Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
File: dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft (raw, json)
Hash identifier: dXx7QmJxTn+SO4toF3fSSsThKRWNuYwlaF0tvtCcye0=
Subject key identifier: 2C:51:95:D3:49:76:3B:24:91:0E:7E:A4:B9:3F:A6:E2:19:5B:76:66
Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
Certificate issuer: /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Certificate serial: 019CAD22CF2E72602B99E9C55D6A970142F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
Manifest number: 0865
Signing time: Mon 02 Mar 2026 06:01:05 +0000
Manifest this update: Mon 02 Mar 2026 06:01:05 +0000
Manifest next update: Tue 03 Mar 2026 06:01:05 +0000
Files and hashes: 1: dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl (hash: DuNUBIO840in+jdlapKyeTVAla532XFHi/ITedFPDR0=)
2: g35Y0bPzssO1lbrgJzwXWhCbRPc.roa (hash: INqx3VY6OBJ/sPn/bpn2Ub8Zf1Q1lUdjFiGqKCwTVeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:cf:2e:72:60:2b:99:e9:c5:5d:6a:97:01:42:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Validity
Not Before: Mar 2 06:01:05 2026 GMT
Not After : Mar 3 06:01:05 2026 GMT
Subject: CN=2c5195d349763b24910e7ea4b93fa6e2195b7666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:9f:a6:80:72:8e:d8:92:34:6c:0e:40:39:
5d:a3:2e:25:9f:4e:26:51:55:dd:45:ef:ea:de:8b:
0d:98:e3:03:cd:6f:de:f1:8e:fe:84:16:b4:c2:c7:
96:5e:9d:5c:3b:ce:68:49:19:68:05:ed:88:ca:04:
ef:07:ad:45:21:e7:d3:a5:56:9d:52:b9:8f:5e:19:
ce:9a:65:87:3f:e0:88:44:1b:54:7f:b0:6f:94:ec:
e8:5b:18:e8:d8:3c:9f:90:6a:c8:55:50:79:99:74:
f8:c0:6d:3c:7d:93:54:4e:a7:db:5f:1d:59:ef:6b:
97:42:95:43:70:bf:a7:67:7e:22:f6:7f:95:74:95:
60:eb:57:72:17:19:54:7b:58:9c:e5:7f:70:b5:b8:
a2:f2:36:d4:69:a8:21:d6:dc:88:40:58:85:e5:60:
32:c7:0b:8d:38:fd:60:d9:ef:93:65:d8:cc:19:45:
2f:a9:0c:a9:4f:05:b0:9e:92:6f:54:c0:0d:86:5c:
a8:67:a3:e9:38:80:69:9d:b6:e4:9a:62:1b:b0:f0:
52:cb:04:41:38:67:50:8c:82:83:8b:b0:2b:bc:0e:
ac:01:37:4c:fb:e8:bb:ab:4e:cd:d7:fe:66:ae:cf:
c3:8c:4a:92:1b:e8:58:c3:25:bf:90:e7:a1:aa:b3:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:51:95:D3:49:76:3B:24:91:0E:7E:A4:B9:3F:A6:E2:19:5B:76:66
X509v3 Authority Key Identifier:
keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bf:9c:74:9b:a2:ac:db:02:43:d8:e2:fe:f8:75:00:4a:5b:
34:36:b1:77:0e:70:40:7f:a3:02:18:3d:bd:89:ba:d3:41:36:
6b:8e:9b:bd:30:3b:2e:a0:6a:d8:18:f0:15:fc:72:10:35:81:
7c:16:93:a9:8c:1f:82:87:87:e9:b0:4c:6b:e7:35:2c:5b:46:
be:b1:f0:c7:c3:e6:c3:63:e3:b1:d3:ed:96:b5:4b:8e:fb:a6:
19:22:e4:8e:af:53:99:5e:31:56:a4:dd:17:f0:25:10:28:8b:
bb:1d:97:5e:dc:2a:aa:fa:fb:c2:4c:7c:1e:ab:d8:ba:6b:9b:
7d:66:88:fb:6f:64:77:5d:67:a5:1c:ff:71:94:69:27:ff:03:
84:76:98:b9:53:a6:4c:58:85:92:4a:a9:cc:ef:fe:b8:f7:ca:
c7:b2:aa:48:2a:6d:2c:df:4c:08:04:c4:5d:49:3f:d2:cb:08:
66:b0:00:9a:95:e7:25:c1:4f:9a:18:b3:7b:32:14:0a:0e:a1:
3c:77:11:17:b4:9a:ab:5a:10:b0:95:6c:00:de:56:22:51:3b:
cd:a9:88:43:b5:9b:d7:51:94:26:c7:b1:62:12:42:c9:25:6f:
11:86:d4:5b:fe:4b:b5:fc:8b:2e:8d:6d:8f:77:e3:13:3f:9d:
7a:e6:b2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:36 2026 by rpki-client