Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: vEYHJfxfh5vdNtIU1JfGA+P1LUJ0ZUYOaQaJYo2dRI4=
Subject key identifier: D4:4C:97:C9:F4:17:0B:2A:44:6A:15:0A:F5:C4:F6:20:C4:28:54:8F
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 019CAB6BE40B319B492796E5DAC2230D7DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:01:40 +0000
Manifest this update: Sun 01 Mar 2026 22:01:40 +0000
Manifest next update: Mon 02 Mar 2026 22:01:40 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: vB4EIssvxfEc3NtP2wQJdDk8En23E2qmT8EUkm8b7JE=)
2: hU1lZW7ePs-jJStAbmgwJQdywgk.roa (hash: GCbi7/7u241zxcC9BwBBXY2OG87lKhbUz6RrhT+13oQ=)
3: oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa (hash: hhGP/lSRzYSBVwOdWUcy+jdF25VySsbxm9Awg1JpKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e4:0b:31:9b:49:27:96:e5:da:c2:23:0d:7d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Mar 1 22:01:40 2026 GMT
Not After : Mar 2 22:01:40 2026 GMT
Subject: CN=d44c97c9f4170b2a446a150af5c4f620c428548f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:35:01:e3:b2:22:31:5f:03:e3:df:9e:29:
d8:83:bf:1d:23:c3:3c:8c:07:8d:cf:3b:b0:b6:6d:
84:67:79:46:65:c0:e8:18:89:c4:fa:08:3c:92:e9:
4c:5b:84:7f:15:13:17:b6:a8:c5:77:d4:24:bf:a5:
75:c1:13:14:64:4b:dd:b1:39:1f:69:9d:0b:ed:f2:
a1:1b:12:ea:ea:cb:d5:90:98:16:26:7f:a5:2b:e5:
10:7e:d9:ba:4e:ec:30:a1:00:7c:c4:c3:cd:66:2e:
8a:21:e7:49:fb:0c:67:35:bd:1c:cc:dd:2f:ab:95:
4f:8c:20:54:ad:ab:d3:6d:21:c7:9a:f5:f8:9f:4d:
cc:be:97:20:ee:93:0e:15:c6:3b:c6:9b:02:b9:4e:
aa:cc:39:3e:87:a0:a2:6e:35:87:55:12:6b:fc:d6:
ad:3d:b8:06:8a:95:29:0d:b2:97:5f:36:06:ce:16:
b4:90:db:f0:3a:bb:b0:f7:ac:0a:ae:71:fd:7f:4c:
17:91:f0:15:16:a6:9a:6f:06:2e:ce:11:00:90:82:
2d:42:16:57:f6:74:4d:fd:4b:34:23:64:38:2f:01:
ed:71:cc:84:e0:3b:0c:a2:22:ca:84:45:eb:45:af:
78:8f:e8:d2:73:aa:75:53:a7:5f:4f:ee:44:e1:f6:
6a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4C:97:C9:F4:17:0B:2A:44:6A:15:0A:F5:C4:F6:20:C4:28:54:8F
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d9:75:e9:32:01:22:fb:d7:54:35:78:b3:57:4b:63:3d:17:
a3:36:89:33:dc:01:d6:1e:9e:32:2e:e8:0d:6f:db:67:a9:54:
d9:ec:b3:92:aa:cb:8e:33:25:01:49:50:d5:c5:f2:92:02:95:
0f:b0:40:e9:58:e8:22:85:70:49:9f:f4:74:33:31:38:f5:a4:
a7:71:98:50:01:9f:c7:d3:d2:6e:cc:62:a9:3d:1d:d7:f2:c4:
ec:d8:6f:3f:60:6f:0e:cb:3a:82:68:9e:1b:fd:ab:3d:45:b8:
1d:14:87:10:7f:5a:2e:95:fb:62:1f:09:81:31:09:4d:78:44:
be:2a:c0:3b:0f:90:f2:94:a7:69:94:f5:06:e2:6a:38:af:3c:
c3:70:e7:a5:2c:e5:11:f2:43:ed:72:65:29:5d:67:a3:b9:2b:
69:ac:80:59:ac:0f:40:83:ba:1b:74:73:16:1f:98:c0:ea:cd:
a4:4f:e7:62:f2:84:5f:33:05:b7:89:19:5e:15:d0:cf:46:57:
54:37:10:dc:62:1b:9c:68:23:c4:63:0b:ea:a2:ba:a1:5c:9f:
56:b3:aa:88:52:58:e8:02:d4:8b:71:71:4b:82:41:96:9b:c6:
07:1f:75:54:ba:fd:b6:89:fb:ac:74:60:6c:29:36:e3:6b:23:
a6:2c:4f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:14 2026 by rpki-client