Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
File: DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft (raw, json)
Hash identifier: frixK1wDZ66caCMCrYRLNKkhsyAA8KSSDTj+FT00Ryg=
Subject key identifier: 36:50:D3:18:86:DE:74:FD:00:A9:5F:11:50:02:D5:CB:AF:6A:EC:DB
Authority key identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
Certificate issuer: /CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Certificate serial: 019CAFB59D1FF1A4B179504DF22E8F86DC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
Manifest number: 43
Signing time: Mon 02 Mar 2026 18:00:40 +0000
Manifest this update: Mon 02 Mar 2026 18:00:40 +0000
Manifest next update: Tue 03 Mar 2026 18:00:40 +0000
Files and hashes: 1: Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa (hash: iX6v9+WjPW25JV4dSQdrR9Ylqr6/LIAKembF0Rx+4SM=)
2: DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl (hash: +ARSI30wh/Ur6oPX0i8NJPgxlAR2CwmFOEZrxMSz/uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:9d:1f:f1:a4:b1:79:50:4d:f2:2e:8f:86:dc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Validity
Not Before: Mar 2 18:00:40 2026 GMT
Not After : Mar 3 18:00:40 2026 GMT
Subject: CN=3650d31886de74fd00a95f115002d5cbaf6aecdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:7e:49:63:cc:c8:1c:ab:1a:07:0a:5a:74:
72:5e:70:6f:d1:cd:ba:28:a7:20:6c:c5:78:68:9d:
98:d5:bf:5d:33:23:b3:84:32:f9:8a:3a:42:49:d6:
22:60:09:ce:38:0b:c4:9a:a9:62:20:53:33:60:f5:
06:70:c7:69:8d:01:b8:42:66:ce:bf:f3:92:9b:c0:
83:7f:a6:25:e8:e4:00:83:31:6b:1e:e2:06:c1:7b:
e9:e5:06:0a:ed:ed:51:e7:5f:05:d7:1e:04:88:15:
31:c5:69:e1:a7:fe:45:c0:9c:eb:12:9a:2f:ff:5b:
a1:c1:c2:c9:4e:31:2c:cf:16:30:b3:a7:5a:e7:dd:
cd:fc:a9:7e:c9:47:1c:a0:e2:64:1d:af:d1:1c:82:
0c:0e:20:9f:30:82:12:38:93:9e:9b:5c:ac:27:99:
a0:aa:4f:ff:82:60:6f:9a:ad:3c:86:21:03:7b:f5:
16:4a:b8:96:1b:f6:53:60:a9:5e:0a:b3:f6:d8:56:
68:11:9f:14:a4:22:a9:fd:9f:a2:44:b8:47:dd:89:
73:58:68:2f:fc:b8:af:81:54:6f:65:9a:4c:9b:c2:
44:d3:0d:ca:87:ee:57:95:fe:c0:60:07:34:e6:50:
84:96:f6:b6:27:d2:ed:65:47:eb:a8:b1:8a:d2:95:
12:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:50:D3:18:86:DE:74:FD:00:A9:5F:11:50:02:D5:CB:AF:6A:EC:DB
X509v3 Authority Key Identifier:
keyid:0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b6:c2:94:06:de:89:43:a3:73:fb:ad:18:ac:8f:70:fa:0a:
d1:19:ce:e6:b9:ce:1f:2d:82:9f:fe:59:b3:79:ef:6d:17:82:
81:ef:40:78:5f:9a:16:4e:cd:a2:a0:73:8e:c0:26:27:ec:0a:
c1:b1:77:7a:41:ad:1b:b2:b6:63:84:af:07:4b:fd:ac:94:c5:
52:96:24:4f:b6:c1:0d:f0:3c:f5:4b:b1:00:df:1f:63:b4:3f:
f8:f6:87:ac:ce:9e:f4:f3:f2:11:1d:23:47:5e:83:21:00:86:
e5:62:0b:5a:49:ea:a6:cd:f3:24:e8:46:d2:7a:ee:29:fe:cb:
af:a1:b5:e1:9d:44:90:16:4f:b3:ae:e5:a9:51:da:c3:e1:89:
4f:de:a2:d5:2a:d8:c0:ef:cf:12:b2:00:fd:6b:e1:d3:9e:f5:
14:57:f2:c3:9b:b3:31:54:05:b1:3b:59:3a:ae:52:ec:42:9a:
48:30:a1:0d:fe:74:ba:ad:3f:99:4d:ec:ea:73:1f:42:17:69:
f2:e2:32:3b:1d:e7:cf:e6:7a:0e:a0:b2:0e:f9:2a:75:94:76:
2d:4d:94:f9:5b:cb:b9:23:e8:a1:5d:9b:04:b5:bc:29:0e:9e:
46:77:d4:c4:bf:73:da:40:d4:f2:30:c7:ce:f1:88:c8:a0:bb:
69:d4:e4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:19:45 2026 by rpki-client