Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: jcG/5EUmXtwvfJHmIXkJwY2qiANKL8Mrk0FVThYAqNw=
Subject key identifier: 4C:52:72:93:EF:D9:A1:E6:3E:A1:AE:8C:3B:1D:E6:80:DB:CF:09:07
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 019CA9EB9BC3C4B9B8D0BB0663189D7246B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 039C
Signing time: Sun 01 Mar 2026 15:01:56 +0000
Manifest this update: Sun 01 Mar 2026 15:01:56 +0000
Manifest next update: Mon 02 Mar 2026 15:01:56 +0000
Files and hashes: 1: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: 2ciE3XIVp8+hTJF+i2kY0uTW3E8MGui8FmdKW8kSPgE=)
2: eh-_1IK7oCD8nbLcwB1h-jsivvQ.roa (hash: 1hB/vcchKccjfMUEW19JzNX5vcI2nAxqryUItaWwuI8=)
3: pdvwezXifSPbHn7Zg5GsoIZ-9_g.asa (hash: L3xvDc7N16Bw2yzHqAnTIftFzbiPXKuwqnDanSSbEog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:9b:c3:c4:b9:b8:d0:bb:06:63:18:9d:72:46:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Mar 1 15:01:56 2026 GMT
Not After : Mar 2 15:01:56 2026 GMT
Subject: CN=4c527293efd9a1e63ea1ae8c3b1de680dbcf0907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:6b:4c:e5:da:43:fa:ad:c6:a2:2f:c7:29:
99:1a:7d:b9:b6:40:1d:7d:21:12:85:87:e4:2b:f2:
03:3d:9b:d2:8f:63:0c:59:83:3b:b5:9b:de:49:fc:
96:b0:97:80:1b:22:b5:1c:2a:8f:37:74:5a:04:02:
21:f5:0f:66:7f:f8:33:fc:a3:06:7b:52:c5:50:2b:
46:57:8e:e8:45:2b:8a:e2:e0:e4:9e:77:e8:fa:9f:
0e:25:fd:eb:69:b0:0e:2d:87:f7:1a:29:23:82:47:
9a:5e:33:7b:46:9b:05:fa:e9:a0:37:a4:d1:a2:b2:
bc:e6:06:7b:fe:37:31:21:ef:c6:4c:d2:fc:2e:e9:
09:8e:f5:4d:cc:ad:eb:8b:67:8d:8a:14:61:ba:2f:
8c:a6:7b:d5:f3:b6:8d:40:79:be:6c:13:00:14:58:
3b:b9:66:09:76:2e:2c:20:f1:53:a9:7a:89:c4:a9:
eb:11:58:5c:fd:bb:4c:0d:b4:87:b7:89:ff:c5:98:
15:9d:f1:3b:5c:60:3d:84:5c:5e:3e:47:d5:b0:ab:
ab:72:aa:8a:a3:68:da:39:e6:1c:9a:e1:ce:0b:c5:
81:52:b6:02:fe:64:8e:72:8a:16:ed:3f:e9:7e:85:
32:9d:1a:24:6e:38:f0:7a:6f:e8:0b:f4:56:41:83:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:52:72:93:EF:D9:A1:E6:3E:A1:AE:8C:3B:1D:E6:80:DB:CF:09:07
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:43:63:1d:c6:7e:0f:83:56:0c:ac:ab:69:44:b1:04:a8:dc:
c3:50:c1:3f:cc:9f:c3:70:c1:67:58:61:a3:f9:d1:7d:c4:88:
d8:d8:65:9d:36:2f:2d:3b:cb:75:fd:6e:6a:4e:3e:f8:a5:b0:
92:a3:f7:51:11:47:2c:a0:1f:7d:31:b2:e6:29:7c:8b:1a:8c:
2a:53:01:b8:ef:80:95:61:53:89:6e:5e:3b:47:3a:20:3b:7a:
e8:e1:69:8e:3f:ec:11:ad:ad:c4:b9:a6:ea:cc:5d:ba:5d:a8:
15:df:9f:0c:90:21:8d:11:95:e1:83:c9:ec:bd:92:58:21:cf:
70:62:9f:62:ac:20:74:1a:cf:cb:ef:77:34:5f:cf:20:26:98:
da:b2:6a:8a:0a:d9:a3:22:bc:34:39:80:1c:a2:98:9f:74:25:
eb:04:cb:c5:c6:7b:2e:1a:ca:96:50:1b:4e:43:b4:f9:0b:d0:
28:69:73:be:f8:55:0f:e9:dc:c0:67:99:ba:04:9e:41:42:80:
7a:36:2c:86:37:9c:66:a5:69:6a:d7:61:5d:72:4f:38:2f:0a:
54:f1:ac:16:19:e5:e4:54:fb:e6:bf:1c:99:68:ce:7f:e7:62:
b4:0b:2a:2d:96:58:a9:f0:54:ca:a3:46:d7:84:64:6a:b7:ae:
f0:c4:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:48 2026 by rpki-client