Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: jtzRM610k3agPUZM1DjbrEdZclqDfeDS3r4H7QCZ4zE=
Subject key identifier: 03:F1:67:A2:93:CE:7B:FD:3C:5A:76:19:03:E6:80:88:A0:EC:7A:69
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 019CABD9CD1830434FC0C3F89D171E5F5058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 1025
Signing time: Mon 02 Mar 2026 00:01:43 +0000
Manifest this update: Mon 02 Mar 2026 00:01:43 +0000
Manifest next update: Tue 03 Mar 2026 00:01:43 +0000
Files and hashes: 1: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: qHNko9gSlNz/ULP6vJ+hINhAXa1sCkU1SYsF/HTuyD8=)
2: qZ8aQgjdabGbDv-i6H620T5YhwY.roa (hash: UdXrLbOlQenxMN6hG/0L/eJWuifEwthlbNrK+9DhFyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:cd:18:30:43:4f:c0:c3:f8:9d:17:1e:5f:50:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Mar 2 00:01:43 2026 GMT
Not After : Mar 3 00:01:43 2026 GMT
Subject: CN=03f167a293ce7bfd3c5a761903e68088a0ec7a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:cc:8d:93:4f:93:8a:2e:80:e1:7f:86:1b:
ae:30:45:40:f0:7a:59:65:c6:95:10:de:95:5a:3d:
2f:f4:b5:ea:8c:64:c9:2d:a2:ba:22:0d:b2:43:1c:
b9:f8:b1:4b:b6:0a:48:e9:74:ef:fc:71:8e:c0:1f:
b7:d3:9e:5b:80:1d:49:b8:54:28:8a:6f:20:96:9f:
c2:3d:54:40:02:0c:d1:03:b8:ab:33:1d:60:9f:7b:
86:d7:cb:fd:c9:c7:d2:6a:1f:e2:b7:c9:ff:2f:6f:
93:3d:74:81:35:b0:5b:a2:03:2e:3c:46:85:9b:24:
58:70:e2:d9:95:a5:59:03:d0:7f:d6:f1:12:b6:48:
fe:d3:e5:43:bc:6e:33:a8:b2:4f:bc:ab:35:f1:0c:
69:b5:1d:34:fa:c2:8f:35:13:f9:e0:10:4e:f4:06:
39:e6:62:08:b2:45:4e:4c:c7:c0:28:af:f7:d5:c5:
8a:40:5d:0d:88:fc:4b:cc:56:03:26:b1:ea:c2:bf:
03:5c:33:48:20:60:7f:44:cc:91:fe:92:9e:64:c1:
3b:f1:d2:32:05:73:36:4c:a8:4f:64:2b:c9:a2:bf:
c6:6e:9a:64:73:c1:3b:8a:fa:0d:fb:ed:d3:12:c5:
2a:1a:44:5a:1c:38:fa:29:ed:f0:7f:c1:4e:3d:76:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F1:67:A2:93:CE:7B:FD:3C:5A:76:19:03:E6:80:88:A0:EC:7A:69
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8c:b2:a1:a6:b0:24:c9:c7:cb:ed:5e:dc:30:79:a6:ea:c8:
3f:5e:26:c1:e0:23:39:fd:8e:ce:1f:7b:45:b9:b1:c8:28:ba:
18:f1:87:d0:e6:23:85:0d:9a:33:bc:12:00:4b:07:6d:fe:56:
9b:c8:71:1a:6f:6d:71:e8:71:32:fe:7d:0d:73:13:d0:b9:68:
5c:77:1d:87:80:e8:c6:ad:37:1a:07:6e:dc:d9:4b:17:1b:2a:
89:70:f5:8f:a6:27:fb:a3:2b:27:1f:00:eb:ef:c1:31:57:7e:
a4:80:b4:88:ad:3e:c6:89:76:e8:5a:e6:29:04:ec:56:24:1b:
1e:e6:ab:85:c8:ef:f6:0d:c1:d1:0a:23:4b:c2:14:52:74:70:
16:c8:d1:09:73:bb:b7:7b:4e:64:7b:15:e7:ea:69:6f:cd:77:
d9:34:57:62:7f:6c:e9:e3:ea:12:45:25:5d:78:74:55:4f:9a:
1c:4c:36:49:bf:17:d5:f1:8c:d0:10:61:63:b3:f2:17:eb:1e:
ba:3f:61:df:27:80:4f:ee:c3:b1:c8:da:58:b0:65:50:d1:55:
a7:1b:7f:b9:62:c4:8b:ac:2b:fd:5e:2e:5c:d1:31:8e:49:45:
26:df:5e:84:16:34:3f:80:32:30:f3:5c:22:d5:ac:1c:46:7f:
ee:e5:27:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:30 2026 by rpki-client