Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier: UgDpS5mgFgfo2i/w9tfN2tiYuO5/G1Ozdb0JkLWYLUU=
Subject key identifier: 5A:A1:76:03:58:28:4D:22:68:5A:7F:F6:DC:87:34:4C:CF:31:9F:A6
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial: 019CAC10196C3B2716D22B8F2990B5491911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number: 0E47
Signing time: Mon 02 Mar 2026 01:01:01 +0000
Manifest this update: Mon 02 Mar 2026 01:01:01 +0000
Manifest next update: Tue 03 Mar 2026 01:01:01 +0000
Files and hashes: 1: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: C5pOakvlYSabD7TYRlniWG21TNVMGOCkTitwYyX9tzA=)
2: vj0F4FgcNslWI5L8V7Dw0mIMfn0.roa (hash: j/Kb2HDxy8LEtTBE0A03kW5/ZkhjPjh8YBluaGzICqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:19:6c:3b:27:16:d2:2b:8f:29:90:b5:49:19:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Validity
Not Before: Mar 2 01:01:01 2026 GMT
Not After : Mar 3 01:01:01 2026 GMT
Subject: CN=5aa1760358284d22685a7ff6dc87344ccf319fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:07:47:3b:5f:fa:c2:63:14:c5:3f:24:5f:
c6:9b:a1:19:b8:19:b3:42:eb:65:b9:e0:1c:50:06:
90:d3:90:00:f4:0a:52:58:75:cf:62:8f:24:02:22:
97:23:9b:05:89:7b:b8:50:59:a0:d4:cc:c0:0b:a9:
e7:75:4e:85:fb:08:b0:01:56:10:c5:51:72:aa:b5:
9d:bc:17:d0:0b:b7:40:4c:00:6c:a4:61:da:f3:b6:
38:28:75:f3:41:03:ba:b9:9a:1a:53:85:a4:32:1d:
31:78:61:69:d3:76:58:2b:47:41:c3:b1:82:32:3a:
56:e9:c3:4a:a0:35:34:38:32:6d:16:7c:e9:bf:8b:
00:cb:4f:9d:f8:92:59:ab:ec:e1:02:28:a4:00:7a:
d5:c0:ae:ef:d0:f5:91:46:f1:d7:44:4f:93:be:13:
f7:d8:9d:fd:8c:0d:ed:27:66:9e:8d:9a:1a:90:17:
b2:76:be:d9:56:68:fc:84:85:16:fd:6e:b0:7a:16:
27:1d:89:ec:92:fc:2c:f9:ee:b5:fb:c9:e3:1a:0a:
41:26:fb:97:0e:a4:a2:3b:88:78:6c:0d:2e:90:df:
45:53:36:05:f6:16:87:4b:8a:fa:1a:0a:1e:93:c4:
fa:fd:eb:74:d8:f7:ef:d0:f1:d2:15:ea:11:cb:a9:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A1:76:03:58:28:4D:22:68:5A:7F:F6:DC:87:34:4C:CF:31:9F:A6
X509v3 Authority Key Identifier:
keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e4:f8:87:2f:01:cb:aa:0c:af:e6:ed:42:09:d0:02:d1:76:
f7:1b:c9:87:9b:da:de:50:38:d9:35:3b:3b:5e:c2:55:5a:b3:
74:42:72:15:7e:da:c3:b2:61:6b:71:32:26:d4:e7:78:49:36:
5a:0f:b8:41:99:52:ef:13:35:b6:0b:60:99:97:64:b1:d2:71:
fc:3e:d3:af:95:95:de:ea:3c:75:d4:02:bc:44:8f:76:41:cb:
74:97:83:13:f0:b7:50:d9:66:13:43:4d:aa:68:e9:6d:7f:5f:
9a:b2:b3:e2:5d:f6:e0:e4:63:94:ec:c5:ff:3c:2c:a0:9c:e7:
47:8c:2d:08:db:7c:97:1e:96:7a:16:05:66:2c:20:b5:90:5e:
73:6e:b6:b4:62:ef:a5:d9:ba:b5:82:55:49:ad:84:16:21:65:
e1:2c:df:77:e6:8f:f5:04:82:6f:87:61:34:f2:d8:5f:3d:a9:
06:66:27:8b:53:d3:a6:6d:1d:ad:d2:20:93:f5:41:86:8e:d5:
a1:75:81:18:63:3a:9e:30:fd:81:36:fd:8a:0a:67:d7:6f:51:
f8:36:12:2d:24:ec:99:40:69:7a:80:53:85:28:ac:1e:25:cc:
2f:2d:53:4b:76:29:cb:36:37:31:b7:aa:06:15:b0:d6:ed:05:
3f:b5:dc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:46 2026 by rpki-client