Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier: v/ZTAU4UN2YDZhLblMKql0gjSSer7NdluwI4P5Sycs4=
Subject key identifier: 33:D9:A5:A9:B8:1D:8D:1B:C5:9B:19:8B:E7:83:BD:21:D0:3D:EF:AD
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial: 019CABD8FD1FCA97C068447249F48E092DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:00:50 +0000
Manifest this update: Mon 02 Mar 2026 00:00:50 +0000
Manifest next update: Tue 03 Mar 2026 00:00:50 +0000
Files and hashes: 1: H3TYAMLFFlNCp3XM0jhoUoBeQy8.roa (hash: J5xTusXlhkXdt1S3mE6QU/UGZ2zGPT9Q3Ow+NVkju+o=)
2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: FINnUe9tGjRXEZZkZABsYjpKpCNLBvetyAOSXiH0Q68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:fd:1f:ca:97:c0:68:44:72:49:f4:8e:09:2d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
Validity
Not Before: Mar 2 00:00:50 2026 GMT
Not After : Mar 3 00:00:50 2026 GMT
Subject: CN=33d9a5a9b81d8d1bc59b198be783bd21d03defad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:21:6d:fc:d7:d8:b2:2e:59:c5:56:8d:89:d3:
b2:9a:a6:eb:19:0b:7c:68:4a:f2:41:f8:b1:76:c9:
e8:fd:91:76:55:e4:b0:93:ef:f9:32:99:41:21:6d:
cc:d8:40:6f:36:2a:19:cd:7e:dd:0a:a7:2f:dd:63:
79:75:b4:6b:fc:1b:46:3d:fc:0e:db:7a:1b:a6:d4:
0e:3c:1d:1e:34:79:33:c0:c8:3e:5f:3f:83:39:04:
13:1a:25:0f:6f:47:97:72:15:f6:1c:8b:53:20:4d:
ed:6c:b8:20:6f:7d:29:b2:ef:af:a0:23:13:ab:46:
7e:ec:89:b6:48:ac:a7:37:16:fe:c2:33:a4:51:aa:
ff:83:93:9b:9e:93:3f:e5:e6:df:4a:c5:b1:da:6d:
77:13:7d:98:62:90:b9:b2:dc:59:63:76:ad:15:a0:
33:1b:1e:76:9e:50:3a:5e:20:21:98:b1:6b:4a:ec:
f3:46:70:a6:71:3c:ef:6e:b7:b3:aa:cd:62:60:35:
e3:7e:15:49:26:d9:4b:b1:1d:67:e0:25:52:94:1d:
45:85:18:88:40:5f:73:c7:9f:df:70:4b:42:42:08:
ac:eb:b2:b0:f6:b8:9b:0a:cb:42:a5:ad:23:e1:02:
9f:96:03:47:23:41:5a:59:d3:17:33:71:ba:59:18:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D9:A5:A9:B8:1D:8D:1B:C5:9B:19:8B:E7:83:BD:21:D0:3D:EF:AD
X509v3 Authority Key Identifier:
keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8b:d9:f4:59:0e:c2:8f:47:4c:65:bc:11:05:e5:1d:15:01:
bf:39:95:b3:a6:c3:02:9c:10:ac:54:d3:f0:b1:2b:f7:cf:2c:
27:83:aa:b1:c2:ed:87:a7:ab:71:d1:99:1c:16:06:4e:f5:78:
3c:35:2c:e9:ec:a3:3d:fd:78:82:99:f0:b8:2e:81:b8:2c:7a:
87:7c:70:15:54:bd:ef:41:ef:59:b6:0f:76:e8:92:38:48:39:
41:eb:a0:3e:7f:a2:16:4e:6b:04:8b:2e:fd:1a:8a:25:e3:ac:
6e:21:b2:5f:fd:f5:cd:74:0e:30:7a:bb:58:82:4a:88:26:6d:
78:9e:5f:ea:3d:9f:17:25:01:6b:f7:97:c7:0f:1f:23:ec:ce:
0f:fd:c6:59:fd:b5:d4:a3:8e:7d:c3:ea:2d:d8:5b:18:91:88:
9d:12:1b:0f:ba:9f:ee:b0:37:09:40:e3:8e:06:56:00:00:89:
0f:ba:8f:bc:00:82:1d:fc:15:30:3c:22:74:00:a0:10:36:e4:
af:e2:83:a4:a0:60:28:f8:c0:4c:1d:72:e4:eb:55:c0:09:20:
9b:fb:e9:5e:e5:12:cd:5c:8a:ae:92:39:d1:1d:50:78:d5:43:
8a:21:38:06:6e:51:b3:98:7d:86:68:9c:a6:27:f6:46:4c:96:
6b:5b:0d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:59 2026 by rpki-client