Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
File: dThqb64eVfV2pAW9dLfwjnpsRlM.mft (raw, json)
Hash identifier: 0rORPdCU2df5m94kw4Jv0Jh2TycVjucmFbd506AbzFA=
Subject key identifier: 03:D5:A0:DE:93:6F:2D:70:1D:3E:DF:5D:BD:20:17:F3:20:05:5C:7B
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Certificate issuer: /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial: 019CA9EB439522DBD453C7F74466BFD8AD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
Manifest number: 0AF2
Signing time: Sun 01 Mar 2026 15:01:33 +0000
Manifest this update: Sun 01 Mar 2026 15:01:33 +0000
Manifest next update: Mon 02 Mar 2026 15:01:33 +0000
Files and hashes: 1: YjThpUKY8dmKpHgsGQ94ajjW1mw.roa (hash: mU028HajfQlA+sa9l/YSlDKUMFBYx7IaDAclqqbnoIg=)
2: dThqb64eVfV2pAW9dLfwjnpsRlM.crl (hash: WsfB6ew94eaUN8JjYEX3Z9UXYe0GlmRDqepVLxYY2nc=)
3: iC9fUn104zY4OEHwbqWBMRhqfeY.roa (hash: G+diZWtaeUYf2mFGQ7Kk9MtmoUpwbZKTbE2sRgcMjNs=)
4: zyy7DFvxeNDAh4pOqGvmANgdfpY.roa (hash: hmel/U2e/Q6evOOJkJluvCudwlyZpvn4SGB/ShoJCY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:43:95:22:db:d4:53:c7:f7:44:66:bf:d8:ad:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Validity
Not Before: Mar 1 15:01:33 2026 GMT
Not After : Mar 2 15:01:33 2026 GMT
Subject: CN=03d5a0de936f2d701d3edf5dbd2017f320055c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:68:ed:f1:79:21:86:c4:fc:ac:0c:2d:10:ef:
0b:eb:69:34:8d:df:f4:4f:e5:a4:db:91:55:48:89:
32:57:d4:68:6b:c7:16:4e:e4:88:a6:90:f9:5d:30:
24:e1:b4:02:45:2b:5d:5c:a4:3c:65:cb:07:92:9a:
96:ec:1c:27:90:e2:31:ce:59:9c:5c:68:36:eb:db:
f7:0b:c4:f8:d2:db:47:1f:12:6e:34:99:83:e3:0f:
fd:f7:be:49:6d:86:cf:bb:06:bf:63:4f:d9:0d:21:
20:ef:cf:69:5e:68:ff:a4:16:22:34:89:05:db:7b:
21:2b:48:5f:2a:bd:4b:d6:43:8b:6f:55:a9:09:93:
4f:aa:94:74:07:d0:a8:d9:a2:22:ec:41:4b:92:95:
3e:5f:a6:e6:69:fd:5f:62:1a:9d:f7:e9:b6:12:87:
a4:72:db:9e:46:94:f4:40:70:51:61:92:2a:b2:6c:
c9:ac:ab:62:af:99:02:13:39:1d:a1:0e:c1:a0:10:
d8:69:8f:fa:05:42:9d:84:28:ff:3f:b5:78:af:df:
20:5b:9f:17:9f:08:54:ee:30:e3:8f:41:61:57:d1:
39:44:a6:38:64:c2:e2:b9:f5:04:13:a3:14:45:b4:
46:f9:3e:91:1c:2c:b9:93:a6:6a:46:15:2a:ba:af:
d3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D5:A0:DE:93:6F:2D:70:1D:3E:DF:5D:BD:20:17:F3:20:05:5C:7B
X509v3 Authority Key Identifier:
keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d8:c1:ad:8f:5a:3b:43:0c:7c:d5:22:26:59:c6:1f:11:5c:
f3:3c:4f:80:a2:2e:b3:a5:53:30:f8:72:09:04:82:f4:ae:1a:
d6:fa:c3:0f:18:3c:0c:87:92:60:37:9c:14:8b:d5:d3:17:a4:
8a:1d:af:0e:80:2a:9b:21:65:2b:4c:9e:28:87:0f:a4:18:50:
a0:a5:79:1d:7c:23:84:28:58:48:c4:ca:7f:2d:a4:57:7d:53:
32:39:e6:a1:95:44:50:3f:32:0a:70:19:c8:15:b5:52:2f:87:
33:fc:a8:d6:f7:4e:73:61:30:01:29:c1:a8:23:30:5b:4b:30:
8b:28:3e:3c:24:e3:00:6f:7d:fa:11:43:e7:44:d7:d4:a4:24:
74:6c:fe:d4:d2:b7:9d:dc:97:48:1f:68:a7:2e:0b:61:c4:c3:
6f:06:e2:bc:a8:34:8d:01:85:0a:97:01:1f:21:df:52:ba:f2:
69:9a:a9:b3:c4:7f:7b:8a:36:fe:f6:38:9c:53:74:bf:31:d2:
fc:40:0b:4e:b0:aa:80:d7:08:1a:2e:12:e2:51:15:42:a7:b9:
40:90:85:4b:8f:1c:2d:ed:be:8a:6c:13:ff:db:c0:fa:35:fb:
c5:ef:91:db:6f:7e:dd:3d:14:3c:8b:54:79:10:97:9d:13:26:
cc:64:29:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:32 2026 by rpki-client