Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File: dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier: QUOOAxJqpLC2xABJsRLxDO44iyO8hO3Bd4poWLt096E=
Subject key identifier: AB:2A:79:7B:F3:B7:58:96:04:72:7C:79:C9:D9:E7:01:FF:FB:A2:3C
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial: 019CAA5835085F874791F2EC747301ED6E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number: 12E9
Signing time: Sun 01 Mar 2026 17:00:33 +0000
Manifest this update: Sun 01 Mar 2026 17:00:33 +0000
Manifest next update: Mon 02 Mar 2026 17:00:33 +0000
Files and hashes: 1: 2snz2cHxMIqDrmWpyQdj5PDHUMA.roa (hash: PDvyyYGhi1AmhDsFwKXgGPleS0592sAJ/29+42mhJtU=)
2: ck9fph3pnGBfD51d6ySumkAZbWw.roa (hash: cePM5hzSAL7gxgiyzP8i8tA4JspwG2EEsvqQZVUTIU0=)
3: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: M4W3dN1mUhxLDUjFBHFjHVGO7DJswaqulZ1h5Jp9z0k=)
4: zsYC7eTs7CKxZQzMiKBYtW02NU4.roa (hash: zfsiqu/7VESSfUyUGFpkJ4f5HeLFmZSKqmckIw2soSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:35:08:5f:87:47:91:f2:ec:74:73:01:ed:6e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Validity
Not Before: Mar 1 17:00:33 2026 GMT
Not After : Mar 2 17:00:33 2026 GMT
Subject: CN=ab2a797bf3b7589604727c79c9d9e701fffba23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:4e:26:56:48:42:23:33:ba:47:85:5f:df:
d8:1e:67:b5:70:2f:d2:73:76:b1:0d:3d:b1:28:92:
6f:43:49:c5:74:05:71:2c:61:31:33:5b:36:80:da:
9b:ab:a7:aa:20:50:6b:50:90:98:70:ca:f8:16:d1:
b6:37:43:81:60:8b:c0:fe:f0:65:3f:b8:2d:0e:fb:
54:f9:ff:f5:5e:59:13:dc:c6:73:a4:d8:ec:c6:97:
da:7d:e8:f4:f5:e0:b1:f6:1c:f9:38:78:f3:f4:18:
db:e2:d3:7e:32:84:ba:e5:47:f5:f8:8e:9b:00:4b:
0d:5e:2e:7f:b3:0b:a5:c7:2b:ee:f4:2f:de:f9:e7:
d4:8e:6e:6e:9a:26:df:27:4e:a6:17:d1:18:d7:e3:
b4:18:59:12:15:ed:40:01:7c:69:7f:30:8d:08:42:
9f:62:07:62:bf:dd:d5:f6:db:1f:5e:50:a5:f1:8b:
e3:ca:66:4b:54:fd:fb:a7:bd:6f:8a:6e:de:8a:76:
fa:a2:57:18:c2:a7:96:8f:37:4a:d0:79:45:79:e5:
1a:06:32:60:6a:cb:6e:f1:e7:d6:56:47:ba:21:4e:
e2:b6:71:df:b5:72:16:45:54:7e:1c:f7:33:86:e7:
aa:15:ac:e6:23:16:e3:07:0f:cd:a8:3a:9d:f4:d8:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2A:79:7B:F3:B7:58:96:04:72:7C:79:C9:D9:E7:01:FF:FB:A2:3C
X509v3 Authority Key Identifier:
keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3c:2b:01:34:4c:31:6f:ed:f5:8b:7c:db:a3:e6:de:2c:60:
73:07:c8:ed:97:85:af:e6:a5:b0:b1:b9:e5:99:a0:fb:02:ed:
7f:95:58:07:6f:b3:60:5b:58:7f:f8:d9:e1:55:81:b2:9a:e4:
fa:5c:52:0c:4d:99:34:ca:21:07:af:cb:a8:ea:55:c3:22:7a:
f2:4f:ca:19:71:8b:60:cc:ff:f0:25:87:ef:83:e6:f8:99:37:
f0:d5:bf:cc:d9:2b:85:88:9e:02:48:34:c8:bc:1e:12:eb:37:
48:27:78:58:42:de:42:7b:aa:32:c5:d7:8d:cf:a6:6c:a1:f9:
77:ca:23:1c:bb:f5:6d:2a:cb:0f:81:91:49:be:af:e3:52:ff:
c6:3a:c9:b4:40:cd:d8:9b:7f:e1:10:3c:36:e6:c8:16:98:93:
ba:6f:0d:7c:f7:80:8d:1a:ea:1c:f8:9e:53:93:cf:cf:6a:9e:
21:1d:ea:9d:3a:36:e9:0a:65:97:6e:7f:25:0d:9b:24:20:06:
cd:c5:c8:a9:fb:88:9f:a2:35:02:a5:7d:01:94:f9:dd:2c:2b:
2f:e5:71:5c:52:1c:e7:22:97:44:d7:f4:ac:63:ab:1c:23:4a:
67:93:e0:a5:59:66:1a:31:c3:fe:26:2b:5b:ec:44:e4:db:df:
33:6a:ed:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:36 2026 by rpki-client