Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json)
Hash identifier: keNg4QyPpWD1n310gtrs7Q2h16+YcslFJ3KLPX9OPdw=
Subject key identifier: B4:25:85:34:8F:9A:33:D8:55:9F:7C:75:DD:9F:FF:D1:36:8E:F4:96
Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Certificate serial: 019CAAC6B155C0472E084EC04B1CDEE85082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 19:01:13 +0000
Manifest this update: Sun 01 Mar 2026 19:01:13 +0000
Manifest next update: Mon 02 Mar 2026 19:01:13 +0000
Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: TBiHGfEJjuXRwtl5su3jJqBShO9MuYh1aYpW/LKUSH8=)
2: O42Gic4dc360gIgddLeLvJAb0gg.roa (hash: cQ+n7ZgZ26eThRiniwC6AUO7/0CEDaEl6tna9PIT/9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b1:55:c0:47:2e:08:4e:c0:4b:1c:de:e8:50:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Validity
Not Before: Mar 1 19:01:13 2026 GMT
Not After : Mar 2 19:01:13 2026 GMT
Subject: CN=b42585348f9a33d8559f7c75dd9fffd1368ef496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:38:4f:ee:82:f4:59:9e:ad:b1:c2:3e:af:07:
ef:70:ff:1e:18:a7:77:8f:98:7f:e0:a9:88:ee:d7:
d7:25:7c:8e:28:04:3a:f2:18:e6:1c:8e:9d:5f:76:
ac:d0:dc:be:53:3c:25:7e:0a:77:80:23:fe:52:f0:
fc:98:bc:fe:17:d3:03:5f:cd:51:87:3b:67:dd:19:
f5:ca:6f:ad:04:0b:a6:a5:c3:54:cf:fb:7d:b4:31:
13:f0:25:f3:62:7c:d0:d7:08:56:f9:cf:51:2b:ff:
07:ed:97:5f:66:d2:80:be:0c:11:25:d8:c0:f1:17:
ac:fd:a1:d4:ac:52:ce:f8:f2:ac:6e:1f:06:d1:90:
0d:3e:70:58:2b:f4:86:ee:37:24:1c:56:2f:66:ad:
4b:4f:30:b9:bc:0f:8c:21:a2:83:07:60:81:e2:c7:
b6:13:e5:3a:e1:5f:b8:e4:f0:5a:68:7f:06:a2:fb:
d3:70:31:7f:f9:b5:9d:42:0f:3f:c6:d4:41:17:f1:
b3:c9:67:8b:4b:49:63:b7:0c:3d:d7:ed:03:bf:20:
35:01:58:e0:4c:05:3a:df:71:c8:7b:df:ba:67:42:
b5:bf:74:25:4e:14:b5:11:b9:39:d0:57:58:f5:f2:
d8:65:eb:6f:40:be:af:86:d4:c7:eb:de:f6:a2:e9:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:25:85:34:8F:9A:33:D8:55:9F:7C:75:DD:9F:FF:D1:36:8E:F4:96
X509v3 Authority Key Identifier:
keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a7:09:6f:2c:1d:1e:8d:aa:36:5f:94:27:45:26:72:09:34:
55:9e:7f:52:07:71:e9:a7:49:d2:63:e1:60:73:cb:74:ab:b2:
99:72:8a:4c:94:56:57:2b:64:14:d6:c6:57:46:2d:a0:d3:20:
b1:50:16:ae:c9:8f:d5:bf:7f:d9:2c:03:79:26:a0:1c:a8:b3:
07:fe:48:5d:d6:8f:44:48:5b:39:29:06:fe:b9:38:ad:9e:af:
68:aa:64:88:d0:8a:23:8c:d0:47:bd:9d:40:af:ae:4e:83:e7:
15:4b:5e:6a:67:3b:72:20:ba:6d:dc:70:a7:23:f7:33:8a:10:
96:6c:d2:a2:f2:6b:4b:dd:1b:58:70:de:0a:86:d6:b3:75:df:
74:7b:59:aa:0d:43:be:b2:94:0d:dc:3c:f5:6c:5f:77:73:10:
3c:97:32:6f:93:8e:30:d7:8b:39:8d:22:ad:a9:29:42:72:17:
20:13:8c:32:6b:b5:9b:65:b8:df:56:e7:9e:13:af:bf:7a:82:
71:c7:7d:1a:08:7f:85:36:1e:4b:f9:fe:aa:ff:94:7e:31:7c:
ef:fb:c0:93:d9:9b:d6:41:97:fb:54:f8:f2:46:4d:60:18:14:
8b:a3:d0:61:11:db:c0:53:b0:62:95:33:6d:44:77:84:09:8d:
be:b9:9b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:28 2026 by rpki-client