
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier: xFD36zzQPM/irnsvGGN94B4WKWO5OHXnqH7QdX6ldZE=
Subject key identifier: AA:7C:14:7C:2E:3F:F8:A3:93:40:8B:63:E5:C6:37:99:A0:ED:2C:12
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 019CAC46B277EF7CF9C79F02CF6C9A5BA41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number: 065B
Signing time: Mon 02 Mar 2026 02:00:40 +0000
Manifest this update: Mon 02 Mar 2026 02:00:40 +0000
Manifest next update: Tue 03 Mar 2026 02:00:40 +0000
Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: bDm+JV1l3BM0C4bAAAWyk0nIPWYRjw1367OV3XWhLWM=)
2: q19_s0i5IT2dybooIUZ7ijzcNXc.roa (hash: mA9ozpHHNX60WKdi28wKCibVutGMEXZy4W8BO6NWgto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b2:77:ef:7c:f9:c7:9f:02:cf:6c:9a:5b:a4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Mar 2 02:00:40 2026 GMT
Not After : Mar 3 02:00:40 2026 GMT
Subject: CN=aa7c147c2e3ff8a393408b63e5c63799a0ed2c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:a7:6d:62:a9:b3:b4:61:ec:5e:25:c9:54:
f9:da:9d:df:8f:17:74:de:ba:f8:38:34:02:a0:63:
e4:c0:44:d1:91:ac:a0:0e:e5:51:8f:8a:91:73:6f:
2b:4c:93:f2:f4:76:e2:c2:ea:31:47:62:d1:e1:67:
a9:6f:ff:6d:e0:eb:e2:fd:a3:58:e1:52:4c:98:6b:
ed:b4:17:53:e5:1e:22:44:24:d6:1f:74:cc:66:9c:
77:9c:d4:c5:21:73:fe:20:36:df:c2:80:4b:71:ac:
0e:99:12:67:13:c5:52:ad:7c:68:15:0d:45:a4:83:
7e:1b:72:92:e9:be:92:42:6e:f5:6d:d4:3a:3e:a8:
02:7c:79:9f:11:d4:87:e6:0f:21:1e:56:67:f6:63:
da:1e:6c:76:7f:ac:7d:41:ff:fc:29:3f:f7:ad:7a:
3c:ef:e0:f6:18:96:bd:6c:29:8a:3e:1a:1e:b9:af:
50:6d:e0:f3:79:a1:8d:ae:ee:50:32:66:31:c3:ae:
4b:7b:67:62:69:04:79:70:c5:53:00:2a:96:a9:45:
0a:df:be:e9:ef:37:3c:81:15:8d:d0:11:4d:d6:24:
f9:8b:77:3b:1b:9b:f9:c0:f6:ad:9a:f2:76:70:05:
09:7b:3b:03:6a:0c:13:9e:79:43:cd:77:11:0d:3e:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7C:14:7C:2E:3F:F8:A3:93:40:8B:63:E5:C6:37:99:A0:ED:2C:12
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f5:80:b2:4d:1c:8f:e2:75:72:5b:dd:93:aa:cc:dc:d6:7e:
1a:cb:a8:2f:12:13:45:d5:d7:96:4a:36:19:a1:bd:50:3a:fe:
af:ff:0d:2a:01:75:e4:79:a2:54:b3:fc:d3:83:b2:07:c4:29:
f3:00:8e:4e:d9:9c:62:d3:0b:68:3b:90:e3:77:ef:68:7d:20:
64:f0:3c:56:1c:b1:be:7f:28:1a:27:29:86:28:96:7f:f2:52:
b1:59:21:57:38:c4:ba:06:62:24:dc:e9:d7:5d:7b:b3:93:b4:
f8:83:27:29:2f:92:c6:33:4d:22:9c:94:fe:17:f3:b6:f7:a8:
f5:fd:c3:c4:f9:42:5a:b1:b4:e5:39:23:78:ad:6e:99:9e:ce:
e7:ec:a0:10:f6:04:60:15:c9:6a:18:72:3a:a3:5e:10:b5:cd:
f6:7c:f4:7b:d0:f3:c1:36:64:d9:a3:b6:79:c5:ec:80:e7:31:
61:04:3e:ca:98:66:d1:dd:39:71:a5:a2:33:5a:cf:8d:1d:e6:
ab:1e:53:8c:18:48:c9:24:25:19:aa:3d:ef:e8:47:4a:23:3c:
1d:7f:c5:85:a4:bd:93:89:d9:cb:1f:2a:23:b9:91:37:56:e3:
f2:d5:2a:07:b2:c5:bc:a2:4b:49:dc:a3:6b:99:68:7b:29:d4:
4b:43:66:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:21 2026 by rpki-client