Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
File: dpduc3A5pphnL-lSSt0zfR_1LP0.mft (raw, json)
Hash identifier: lHyuIiz6IN8c397jdDjadx1Mi85j3r/N2MNJ3oMZmG0=
Subject key identifier: 3C:5A:0F:C3:72:81:D1:2F:BF:30:FC:F2:9C:84:B0:06:2F:81:0F:45
Authority key identifier: 76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
Certificate issuer: /CN=76976e737039a698672fe9524add337d1ff52cfd
Certificate serial: 019CADC7AA6B8A6D14401E100A815024DC95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 09:01:09 +0000
Manifest this update: Mon 02 Mar 2026 09:01:09 +0000
Manifest next update: Tue 03 Mar 2026 09:01:09 +0000
Files and hashes: 1: P3I-kmPN6AuB9rj_rF8BnGgdu-E.roa (hash: 94bU66dX6J/YU6mZi7lnaxiIrZDpbyRdxL2MOQ0QKYQ=)
2: dpduc3A5pphnL-lSSt0zfR_1LP0.crl (hash: uJbWjdQf3ZwSqv85EeQfR7QrdSNwl6aBawusmDS6NtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:aa:6b:8a:6d:14:40:1e:10:0a:81:50:24:dc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76976e737039a698672fe9524add337d1ff52cfd
Validity
Not Before: Mar 2 09:01:09 2026 GMT
Not After : Mar 3 09:01:09 2026 GMT
Subject: CN=3c5a0fc37281d12fbf30fcf29c84b0062f810f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:81:86:39:a4:c6:41:b9:0a:16:61:65:d9:
de:82:2c:58:2c:78:68:09:be:b0:f1:a3:35:7a:51:
d8:82:b2:72:5e:f7:78:fa:40:e6:98:5e:27:0e:79:
e4:0e:90:a8:5b:c9:ea:3e:e7:2b:2f:a8:8c:c9:94:
43:76:cc:89:7a:c3:a6:e5:35:de:68:85:d6:6b:e1:
2b:e7:86:b6:8d:01:92:b4:d3:4e:01:b2:f6:c5:16:
3e:af:b4:55:5d:e6:72:df:d3:64:c8:bc:c2:59:49:
29:67:a5:d5:99:88:f5:f3:6d:fb:d9:6a:67:ef:76:
64:c8:5b:82:36:91:a1:9f:99:4b:df:25:e3:10:c0:
99:e8:51:ec:af:98:e4:d7:12:7d:9b:a8:b3:ae:54:
ef:d7:7b:57:ad:4f:04:1a:53:b9:25:0f:e5:a6:bb:
71:4a:77:b4:3b:2d:1b:96:2b:2d:8a:31:be:45:1a:
05:0d:1e:72:93:c7:45:ae:06:4f:56:b7:9f:c4:8b:
ae:20:63:22:e3:c3:be:45:9a:d9:ea:9d:06:2c:b7:
0e:7c:dc:57:cf:ab:01:a4:27:43:0d:ef:11:48:dc:
62:ce:84:69:75:5c:3b:cf:14:4b:11:c5:ad:ea:5b:
b8:01:ac:0e:25:d5:84:87:ce:94:21:9a:e8:c5:c4:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5A:0F:C3:72:81:D1:2F:BF:30:FC:F2:9C:84:B0:06:2F:81:0F:45
X509v3 Authority Key Identifier:
keyid:76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e8:19:3c:0a:b0:21:b9:df:db:49:db:6a:5a:5a:18:f5:54:
b8:4d:a6:f2:6b:4b:e3:31:71:06:6e:58:34:39:e2:d9:4f:15:
60:f3:3f:93:04:3b:70:a0:be:b2:25:35:18:05:ea:4a:6a:f0:
07:26:1f:bd:47:91:f5:71:8f:b6:25:e6:5c:40:d8:49:41:4c:
2f:2a:39:fe:ff:5c:07:7f:99:f0:27:71:79:c4:24:51:66:26:
cd:b6:98:d8:eb:bb:9b:53:68:fd:00:c4:0a:d9:3d:58:ec:a5:
f2:a0:e1:6e:54:bd:b3:cd:f5:8d:cf:4c:ca:23:2f:93:90:a8:
07:5d:59:26:02:be:a0:5b:9c:3b:b6:ee:ad:0b:94:9e:7c:e0:
75:07:c7:4f:a4:5d:e8:11:3d:c1:f7:ab:e1:13:78:c1:25:40:
bf:1f:dd:dd:fe:ff:79:19:f5:bb:3e:9a:9e:4e:2c:9e:41:14:
ae:d0:de:70:f4:ff:25:54:78:4b:9c:15:04:53:42:94:4b:59:
7b:ef:41:e6:d1:e5:39:02:1d:0c:d8:14:52:20:7a:47:23:f8:
cc:4f:7b:85:31:16:05:1e:b2:4f:ee:1d:96:49:f3:17:c0:de:
31:7c:c3:63:fb:51:fe:9e:8d:98:63:43:2a:e9:8b:48:20:9f:
a8:01:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:28 2026 by rpki-client