Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: taOGhV4Q/1kDA4S83yd5zUCpfFYOaMPVTfgMECh7iok=
Subject key identifier: 03:C5:04:30:3D:4C:51:E2:BC:62:57:1D:12:27:28:F1:04:CB:42:5A
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 019CABA23E2152DC99C68087C6FAE48B9B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 0D02
Signing time: Sun 01 Mar 2026 23:01:02 +0000
Manifest this update: Sun 01 Mar 2026 23:01:02 +0000
Manifest next update: Mon 02 Mar 2026 23:01:02 +0000
Files and hashes: 1: KMvjq5V4Ksx01k9TjiIKtXCe5pA.roa (hash: 1beuOrWqdA+O+erqVb2gqs5tEOIpMoZMwqBtE6QzSbA=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: 2SQ7+P0pWDB+8Hvwzty5v4I7u9DJqZMgkI3GztFegy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:3e:21:52:dc:99:c6:80:87:c6:fa:e4:8b:9b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: Mar 1 23:01:02 2026 GMT
Not After : Mar 2 23:01:02 2026 GMT
Subject: CN=03c504303d4c51e2bc62571d122728f104cb425a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:03:b0:76:6e:15:2c:d1:02:a2:cb:35:87:
df:ca:36:bb:2a:60:11:fe:03:d7:1b:2b:9d:27:3f:
49:7e:a9:f8:7f:23:be:69:02:0c:38:95:38:2c:f5:
b2:74:10:84:7a:67:46:53:3b:50:30:ac:8f:0e:ef:
cf:0c:70:1b:8a:aa:18:79:92:98:63:8b:95:5e:a2:
c8:c8:b8:27:f4:cd:8e:32:41:a1:38:48:46:21:a1:
b1:fd:65:50:8e:56:10:89:0a:bb:b9:36:5c:ae:20:
1a:27:6f:81:7b:08:59:ac:af:cb:08:77:57:07:e5:
b7:e0:91:34:af:9e:4e:44:a7:c8:ed:f2:fb:54:7e:
fb:d7:cc:84:69:60:51:29:93:3e:6a:c4:02:f2:48:
c2:11:a8:56:fc:9e:1e:d1:dc:d3:8d:90:36:a3:af:
42:f2:75:e5:50:d7:bc:13:59:2d:47:8b:6a:42:fb:
3e:01:49:39:c4:84:53:99:7a:be:55:29:cf:d9:fa:
42:a1:6f:a8:ec:f8:49:60:31:a8:7f:fc:92:b5:92:
a5:78:ca:47:4a:22:fe:8d:41:a4:92:d0:b9:2e:6b:
06:03:88:7a:b6:c1:f3:07:98:38:b0:ab:8b:65:6e:
d2:8e:d2:fa:75:df:75:45:58:6d:67:ca:f8:bb:5b:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C5:04:30:3D:4C:51:E2:BC:62:57:1D:12:27:28:F1:04:CB:42:5A
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1d:41:1f:3c:05:38:f0:98:6b:1f:de:2e:d1:c0:82:d5:ca:
de:aa:dd:80:8b:79:3a:ce:ca:cf:00:a3:15:ce:d9:48:15:35:
16:5f:14:1d:fa:2e:44:8c:41:5d:df:3f:ff:95:50:7e:1a:5f:
5e:06:ea:74:48:cb:d5:cb:57:b4:7d:91:65:23:4b:66:7a:6b:
c4:dd:9d:ca:b1:be:9c:34:e3:5b:78:24:d2:9c:a1:0b:89:b9:
8d:36:53:a1:6f:83:83:2f:a7:49:05:83:49:42:58:5f:a5:a7:
b0:bb:74:5f:1d:e2:ac:b2:83:f2:b4:85:d2:1f:fc:be:12:b8:
e2:39:b6:63:50:24:74:0e:09:c0:f4:a1:ce:f2:93:09:6b:70:
f0:82:34:99:78:c1:cc:b7:73:8f:2b:e0:99:3a:ae:99:9e:47:
ef:45:07:ff:25:78:08:57:57:13:03:a5:f6:b5:9b:85:64:77:
3f:22:6c:f8:8c:f6:07:01:57:2b:d0:34:ee:f5:d1:9f:6f:5e:
82:dd:0c:23:a3:b0:99:7a:37:7a:61:38:fd:80:72:e1:e4:38:
81:5c:40:35:34:2c:cb:69:78:e2:a3:73:15:aa:a4:ec:e8:c1:
a5:d1:d8:f8:48:b3:ef:88:ba:77:88:a0:2f:4e:ec:1a:1e:75:
42:29:6b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:00 2026 by rpki-client