Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: q40YwVnbnN5Lguu2hO4VbnhGQfN6TuT9hCRHxEnydBE=
Subject key identifier: C8:F7:1F:B4:5E:4B:AA:C1:D9:6A:A4:5C:F7:F4:BC:14:11:B3:58:A4
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 019CAB342DDE36E028ACB3C83CA019B8BB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 21:00:49 +0000
Manifest this update: Sun 01 Mar 2026 21:00:49 +0000
Manifest next update: Mon 02 Mar 2026 21:00:49 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: nREn2MVM9vrhHiwRHCwdCDuRI/+hvnVqE0Kkif8Y6SM=)
2: KAtyNFRu0nGkFIQ31UZVhuZVup8.roa (hash: YYWx9qqk5yZ7cfiJEDfLmx13WTy9RC2Y4Yty+5dwt2A=)
3: Mx6UIzbNO3Bm-ZPN13wn4uov6Qg.roa (hash: KtCxVhRpFwySEkS5UZDhWr1MQTEnHKhuscd/bkCMZDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:2d:de:36:e0:28:ac:b3:c8:3c:a0:19:b8:bb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Mar 1 21:00:49 2026 GMT
Not After : Mar 2 21:00:49 2026 GMT
Subject: CN=c8f71fb45e4baac1d96aa45cf7f4bc1411b358a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:ae:74:23:bf:cb:34:df:0e:a8:9d:7d:c5:
a3:f0:77:e2:60:a0:80:6d:09:6c:20:0f:40:c2:9f:
ab:d3:35:69:6e:fe:3a:a2:aa:12:89:8e:2f:94:dd:
4f:ac:cb:41:70:bc:e5:bd:0c:28:bb:6f:92:7a:46:
2b:b8:55:dd:d6:c0:a9:e9:fa:01:9e:41:2a:fb:30:
6c:af:ad:73:d4:b0:a4:c5:58:45:0a:f3:0b:69:16:
51:e4:46:81:0c:48:df:08:1d:42:d0:18:f7:b0:f0:
66:86:e2:ca:71:85:05:da:ad:88:2e:2a:a4:0c:99:
b8:47:4d:fa:f3:32:c6:2d:46:21:db:87:45:27:82:
8a:d6:fb:a7:23:e7:eb:aa:a1:4e:e4:ce:f7:8e:56:
e0:80:0e:9f:0c:da:0b:f5:26:cb:08:ed:c6:c1:ef:
2b:98:f2:44:34:bf:fa:86:0b:4b:18:1e:3b:cc:12:
b9:77:02:45:e3:d2:56:1c:bc:bc:ac:e7:cd:a9:aa:
5a:97:c6:3a:b9:12:92:38:ab:70:64:a0:65:9e:ce:
c7:52:85:c9:51:87:86:cb:8c:3d:0d:00:4d:1c:97:
75:c4:cf:8c:b9:c0:2b:94:eb:6a:39:8c:98:54:a2:
18:75:ba:e5:c9:ee:d2:92:57:3c:e1:0b:98:1a:5b:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F7:1F:B4:5E:4B:AA:C1:D9:6A:A4:5C:F7:F4:BC:14:11:B3:58:A4
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a3:ed:72:19:75:6b:84:3d:91:ea:1d:5d:25:b1:b1:b4:f9:
06:c5:e7:48:dc:94:60:c6:0a:da:ac:de:6c:1b:a5:19:5a:dc:
f7:30:39:40:e7:63:8f:a5:52:e0:c8:ac:dc:1f:82:ad:b5:b0:
9d:14:4f:0c:a4:ef:b1:16:5b:45:0f:a6:da:b7:d3:b8:9e:5d:
7d:bc:b1:c3:c8:c9:bc:74:fd:c6:f6:3d:a8:0b:e9:f0:da:22:
00:3a:91:c2:52:10:f0:e4:74:72:92:61:1e:06:3a:30:00:43:
c5:b2:bb:af:d2:f1:7a:34:79:10:90:07:11:ff:bd:a7:d0:48:
5c:15:9c:a7:49:4c:d3:a2:df:de:2a:46:03:72:34:4e:60:39:
31:8c:12:4b:31:10:90:3f:ef:9d:35:ea:b2:97:5b:02:3f:e5:
02:e8:59:df:06:9c:11:36:88:a2:8d:9f:a2:a1:64:bb:1f:c9:
51:12:73:41:2b:f5:d7:63:65:07:e1:bd:fc:fe:3e:2f:66:64:
b6:6c:bc:80:0b:fb:46:ad:41:cd:33:d6:f1:7c:f9:75:c4:f7:
6e:25:59:3f:4e:6c:a0:ee:78:bf:00:0d:74:af:c1:65:e5:9d:
8d:78:c2:6b:10:43:3d:b5:5a:5a:1c:74:01:50:dd:a6:56:52:
27:d0:e7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:09 2026 by rpki-client