f:10:58:7a:3f:f6:98:82:
38:30:1d:bc:72:ce:d7:06:b4:87:66:fa:aa:98:15:ea:b8:e0:
b8:4a:e9:30:99:1d:58:21:ba:77:ae:58:5e:11:3a:2b:30:32:
78:4a:61:fe:5d:0a:08:73:07:bb:3a:d3:1b:04:f1:8f:07:13:
8d:ba:9a:0a:af:21:da:f2:e7:b7:4c:59:e3:08:f2:f1:f6:4c:
80:96:17:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:03 2026 by rpki-client