Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
File: dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json)
Hash identifier: fKTJEA2qsfKPsdg35qGVPVVUTCbLE4dyDk5E72pknoY=
Subject key identifier: FC:29:9F:02:68:F9:C8:28:F4:AC:22:76:1E:5A:C8:D9:B3:80:F1:6C
Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
Certificate issuer: /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Certificate serial: 019CACB504307187DFA5805CF1F13D737DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 04:01:10 +0000
Manifest this update: Mon 02 Mar 2026 04:01:10 +0000
Manifest next update: Tue 03 Mar 2026 04:01:10 +0000
Files and hashes: 1: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: H9zs+7CE4nc1OXDPRFFXmOhhUjJY2Om0yTprNM3VBYE=)
2: lXioRR_EVL0NPAzIqI7FX4MelJo.roa (hash: S7jrVKRJiz72hirUXIrytitbQsTNlzUASHFJ52S5ht4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:04:30:71:87:df:a5:80:5c:f1:f1:3d:73:7d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Validity
Not Before: Mar 2 04:01:10 2026 GMT
Not After : Mar 3 04:01:10 2026 GMT
Subject: CN=fc299f0268f9c828f4ac22761e5ac8d9b380f16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:fc:15:70:34:61:e4:95:df:e4:46:d0:9b:
f1:79:de:db:37:1e:e4:f4:8e:17:90:88:44:32:af:
ea:b8:ba:84:11:56:20:71:c7:9e:78:6a:78:a5:78:
cc:f7:53:d7:3f:c9:a6:6a:f9:a9:3e:5d:67:9b:ef:
f8:cf:4c:55:91:6d:f4:b4:32:d6:0f:e9:96:cd:4d:
e5:14:cc:2b:8c:47:50:99:a5:f7:0e:7e:0d:51:63:
ce:98:c5:48:95:ef:0a:36:83:58:38:f0:f0:d6:17:
7d:56:ca:b7:55:4e:a3:3a:79:58:76:87:12:98:7b:
22:66:82:42:28:ed:95:2f:00:fc:70:29:3b:fa:c3:
3f:d5:79:08:bf:8a:2d:d1:51:0b:5c:4c:1b:38:7a:
b6:b6:1d:3f:05:ae:a8:a5:79:44:4f:88:7b:65:f2:
3d:90:f7:30:9c:02:e0:a8:c4:1f:d6:63:4e:74:1a:
b1:44:71:67:21:b9:a5:3d:9b:89:a5:d5:58:14:17:
ef:e4:19:fa:0e:16:8e:df:d5:ef:2e:67:c8:95:31:
59:0c:70:7a:36:b3:e5:3f:66:86:8a:3f:f0:7d:eb:
3a:29:6e:b4:df:e8:0d:ba:8d:b9:82:39:89:be:b9:
9c:23:aa:65:6c:dc:2e:34:53:ce:f4:36:c5:34:83:
5e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:29:9F:02:68:F9:C8:28:F4:AC:22:76:1E:5A:C8:D9:B3:80:F1:6C
X509v3 Authority Key Identifier:
keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:85:5b:6a:c8:3e:9d:49:d5:f1:d4:1d:dc:fd:0a:78:20:94:
c1:1f:00:cd:f9:c5:bf:7a:7d:c3:71:37:b0:6a:34:b5:79:0d:
a5:6a:8e:de:2d:41:c3:7d:4f:22:f0:ce:5e:2c:c1:cf:9d:11:
1c:6e:2b:3e:19:48:a0:de:9f:be:f2:59:18:52:71:6d:5c:2c:
57:68:e9:e7:c8:d6:d8:10:c6:f5:8a:a2:f7:3c:9f:75:e9:f6:
24:7e:e2:05:06:ed:af:9f:b1:06:96:97:50:55:9f:b0:a1:cb:
0c:a2:c8:b7:30:9b:85:8c:49:bb:25:5f:20:22:a9:fc:84:09:
47:91:e4:5e:80:11:b0:24:6c:ab:45:34:2c:7a:be:07:10:75:
59:47:f0:ba:08:8d:4d:48:d7:49:81:99:6d:e3:10:79:3f:02:
19:7a:25:0f:fe:a7:86:ed:fb:ec:e2:53:ec:13:a1:e9:35:09:
aa:26:43:c7:9a:88:cc:ad:5f:d8:1e:77:14:b2:bb:e7:6a:c3:
65:9c:4d:3d:4d:0f:3f:20:dd:c0:92:10:2a:e3:ed:48:d6:73:
33:e8:2b:f7:b0:2a:3f:23:0e:5d:8f:c7:80:e0:bf:c4:b4:6e:
bc:e4:d3:7c:6c:88:ce:e8:80:12:71:c7:60:31:62:bd:6a:37:
19:83:6d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:13 2026 by rpki-client