Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier: MKSPAK27m/4QPth93ettEC11HBLCC3jCHXWqf6tb0XI=
Subject key identifier: 79:64:57:A2:3F:BB:1C:89:BD:5E:46:C0:85:3C:5C:62:BA:CC:92:AC
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 019CA94574B887DCAB89B5FE2BBB745088B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 12:00:27 +0000
Manifest this update: Sun 01 Mar 2026 12:00:27 +0000
Manifest next update: Mon 02 Mar 2026 12:00:27 +0000
Files and hashes: 1: B6KgFpwvViQTEk9Dmhs8MfS-w7s.roa (hash: OhVWCZDoCQizES2xkeCkzPUeD4jK/eG28KZNwsfJC3Y=)
2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: Hj5s5MC1mCdmnQZC0PuLU0iep72Aw6LOVla3r51NQXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:74:b8:87:dc:ab:89:b5:fe:2b:bb:74:50:88:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Mar 1 12:00:27 2026 GMT
Not After : Mar 2 12:00:27 2026 GMT
Subject: CN=796457a23fbb1c89bd5e46c0853c5c62bacc92ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:fc:ac:82:98:71:9e:2d:54:2c:95:6b:5c:
8e:ab:3e:0e:6d:a7:c2:a6:94:2c:8e:12:43:86:1e:
41:46:9b:d6:bb:cd:c8:ab:a7:c7:d6:51:e9:37:13:
28:8a:b1:1e:bf:35:df:94:4f:4a:79:3c:5a:d1:77:
45:d6:be:96:69:8c:99:c0:de:23:68:b6:f1:de:40:
c5:02:8b:8a:ad:8a:01:15:0e:b0:37:08:a8:f1:db:
fb:37:cc:1a:65:48:b8:dd:46:31:9d:bd:ef:5d:47:
27:b9:77:60:b3:01:d3:93:f5:9d:67:7e:17:40:63:
9a:69:38:3b:36:44:ae:45:fd:49:68:98:e5:7b:3f:
9c:8b:e6:db:a8:e3:34:3e:3c:9b:1e:27:a0:40:23:
6d:f1:b8:3a:50:e7:98:aa:96:5e:fb:66:d4:3b:97:
76:94:47:80:ff:22:5b:16:82:45:3f:d3:a3:8f:75:
62:99:32:2b:61:99:4d:a4:e6:fb:46:b3:fa:5d:8c:
c8:8a:a9:74:4d:7c:12:47:55:c1:be:73:04:31:42:
20:9e:44:fe:25:31:e4:8f:44:6d:7a:4a:a8:d6:18:
c1:24:98:ad:c9:d7:8b:e2:3c:87:8c:bf:db:15:e7:
19:cb:43:33:7a:28:f6:2c:07:ca:6e:fc:f6:26:3f:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:64:57:A2:3F:BB:1C:89:BD:5E:46:C0:85:3C:5C:62:BA:CC:92:AC
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2d:6e:f6:e1:b2:e0:17:d6:1e:b4:59:93:17:74:2d:6c:9b:
f4:18:d6:86:8b:7e:02:9a:13:36:4f:82:39:cd:66:e6:8b:81:
57:dc:25:ec:de:0f:6b:fc:e1:00:6c:a9:32:7b:14:db:6d:48:
03:86:27:77:c6:bf:68:18:80:30:c6:19:82:21:e8:21:e4:02:
2a:79:29:fa:e8:57:1a:ec:66:ca:63:c9:da:24:92:b3:38:72:
83:2f:76:5a:2c:99:3d:31:4e:b9:67:f2:53:5c:94:f8:51:42:
1b:18:d3:16:05:7a:47:d2:09:b2:42:de:c4:61:2f:1a:0b:e0:
cf:98:20:8c:3b:ec:bc:19:2e:91:0c:9c:67:8b:6a:58:a3:62:
e0:c8:c0:49:09:34:a2:1d:bb:ab:61:e7:d2:fc:7b:77:4d:3b:
e2:50:0f:77:61:83:27:ff:8f:cf:2f:85:7c:c0:f3:f0:f8:6d:
57:06:a9:55:aa:e5:77:da:3a:6d:fe:54:fc:bd:c9:67:c3:41:
30:67:85:96:51:21:21:cf:3a:8d:0f:45:a2:e7:cf:79:0d:00:
87:a9:b2:ef:59:16:d2:18:53:9d:d8:c2:c6:e9:4e:15:57:23:
88:31:27:01:ad:9c:63:91:e7:f2:4a:9e:92:d5:f2:6d:ab:40:
6f:be:83:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:16 2026 by rpki-client