Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json)
Hash identifier: EYivXOJ59yqdbEVteY0isKTrqvDgxL8plvHzSNKaX9c=
Subject key identifier: 62:58:8A:CC:8F:9B:7E:A0:0A:EC:CA:04:83:79:AE:01:11:B9:C7:06
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial: 019CAA8FDCF3261E2CC2B3740A2DF07223D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
Manifest number: 155D
Signing time: Sun 01 Mar 2026 18:01:20 +0000
Manifest this update: Sun 01 Mar 2026 18:01:20 +0000
Manifest next update: Mon 02 Mar 2026 18:01:20 +0000
Files and hashes: 1: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: og+T2Sk2lf9BJmCSLX5skbZoLII9sM310hQUmTRMvwo=)
2: oQCJF4siUdcpboMPfHP2EbeM0ps.roa (hash: IesKj0DCrmac38Ifbjs7D9byS/qB5f4vRUYllQm6ZFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:dc:f3:26:1e:2c:c2:b3:74:0a:2d:f0:72:23:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Validity
Not Before: Mar 1 18:01:20 2026 GMT
Not After : Mar 2 18:01:20 2026 GMT
Subject: CN=62588acc8f9b7ea00aecca048379ae0111b9c706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:48:fb:e5:29:ed:d6:61:c6:7b:2d:fc:fe:
2d:22:2a:e5:05:85:29:24:e6:04:31:e3:8c:37:ac:
4e:cb:50:38:f0:96:2c:df:89:60:ee:91:e3:9a:76:
34:af:3e:de:39:a7:4b:f4:45:00:a5:4e:5a:de:58:
50:24:93:6c:e5:a7:a9:8d:84:46:ad:90:5f:39:76:
b5:28:25:99:31:a5:49:61:8e:62:72:cb:b5:ce:e3:
aa:ce:be:d4:14:8f:08:35:ff:67:8d:2a:13:f3:97:
78:56:d8:ec:cc:22:58:77:34:74:f5:fb:5c:da:c9:
50:7f:e8:ec:af:df:f8:7f:3d:5b:6e:35:a1:3f:a4:
fd:7d:e2:eb:49:f9:bb:92:9c:42:81:e1:01:88:64:
04:aa:69:ae:4a:99:a3:e7:01:91:4a:7c:e1:c6:89:
16:d4:98:8a:a3:34:7c:b5:25:ff:ae:20:b3:75:15:
f6:dc:2e:5d:cb:ab:83:70:66:c8:ac:0d:8a:17:fe:
f2:6a:44:f5:96:da:ed:31:27:14:2e:e4:44:bf:57:
53:ec:95:f8:33:bb:cf:b0:fb:7e:7e:70:6c:8c:95:
20:31:70:e1:96:d2:b1:f6:64:da:89:57:c7:93:4d:
35:f7:cd:91:20:b0:b1:00:ee:ad:7f:1b:44:fa:3c:
3b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:58:8A:CC:8F:9B:7E:A0:0A:EC:CA:04:83:79:AE:01:11:B9:C7:06
X509v3 Authority Key Identifier:
keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:96:36:f2:ae:b3:28:4a:46:fc:26:78:1f:22:aa:a3:72:03:
62:d5:9a:12:f0:47:8b:f9:55:21:7c:a7:fc:f0:f8:eb:0d:43:
04:c2:fb:e1:dc:4f:bf:02:7a:eb:00:d1:f7:aa:68:1e:71:e3:
89:4f:0c:e4:1a:04:00:fc:f8:6e:a2:7a:2d:0b:a0:7e:b9:00:
78:78:01:e9:7c:0c:72:07:e3:88:3b:e4:83:49:1f:30:35:cc:
b1:74:44:25:e7:00:b8:8c:dd:46:df:4f:77:07:e0:bc:8c:80:
9b:31:b6:0c:e4:e9:d9:9b:f7:fb:d2:78:ec:16:eb:80:56:88:
6e:c4:2f:5f:45:ca:85:6e:cb:ae:48:3b:9d:9a:38:ca:39:af:
f0:a9:0a:77:0a:5e:50:d5:f0:4d:54:22:4e:86:40:62:ac:fe:
2f:f6:40:f5:c1:09:47:0d:34:fd:55:e4:30:bc:9a:f6:97:b9:
a6:4a:b2:bb:51:98:45:b2:b9:1e:53:8a:92:9c:eb:c2:4d:8f:
eb:82:a9:fb:7d:47:82:93:ca:e0:24:a4:67:01:73:e4:1d:28:
10:93:86:c5:61:16:12:0a:25:33:fe:d5:4f:36:88:d3:d4:1a:
12:05:8d:38:f9:20:87:e9:08:59:64:06:52:32:fa:d7:c0:1a:
e6:1a:72:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:43 2026 by rpki-client