Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier: K6LgPqx3uVDg6Os/8X/0FxJaWxBV8sn4P1JVcc/4WMw=
Subject key identifier: 28:74:66:A1:5B:56:B2:8A:19:3B:3F:A3:D5:1A:8E:E7:45:30:E2:F8
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial: 019CABD95A60F1BEB9A3268B34C90FAC357C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number: 0C94
Signing time: Mon 02 Mar 2026 00:01:13 +0000
Manifest this update: Mon 02 Mar 2026 00:01:13 +0000
Manifest next update: Tue 03 Mar 2026 00:01:13 +0000
Files and hashes: 1: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: CFBe8T5EUe2MY2ZuDfgis/1VHL15Squ29kocvxkPWeA=)
2: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (hash: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5a:60:f1:be:b9:a3:26:8b:34:c9:0f:ac:35:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Validity
Not Before: Mar 2 00:01:13 2026 GMT
Not After : Mar 3 00:01:13 2026 GMT
Subject: CN=287466a15b56b28a193b3fa3d51a8ee74530e2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:b5:e9:e3:80:e6:88:da:71:0d:20:f5:f8:
6d:ae:66:ae:3f:29:8e:43:1a:4d:fa:24:f8:ca:0c:
a2:29:a7:4c:dd:f8:32:00:d9:a6:88:69:e4:20:87:
6b:40:8f:de:2a:44:46:62:a9:2c:a9:5a:f0:ee:c6:
9e:c0:80:fa:0e:3d:e2:0d:18:95:d8:0b:63:43:55:
7c:e0:da:b3:6b:6c:22:d5:cd:db:15:48:70:f3:fe:
3c:84:ab:be:a6:3c:b2:49:ec:4d:d8:7c:79:8b:fc:
80:89:24:83:b7:43:68:bd:d6:f0:67:82:fa:8e:31:
d0:7a:f0:9b:a8:49:03:0f:7d:a0:6e:79:fd:c9:c5:
57:b5:2a:c4:bc:3f:83:3e:aa:00:25:54:6f:4f:c6:
0e:6d:a7:4b:48:1c:46:35:e4:3f:04:35:82:a4:4b:
27:66:44:40:ed:9e:40:81:b5:32:57:61:70:8d:6d:
9c:e9:10:5f:28:85:8d:0e:eb:52:d4:79:92:c0:eb:
35:dc:dc:77:46:f8:0f:43:cd:e0:84:6f:31:f7:7e:
86:57:29:0c:00:c0:c8:f2:64:61:62:c3:8d:54:48:
34:5c:12:bd:9e:21:9f:02:88:c2:18:c6:7b:91:be:
e1:7b:c1:b7:9a:62:ef:4d:e2:39:c9:70:eb:71:c4:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:74:66:A1:5B:56:B2:8A:19:3B:3F:A3:D5:1A:8E:E7:45:30:E2:F8
X509v3 Authority Key Identifier:
keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:72:af:36:a4:7b:69:ff:23:d4:82:a6:e7:02:14:ba:fc:cc:
3f:0d:a0:b0:a2:90:26:ab:c6:af:6f:96:5c:3c:aa:2f:f4:f7:
9d:bd:5c:27:fd:55:99:31:66:a8:c0:00:13:50:dc:7f:2c:a3:
04:8e:52:c0:dd:a1:69:69:8a:3c:09:53:78:65:bb:41:c8:c2:
b5:07:b6:ac:3c:5c:50:e2:9c:c8:89:0f:39:7a:ae:7f:c3:a4:
cd:d3:b5:e0:49:3c:9c:2b:ef:77:1a:ad:4a:71:31:6b:e8:9f:
58:1a:41:8b:b1:d0:1e:e7:82:e3:89:d6:3d:a4:2e:9b:08:46:
b8:32:6a:20:25:e6:0a:b6:e5:3e:e6:fd:40:42:a3:42:ec:2c:
1d:06:30:ab:67:0f:c3:14:b7:82:00:81:65:0a:2a:32:c3:f5:
31:f7:02:07:4e:1a:08:9d:a7:ba:69:e8:87:62:76:d7:cb:af:
9a:b0:d1:a8:fa:87:a8:70:d6:19:e2:27:fd:b9:9b:cf:9b:a3:
6d:72:23:a9:1c:49:e2:2e:04:51:15:6f:67:a3:eb:3a:c1:ed:
55:d5:f6:89:a0:71:2c:0a:5a:8a:ec:ef:67:d8:b1:57:37:69:
9e:22:cc:d8:ef:7f:cc:eb:a2:ee:52:52:a1:09:49:dd:80:b0:
ae:c7:3c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:22:02 2026 by rpki-client