Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
File: Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json)
Hash identifier: ByFYensROszSLWD0zbmz6njNbzRW02KNbq7xv4IrfXY=
Subject key identifier: 53:C6:2E:2A:F3:5F:4C:23:DE:D3:D6:D9:B4:06:3F:2B:91:06:46:D7
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial: 019CABA1E70CD63EAC4ED5E4452A5FD51897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
Manifest number: 0E42
Signing time: Sun 01 Mar 2026 23:00:40 +0000
Manifest this update: Sun 01 Mar 2026 23:00:40 +0000
Manifest next update: Mon 02 Mar 2026 23:00:40 +0000
Files and hashes: 1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: MGeXbguZpoW+64YKmN7w3Pa3hYzOOJqVSwa2f1N+NV4=)
2: Ync302nWoIDxqRaEpHli5zPb-l0.roa (hash: CuUUdJvVMWZ1G3401/kid+n0FU2EaOY59WBjrBRwy1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e7:0c:d6:3e:ac:4e:d5:e4:45:2a:5f:d5:18:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Validity
Not Before: Mar 1 23:00:40 2026 GMT
Not After : Mar 2 23:00:40 2026 GMT
Subject: CN=53c62e2af35f4c23ded3d6d9b4063f2b910646d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:09:28:5e:48:ec:b4:a5:a6:8e:db:74:89:
0e:22:d0:6a:99:9b:aa:7f:f6:04:7a:48:6b:f6:2a:
ac:5f:5f:fd:68:97:8c:50:66:84:9d:00:12:24:10:
23:6f:35:1e:3e:39:31:b1:ad:4f:2a:77:8f:46:58:
57:df:c1:35:cf:6f:cf:1e:8d:f7:a7:28:15:49:55:
59:28:e1:df:de:84:ae:6c:b9:f8:49:06:36:81:60:
d6:01:51:00:8b:9a:36:25:20:2a:f1:32:57:b8:f8:
c1:93:53:24:df:7a:a4:eb:48:67:66:81:57:9d:b9:
9f:1b:13:9b:ac:47:ee:44:45:d6:9e:36:00:ed:6b:
70:63:34:4a:74:cd:59:d3:a9:95:00:79:1c:45:49:
33:36:5f:d9:9d:a6:4b:d3:2b:96:3c:56:24:0f:bf:
71:3f:64:59:20:a1:10:05:88:47:89:b1:c5:8c:63:
f1:c4:50:8d:de:c8:5a:24:f4:cd:9b:c0:8f:e5:6d:
da:bf:1e:37:76:99:6e:15:e3:ae:5a:79:3b:03:1d:
c0:f9:df:ec:07:4d:0c:b9:82:af:15:98:92:06:6f:
e1:d5:d7:09:9d:3b:cd:62:21:d9:64:0b:b4:0e:29:
73:0d:18:05:37:f7:be:43:4b:6b:42:c4:aa:a9:94:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C6:2E:2A:F3:5F:4C:23:DE:D3:D6:D9:B4:06:3F:2B:91:06:46:D7
X509v3 Authority Key Identifier:
keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a1:12:a0:6e:5f:09:1a:2c:ee:db:06:65:39:f2:89:1f:75:
27:4c:c7:8b:ed:a7:90:de:63:17:c0:ae:af:18:71:34:47:12:
96:84:1a:b4:52:74:7a:f1:4c:fc:a6:b2:92:fe:f8:52:7c:ed:
39:7c:1a:f6:ee:d4:e1:b1:7c:ac:ad:34:12:7f:a8:21:dc:18:
9a:77:e6:52:4a:f9:5b:59:6b:48:85:66:41:9b:8e:24:80:98:
e2:fa:49:39:a2:4f:62:c1:07:3b:52:60:d1:2c:20:fe:1a:fb:
6a:24:9d:e4:cb:36:1b:a0:ae:33:b8:4b:2e:ea:1b:4e:f8:24:
2e:88:d5:7d:d6:7e:f9:c2:2a:64:3a:68:b2:f0:39:34:3f:83:
fc:2e:6a:1c:4f:d8:46:09:fe:e5:fc:11:ad:87:17:ac:76:7b:
82:10:eb:56:cc:d9:18:68:02:02:63:53:8d:ff:25:76:19:13:
ed:f2:61:37:20:56:7e:e3:d2:5b:91:32:65:44:d0:19:f2:f1:
c7:09:33:de:b0:7c:35:9c:26:ea:7e:87:02:3d:87:e4:c7:e6:
2b:3f:8d:c0:17:2c:ec:e6:c1:12:d7:84:d4:e4:00:c7:51:15:
74:e7:0b:17:49:2b:27:af:5b:ad:d8:fa:ba:0e:4c:39:1f:1f:
43:c2:40:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:19 2026 by rpki-client