Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: 7xTHK2V2pJRHc6Xmd/MN7ioEVu9C9PWoLAWcWhyuN64=
Subject key identifier: 63:85:F1:27:AD:29:9D:A2:BB:00:EE:BD:32:F1:34:20:18:BF:2E:34
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019FACF5C17F3C104DE8613292DBC4FCED6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 155E
Signing time: Wed 29 Jul 2026 08:20:14 +0000
Manifest this update: Wed 29 Jul 2026 08:20:14 +0000
Manifest next update: Thu 30 Jul 2026 08:20:14 +0000
Files and hashes: 1: VXfQ6NsG8mJQzkrAYILY85OMwDM.roa (hash: hHH+oXv9dUAcJXxcAv3HS+2a0elTC1lXlHvBusz7xaE=)
2: ZigwfFDMTq9p3ufVtUZkAGSvOE8.roa (hash: hCk1IHYdcTCr5kX9GXFGk1z+A8RaamqdMUb21r4V0lQ=)
3: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: CI/RX8mCJE0PqIEDDcNBZFPeJ0EYzbosXNqP+OXrrdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:f5:c1:7f:3c:10:4d:e8:61:32:92:db:c4:fc:ed:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Jul 29 08:20:14 2026 GMT
Not After : Jul 30 08:20:14 2026 GMT
Subject: CN=6385f127ad299da2bb00eebd32f1342018bf2e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:c9:d0:3f:a7:33:87:f2:35:b7:1f:20:77:
a3:8c:f1:ca:40:6a:ca:b1:b5:5d:35:fb:e4:47:61:
28:b0:33:ce:3b:f7:27:49:4d:c9:c7:62:bc:60:2b:
b6:fe:8b:c0:16:d6:08:bb:63:5c:40:78:9c:76:15:
16:7f:f9:83:65:5b:b6:a9:22:60:9c:07:7c:76:a3:
33:ab:1d:0b:e8:28:91:8d:a3:54:22:99:d8:4f:86:
8e:08:09:9a:e2:6e:98:66:91:43:ef:59:84:7b:d3:
f7:2a:38:d6:bb:a8:30:20:3e:23:b7:84:56:f5:44:
df:b2:80:1b:ec:2b:46:26:78:cb:b4:7b:c0:ad:92:
a0:32:03:94:6f:32:90:41:e3:18:81:2d:f4:02:65:
77:63:9c:ef:72:a2:ae:10:3f:8e:29:7d:1c:9f:ca:
20:cc:55:fe:b5:14:5f:9f:7f:5d:a7:78:78:50:da:
05:e0:89:13:a0:3d:c1:2e:ca:34:2f:ee:79:1a:a1:
29:d9:67:75:27:b8:42:82:84:31:f1:5c:06:80:69:
44:56:37:4e:be:8d:8f:05:56:27:4b:d0:f3:0c:9b:
63:e0:fe:30:2f:7d:7f:2f:7b:23:29:99:d2:a2:fa:
1b:63:4a:4f:d5:91:0e:39:ea:64:39:a3:9a:35:35:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:85:F1:27:AD:29:9D:A2:BB:00:EE:BD:32:F1:34:20:18:BF:2E:34
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fb:96:a1:d3:9b:43:cd:b0:f2:d0:90:99:1b:ff:73:b1:1c:
5e:85:96:b2:d4:bd:d1:8b:20:2e:38:7c:ca:ac:8e:d6:fe:dc:
97:d8:39:70:b7:cd:11:46:29:ea:08:8f:c1:18:e5:d8:11:ab:
e0:2c:2c:45:c8:70:3e:33:8d:a3:12:f8:f3:81:47:ee:e9:0d:
12:cc:13:64:27:ce:b2:b6:7f:f9:57:5e:32:6f:01:86:a3:fa:
61:b1:a8:a5:7e:a5:bd:87:98:44:61:87:42:62:62:8b:a1:6f:
1c:7a:be:8b:b9:77:32:ac:e9:e1:14:fa:5d:f2:1e:91:6c:7e:
dc:06:24:b8:07:3d:a2:42:2b:d8:0a:fe:c2:78:05:bc:b6:9f:
87:6c:35:7a:3c:fd:7b:86:88:61:e9:96:62:ab:9a:81:a5:bb:
ac:3c:4f:fd:31:fe:70:21:47:ea:ad:9e:3d:b8:74:3e:f1:f5:
19:80:80:0f:2d:a5:02:b5:da:7d:ec:2e:cb:9a:bf:6a:bc:9f:
19:85:24:4f:4e:18:a7:6f:70:b1:43:32:6e:a5:7d:47:72:7b:
8f:09:e6:6e:6c:fe:2e:dc:a1:a1:2b:a0:ed:65:c7:35:81:8d:
44:15:8d:85:89:3c:af:32:51:51:41:2c:1e:69:8c:2a:f9:ef:
0e:32:3e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:42 2026 by rpki-client