Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier: /enlmWxCg7cfna/W7A7FMG92k3wWj4K7+IK1ClkWycY=
Subject key identifier: 89:65:56:E1:16:41:31:1B:5B:F1:10:D4:05:F8:26:0F:35:E8:57:F0
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial: 019CADFE5E3ABF93550A88D7898E060419DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 10:00:54 +0000
Manifest this update: Mon 02 Mar 2026 10:00:54 +0000
Manifest next update: Tue 03 Mar 2026 10:00:54 +0000
Files and hashes: 1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: 8SNq/VjUbD255+VNMekdDvW+QppIv0TV63/dqop9B3s=)
2: pUIM7v10t5OGFrSPmfiKdj44TIc.roa (hash: Oo445ykGaPumhWQXMGT+U7KwU/ygHDEsLqsafB1c140=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:5e:3a:bf:93:55:0a:88:d7:89:8e:06:04:19:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Validity
Not Before: Mar 2 10:00:54 2026 GMT
Not After : Mar 3 10:00:54 2026 GMT
Subject: CN=896556e11641311b5bf110d405f8260f35e857f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:eb:87:b0:35:fc:96:f3:4a:fb:41:38:6a:cb:
6d:72:bc:34:8d:7a:ab:5d:72:55:6c:25:82:b4:37:
cb:a8:15:e8:2d:fa:06:fd:ee:c2:25:6f:5e:45:4e:
4c:7b:3a:88:95:75:25:39:c2:9f:fb:e9:2d:7d:28:
93:de:7c:bd:e0:48:8e:36:17:fe:b4:f8:7d:7d:1c:
7d:1d:c2:63:65:64:f0:94:a5:6e:66:43:da:6c:d2:
8c:72:00:c9:a2:f7:23:1e:c9:65:3e:a5:db:ad:07:
b8:b5:0a:2b:9f:34:02:5f:78:85:d6:b8:3c:cf:1e:
5e:6f:48:f2:c6:c7:cb:1d:70:95:79:48:d7:2c:ec:
8a:19:5b:fe:65:bd:4f:84:cd:f2:83:44:d7:fc:86:
05:24:8a:3f:5d:99:79:51:49:c7:1b:1a:d8:9d:1f:
80:a3:f3:21:6a:e1:68:28:c9:17:ec:7c:da:2c:ee:
f6:cd:7a:e7:75:40:6b:58:c2:84:3c:1b:85:1c:84:
b0:95:fb:df:db:5d:8e:0f:6e:c9:1f:c9:9a:c2:0d:
f7:bc:24:51:0d:15:26:05:63:97:7a:ef:20:f3:5a:
84:10:67:d1:86:e1:00:a6:c8:f4:27:d5:67:f7:84:
a7:45:71:9f:62:4a:17:08:6e:98:27:7a:1e:11:fa:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:65:56:E1:16:41:31:1B:5B:F1:10:D4:05:F8:26:0F:35:E8:57:F0
X509v3 Authority Key Identifier:
keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ac:51:1a:84:b4:2c:36:1c:1c:36:46:d0:07:37:ea:43:83:
48:8f:91:7c:ff:3e:8b:86:34:0b:4b:5f:82:3a:fe:32:0e:7e:
1e:06:14:51:b7:ff:ec:9c:07:48:c4:db:17:a1:2d:5a:72:46:
e2:d9:04:fd:8b:fa:90:9c:75:d3:81:dd:24:6b:9d:46:48:ce:
a7:0d:33:4f:64:21:ca:4a:8a:80:8a:76:3c:98:7e:f2:21:6e:
92:30:3d:f5:3f:94:c4:5e:b2:0f:74:cd:f0:fc:8d:df:70:8e:
5c:a6:e3:59:53:b6:86:18:27:e5:ca:af:98:6e:f7:b2:b1:36:
86:dd:0f:93:54:ae:c4:cd:ef:e2:1c:9e:af:cf:f9:bf:38:0f:
38:0a:5e:fe:36:00:58:bd:71:c1:00:7f:d7:b2:98:e7:5b:41:
47:7f:f9:ae:c0:43:6a:6f:ff:96:02:ed:87:9d:2b:82:ed:d6:
98:2d:16:86:7a:f4:f5:77:de:04:36:cb:51:5a:75:f5:10:04:
b7:ed:2b:84:0e:a0:8d:73:af:94:11:55:d1:b0:ca:c9:1c:25:
0b:23:2f:9f:84:56:41:8a:f6:d5:97:1f:06:3e:58:1e:b2:9f:
27:97:1b:d3:2f:4d:8d:fe:0f:45:67:20:e6:40:a3:97:18:2d:
68:03:5e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:34:22 2026 by rpki-client