Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: sbONltpH2bdRlQMsAuBjbOUy/6Gz5Rbr2SaaY+pBbgs=
Subject key identifier: 04:5E:4C:5D:E8:38:7C:D6:05:82:5A:2F:7C:31:72:83:CA:0D:5C:CB
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019CAAFD8480FBC2BDE7661E90F19A734B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 13C9
Signing time: Sun 01 Mar 2026 20:01:07 +0000
Manifest this update: Sun 01 Mar 2026 20:01:07 +0000
Manifest next update: Mon 02 Mar 2026 20:01:07 +0000
Files and hashes: 1: TFxdoaquIqH8vE1G0TfbaVcQfgc.roa (hash: XpBekycJaRcqmL/FgQfs6y2tHkUUKGYjMMHdix7FSFw=)
2: ZigwfFDMTq9p3ufVtUZkAGSvOE8.roa (hash: hCk1IHYdcTCr5kX9GXFGk1z+A8RaamqdMUb21r4V0lQ=)
3: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: xs/0ORdK8L5fqsiYshk8qibw65hQE/0agi3Bngh7k2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:84:80:fb:c2:bd:e7:66:1e:90:f1:9a:73:4b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Mar 1 20:01:07 2026 GMT
Not After : Mar 2 20:01:07 2026 GMT
Subject: CN=045e4c5de8387cd605825a2f7c317283ca0d5ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:58:75:40:5e:86:c3:64:9f:19:1a:70:df:
fc:be:33:a6:d9:d8:a9:1c:e3:a9:1d:87:db:9b:18:
65:21:f5:4a:e0:68:a7:25:26:e4:00:bd:ff:75:e7:
93:81:64:f3:70:79:04:d0:9d:b0:5d:bf:79:6c:a5:
02:71:ea:71:a8:9d:20:54:cb:1a:16:6e:65:19:86:
33:1c:cd:25:d9:c5:8f:ed:b9:c3:69:26:7d:47:5f:
59:7d:c7:98:b2:4b:a6:0c:ca:cd:ca:80:56:2f:21:
e1:94:ee:7a:f5:79:82:9a:cc:0b:09:4f:1e:fb:eb:
39:26:6d:a6:61:45:b4:7b:bf:88:5c:20:a2:75:13:
c7:24:1f:5e:c0:91:48:a5:c8:48:d2:95:19:e1:87:
e3:f6:36:cd:45:31:bd:ea:32:0e:e6:c7:96:94:87:
14:c9:5a:84:da:81:f7:49:f8:a4:60:71:a4:f1:01:
96:a5:b6:d6:bc:a3:8d:59:e6:06:6d:ff:64:9a:f4:
3b:06:d4:bb:71:70:2f:e0:a0:2a:7d:1a:9c:29:4b:
dd:b0:24:64:fa:33:ed:5f:17:7b:c7:8a:6a:6a:3b:
3b:a9:6f:9d:dd:0b:5c:c0:64:f6:2a:bb:1e:d5:67:
2c:99:1c:cf:2c:9f:33:4c:2d:c0:6c:36:05:a0:5d:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5E:4C:5D:E8:38:7C:D6:05:82:5A:2F:7C:31:72:83:CA:0D:5C:CB
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c5:b5:bf:8f:ef:a7:2d:e6:b3:8a:c7:d5:56:a7:e2:46:14:
c7:b5:44:1a:c0:b1:e0:d0:13:c0:5b:fe:f5:e8:3e:b6:26:1d:
81:1e:a9:3c:28:0b:a1:1c:ef:bf:ca:9e:7a:d6:01:8b:a8:20:
15:ab:cb:bd:90:e7:7f:24:ee:48:ca:1d:82:f3:91:a5:67:e7:
33:2c:80:0f:28:d0:f2:6c:22:e3:9c:7b:56:dd:d8:57:9c:fb:
c1:73:b6:41:18:f4:a5:8b:e3:dd:28:08:be:ce:26:4c:c8:85:
eb:d5:47:2f:20:3e:c9:73:92:a9:c8:ca:a2:14:b5:40:43:6e:
8a:40:7a:3d:3b:f5:5c:71:6f:8d:bf:3b:1c:d4:a2:44:a7:c3:
f5:3e:f4:da:63:6e:31:19:88:78:69:1b:e5:6e:85:a1:4d:98:
4f:eb:14:23:8e:6b:46:91:00:ec:85:3b:02:bc:5f:bb:47:8f:
4a:85:5f:5e:6d:15:62:57:eb:d4:70:15:b5:bc:8a:de:a3:16:
c1:8e:62:5b:27:c2:97:20:ec:e1:0f:8e:80:7b:4a:12:4c:e3:
35:84:05:7d:f4:ec:93:31:c7:8d:74:6a:fa:39:4c:dc:42:18:
24:bc:2a:0e:57:1f:bf:f8:8e:e5:85:40:d1:db:48:1d:09:ce:
30:54:a9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:36 2026 by rpki-client