Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: zlUupgDy8cubqlI4utWHSMqIURc8y3gwjanwAhLdE7o=
Subject key identifier: 52:EF:0F:3F:09:0E:F4:1A:14:E1:3E:48:89:A8:E4:3A:BC:50:23:79
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019D9886CA576E7B95990B3F5A8BFEE60122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 1445
Signing time: Thu 16 Apr 2026 23:01:03 +0000
Manifest this update: Thu 16 Apr 2026 23:01:03 +0000
Manifest next update: Fri 17 Apr 2026 23:01:03 +0000
Files and hashes: 1: ZigwfFDMTq9p3ufVtUZkAGSvOE8.roa (hash: hCk1IHYdcTCr5kX9GXFGk1z+A8RaamqdMUb21r4V0lQ=)
2: _yYYJqfXVlc0vfrgF-N_-ifqqrI.roa (hash: eQvPWCtkqfCKSoaOHzqPxJoyHgCrLUUV4Qj8AdQuoio=)
3: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: atMqpq8HOqHUrkF5iBA4gwuTruHJzT4qeVFwsZUsSYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:ca:57:6e:7b:95:99:0b:3f:5a:8b:fe:e6:01:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Apr 16 23:01:03 2026 GMT
Not After : Apr 17 23:01:03 2026 GMT
Subject: CN=52ef0f3f090ef41a14e13e4889a8e43abc502379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:be:61:5b:b8:0c:b3:6b:c7:ce:4f:51:89:
59:7d:21:54:0d:8d:4e:4a:9b:30:86:61:1b:ff:f9:
4c:81:8f:16:3a:7f:3b:7a:44:1f:ce:fa:cc:07:1b:
8b:29:7a:18:69:f0:db:c8:ee:3c:da:8c:6e:82:16:
be:1b:6a:8e:86:c1:71:a1:14:2a:92:28:47:52:15:
64:01:54:5e:c0:10:de:75:af:28:61:88:f2:85:41:
65:4d:4b:da:c6:0b:d6:d4:f1:34:0d:ad:8c:8c:5d:
c0:04:c7:91:38:d4:59:b6:7f:0f:0d:28:48:28:b0:
18:89:e9:2b:b1:14:12:1f:0a:84:30:64:dc:fb:d3:
91:aa:d7:2e:0c:a7:f1:c2:5f:69:40:8f:a3:30:e5:
ae:5e:7e:bf:3f:ce:39:5f:1c:96:45:74:12:a8:50:
67:45:ef:1a:fa:ac:05:69:bd:a8:aa:98:7e:73:b8:
5f:89:be:51:0d:0e:4b:11:65:9c:ac:04:47:22:2f:
c1:2b:17:52:84:f7:a0:38:5d:a8:a7:12:da:2b:d6:
23:e1:b1:40:59:b0:14:b4:75:7f:d2:33:dd:f3:23:
d5:cf:f2:d5:54:d4:04:c8:78:de:b3:bb:4b:e7:37:
43:b3:51:9a:c5:76:8b:17:90:33:74:e5:bd:71:fa:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EF:0F:3F:09:0E:F4:1A:14:E1:3E:48:89:A8:E4:3A:BC:50:23:79
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:77:b4:37:81:af:57:e2:f2:1e:17:a4:75:92:4f:9e:b4:c6:
93:76:ab:87:ce:8d:20:72:21:f6:91:44:ab:1a:2c:a7:e7:08:
93:32:87:23:ab:80:00:e2:ac:93:63:74:c3:45:ca:76:e1:f4:
4e:37:fc:4b:de:8a:be:e1:62:71:b4:6b:a1:8d:cc:6b:fd:4c:
f1:1d:ac:f8:16:2a:3f:49:69:ca:ef:6a:67:72:e0:34:f2:b2:
41:c4:30:33:e8:af:66:d2:8a:f1:93:34:c0:a8:c4:20:03:1c:
ab:45:20:26:1c:e1:c8:0f:ee:e8:48:95:89:63:ec:f0:64:08:
fd:ed:01:55:01:9e:5b:1a:4c:ae:a1:b8:73:f8:a8:11:bd:4e:
47:7d:6b:d0:dc:01:7d:d4:1a:e4:4e:8b:ae:54:0b:1a:b5:51:
c4:bf:c3:67:ed:d4:3c:32:b8:c2:fa:02:ba:7a:9d:57:0a:13:
a1:e8:2f:4f:0b:1e:be:17:11:2b:a8:fa:f2:f5:4c:a8:bb:bd:
d9:76:7b:b4:3e:66:e7:05:58:88:64:ff:49:7d:a8:e9:49:4d:
e8:68:6f:5f:8e:f4:24:36:57:7e:43:92:91:e8:21:b8:b1:c0:
41:3e:29:52:a2:d7:52:9d:fd:35:ba:b1:98:42:fc:ee:49:5a:
51:47:e7:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhspXbnuVmQs/Wov+5gEiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWE5MzEyYWY0YzNkOWNlZTA4MmM5NTQxYTZiNjVhZGE1
NjliM2MwHhcNMjYwNDE2MjMwMTAzWhcNMjYwNDE3MjMwMTAzWjAzMTEwLwYDVQQD
Eyg1MmVmMGYzZjA5MGVmNDFhMTRlMTNlNDg4OWE4ZTQzYWJjNTAyMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXG+YVu4DLNrx85PUYlZfSFUDY1O
SpswhmEb//lMgY8WOn87ekQfzvrMBxuLKXoYafDbyO482oxugha+G2qOhsFxoRQq
kihHUhVkAVRewBDeda8oYYjyhUFlTUvaxgvW1PE0Da2MjF3ABMeRONRZtn8PDShI
KLAYiekrsRQSHwqEMGTc+9ORqtcuDKfxwl9pQI+jMOWuXn6/P845XxyWRXQSqFBn
Re8a+qwFab2oqph+c7hfib5RDQ5LEWWcrARHIi/BKxdShPegOF2opxLaK9Yj4bFA
WbAUtHV/0jPd8yPVz/LVVNQEyHjes7tL5zdDs1GaxXaLF5AzdOW9cfofUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLvDz8JDvQaFOE+SImo5Dq8UCN5MB8GA1UdIwQY
MBaAFHSqkxKvTD2c7ggslUGmtlraVps8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUt
OThhMWQ2NWNmZTZmLzEvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUtOThhMWQ2NWNmZTZm
LzEvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHe0N4Gv
V+LyHhekdZJPnrTGk3arh86NIHIh9pFEqxosp+cIkzKHI6uAAOKsk2N0w0XKduH0
Tjf8S96KvuFicbRroY3Ma/1M8R2s+BYqP0lpyu9qZ3LgNPKyQcQwM+ivZtKK8ZM0
wKjEIAMcq0UgJhzhyA/u6EiViWPs8GQI/e0BVQGeWxpMrqG4c/ioEb1OR31r0NwB
fdQa5E6LrlQLGrVRxL/DZ+3UPDK4wvoCunqdVwoToegvTwsevhcRK6j68vVMqLu9
2XZ7tD5m5wVYiGT/SX2o6UlN6GhvX470JDZXfkOSkeghuLHAQT4pUqLXUp39Nbqx
mEL87klaUUfnWA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:33 2026 by rpki-client