Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: EsTdsHICdn4zfB7bAxuzf1EZlBXVTHdfV1vRTJaRMHA=
Subject key identifier: 95:BC:83:D8:8C:51:54:25:26:59:43:AD:FF:25:50:8A:64:DC:FE:22
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 019CAC7E5AF7DF13DBF84C2444C5CD657495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 03:01:27 +0000
Manifest this update: Mon 02 Mar 2026 03:01:27 +0000
Manifest next update: Tue 03 Mar 2026 03:01:27 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: puMh+wcuYKLRqCf0hr0zCiSlApQ11+TOg57xRx6MjdE=)
2: qB9Z-zHdmjEFSIG2vfJGfIMdpA0.roa (hash: MxW4mBfsVBC2g/oHLcgSIPQNdBtdZMBf3Vv3p/+UNxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:5a:f7:df:13:db:f8:4c:24:44:c5:cd:65:74:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Mar 2 03:01:27 2026 GMT
Not After : Mar 3 03:01:27 2026 GMT
Subject: CN=95bc83d88c515425265943adff25508a64dcfe22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:d0:28:06:88:a8:9b:a7:aa:73:29:c8:73:
b0:8c:30:47:eb:7a:de:c6:10:1b:b4:2d:17:1e:32:
ad:f3:c0:81:be:29:52:c9:d7:d2:ac:5f:58:b9:db:
fd:2d:09:87:89:a4:21:cf:5a:02:f3:97:8a:3a:0f:
63:fa:27:56:07:d9:69:f7:4e:18:4c:21:b2:de:0b:
eb:5e:7e:5f:58:b3:d0:3b:c9:b7:ff:c6:8c:38:ad:
7f:95:2a:36:28:39:d6:bc:c2:12:6b:8d:c5:8f:a2:
64:2a:c5:35:b0:d8:8f:30:80:07:ee:9c:7d:10:ed:
ed:52:ae:c4:f5:65:7d:59:08:03:60:0c:55:a0:0f:
42:86:15:3d:e2:af:f2:32:1d:50:56:53:67:9f:b1:
fa:1f:96:b3:e4:32:e7:b8:e0:1d:fe:06:93:d0:6c:
89:54:d2:dd:6d:84:97:95:80:dd:b6:8f:2d:40:67:
b0:af:a6:1d:9b:cd:06:a6:5f:69:79:74:5f:7c:43:
a1:21:4b:69:92:50:8f:9c:3d:87:c2:56:68:6e:2a:
a4:5c:4d:81:7b:b5:24:7d:03:f7:4e:9f:f5:07:c5:
96:70:54:6b:c3:90:e0:28:68:07:25:9c:c6:62:df:
57:aa:1f:36:6c:06:1c:d1:68:6f:36:fa:ed:51:39:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BC:83:D8:8C:51:54:25:26:59:43:AD:FF:25:50:8A:64:DC:FE:22
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e5:e5:05:45:1c:22:f9:93:5f:45:12:06:42:d0:42:bd:f5:
69:c0:5f:45:7f:d0:31:06:46:0d:5a:10:e8:35:86:16:ca:0a:
fb:89:81:24:df:e6:ed:4d:0a:79:82:41:83:e8:f2:e3:6c:39:
5e:bb:b5:e8:6a:27:60:34:ed:0a:b1:d8:a6:37:c9:5e:65:55:
07:ca:83:b4:d2:de:cf:89:54:c4:36:ad:3d:cf:ea:75:2e:fa:
f3:47:f6:2a:4f:5e:17:50:9d:e5:e0:82:51:3c:2c:89:20:dd:
67:ab:18:af:ca:4c:db:f6:67:0a:5a:5b:f7:a8:dc:1b:92:01:
52:96:e8:27:aa:a3:4d:a7:a9:68:67:3b:44:f2:b5:35:f8:10:
d7:ee:e1:2b:7f:10:29:e9:db:9b:20:59:21:24:52:a0:c3:ef:
2c:6c:11:5e:fd:b5:a2:be:af:4d:de:69:4c:70:0d:9a:a3:e3:
6c:cf:43:b3:fa:3f:b7:3f:5b:05:47:61:58:b8:f3:4d:2d:64:
b2:9c:2a:f3:a0:eb:d5:f6:c4:c6:8c:88:d3:91:91:29:d5:15:
ba:a2:62:b1:9e:e3:e3:76:61:b5:47:35:8d:c5:c0:06:59:3e:
fc:49:e4:7e:5a:96:c4:ae:a7:ab:a7:75:4a:52:d4:8c:76:81:
b2:a9:69:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:32 2026 by rpki-client