Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
File: dciLHEH7612r73Q8V6zf_E-nRpk.mft (raw, json)
Hash identifier: bB7Y7wqjUJXsVUUL/+d0gzvIGesupKoAhzLlcgBExF8=
Subject key identifier: 03:E1:FC:BA:E1:95:B2:FD:D3:20:EB:FA:8D:92:8B:83:13:C2:FB:6F
Authority key identifier: 75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
Certificate issuer: /CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Certificate serial: 019CABD8FF1BC9B67F65CE760EE14BD8BB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
Manifest number: 12D5
Signing time: Mon 02 Mar 2026 00:00:50 +0000
Manifest this update: Mon 02 Mar 2026 00:00:50 +0000
Manifest next update: Tue 03 Mar 2026 00:00:50 +0000
Files and hashes: 1: _QeltRwVrmIgCr-eo6LxBUwzpXY.roa (hash: q8bq7ENqcKxVLtJa6stK4wblRlHycCi1u+gxzHveo3E=)
2: dciLHEH7612r73Q8V6zf_E-nRpk.crl (hash: r+ajldmbfil03G8ZwkNJx6l+L/sLWHKoQeezc0FGpls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:ff:1b:c9:b6:7f:65:ce:76:0e:e1:4b:d8:bb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Validity
Not Before: Mar 2 00:00:50 2026 GMT
Not After : Mar 3 00:00:50 2026 GMT
Subject: CN=03e1fcbae195b2fdd320ebfa8d928b8313c2fb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:c5:b5:03:d8:c9:b2:99:65:c4:eb:98:c9:
24:76:93:29:5d:5a:06:8e:8d:c7:45:de:2e:95:cf:
b2:cc:90:e3:4b:3b:77:b1:a3:0e:69:be:13:28:b2:
c1:92:17:fc:db:b0:bb:55:7b:eb:dd:bd:10:ff:1b:
1e:a9:a9:ff:78:a4:06:a2:a1:e8:56:96:a9:a3:2d:
75:ff:37:de:46:7a:97:31:62:d0:a7:ad:80:18:c9:
1c:5a:b3:f8:8c:de:90:74:5a:5f:e5:51:7a:0d:32:
a0:3f:6a:99:13:44:68:a2:19:65:20:dd:e4:79:74:
50:eb:b8:91:aa:90:83:26:31:52:45:47:e9:64:d2:
5d:4d:ce:8b:3c:26:44:44:c2:f4:3a:05:83:68:10:
24:ee:56:16:d8:e6:0c:00:aa:1b:da:d7:c0:d5:b8:
28:95:73:86:d8:04:d9:3e:dc:d9:f2:39:17:bd:36:
9e:6f:e0:b1:3a:76:4a:05:c6:ea:fe:ab:0f:a9:1d:
a9:19:ad:fe:f8:27:9b:52:5f:29:88:3a:86:a8:66:
a3:ab:f8:4c:e3:94:5d:ef:cb:94:6d:dc:2a:c6:dd:
73:aa:0a:f7:41:0a:65:18:2d:96:af:c0:6e:70:ef:
f6:8f:e6:e2:f9:c0:e3:3b:21:c4:af:9e:01:9d:1c:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E1:FC:BA:E1:95:B2:FD:D3:20:EB:FA:8D:92:8B:83:13:C2:FB:6F
X509v3 Authority Key Identifier:
keyid:75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0b:f0:5a:93:db:59:eb:63:ce:7b:6c:1d:c3:8d:3c:23:cf:
ef:40:06:77:0d:3f:2d:98:64:fc:57:37:4d:69:cc:67:d6:05:
4a:22:70:16:97:09:84:43:1a:8a:5f:e5:e7:65:03:85:76:84:
85:9e:2e:2d:ac:0e:c2:f3:d8:24:78:9c:29:d3:d2:5f:d6:2f:
51:9f:b2:a3:12:a7:8f:71:73:7c:fa:eb:62:2a:98:d9:c1:7d:
f4:fd:89:91:8e:0b:8b:8f:f6:40:04:a6:15:3d:5a:16:4c:7f:
d0:b7:ff:fc:48:4a:94:60:17:0e:03:ca:bc:86:23:a8:d4:9a:
51:2d:22:e5:c9:af:66:2f:38:67:e7:2c:5e:39:3a:66:a0:57:
54:55:66:56:7e:44:e6:6c:a0:35:c2:b6:32:54:11:9c:b4:ce:
a7:6c:b3:09:9d:80:f7:27:31:6a:aa:a6:7c:92:8b:2c:5b:4f:
9c:fd:ab:e1:2c:33:23:94:33:e9:7c:b4:7b:e2:8b:8b:b4:25:
ab:2e:aa:a8:74:33:26:8c:21:b1:bf:13:64:d7:a4:42:75:bf:
6e:98:be:4f:4c:70:84:94:45:93:10:a1:28:09:ed:de:7a:91:
bc:e3:31:3b:b7:6a:92:ec:a2:a5:39:29:0a:4b:51:44:8a:68:
dc:cd:c1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:34 2026 by rpki-client