Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: 00zWfE1iM/DGbk0EdWoVdJ1YZhO6BmLVCY6q7mTKfdQ=
Subject key identifier: BD:A2:95:66:BF:41:71:48:5F:20:98:F6:9B:89:6E:85:E8:95:DB:93
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 019CAAFD8A58B3DFE4E35C7FA73D1531DE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 08AD
Signing time: Sun 01 Mar 2026 20:01:08 +0000
Manifest this update: Sun 01 Mar 2026 20:01:08 +0000
Manifest next update: Mon 02 Mar 2026 20:01:08 +0000
Files and hashes: 1: DQYoTEX-x8cjYmvb3bOaTtlqK-o.roa (hash: kvQYDQBkZ3WehVJeMmEkmsNV2/eI8PigHmwQeG9g+Eg=)
2: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: BModKfCrF3BmuFlHkOmBnVKDnZHK4g0aOKoB4Q3Pbyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8a:58:b3:df:e4:e3:5c:7f:a7:3d:15:31:de:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Mar 1 20:01:08 2026 GMT
Not After : Mar 2 20:01:08 2026 GMT
Subject: CN=bda29566bf4171485f2098f69b896e85e895db93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c2:63:ae:59:4f:09:57:ae:01:14:48:8c:c6:
c1:1e:cd:a1:64:6d:0a:87:67:e8:47:4e:20:d5:fa:
79:16:e2:53:24:ce:a3:d9:76:b3:04:10:3b:d4:49:
ce:21:92:ba:60:9f:70:7f:bc:74:42:ad:14:f9:41:
cb:4b:d7:08:82:59:9f:0e:5c:64:58:02:13:07:e5:
af:84:2b:46:2e:fb:e3:7b:f6:8c:3c:49:79:7f:79:
5a:61:b5:4e:a7:78:d6:9f:e3:8b:d1:22:ed:f6:bd:
7f:0d:16:db:31:a4:1e:bf:72:1f:55:7c:34:fc:79:
57:a8:75:28:22:f8:15:04:6e:d5:72:f5:72:f6:dc:
66:6e:4f:5c:20:f1:3f:5d:c2:4f:14:58:a7:7f:27:
59:7b:71:ab:0e:7f:e5:99:19:02:b2:6c:88:90:8a:
b8:f6:b4:62:f3:ed:92:70:a8:dc:5e:90:0d:46:40:
d8:91:64:f6:2a:d3:85:59:7d:8c:3e:1b:77:bf:6e:
72:6f:2f:4c:83:44:68:71:01:cf:74:24:a2:fd:f2:
f7:9a:1a:2e:9a:25:bb:7f:e7:c8:1c:04:b0:bc:a6:
85:b3:a2:11:e3:41:74:4b:f1:06:60:51:86:cd:12:
e8:5e:a4:60:37:a9:c0:6e:94:a8:32:ac:82:ff:ef:
ec:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A2:95:66:BF:41:71:48:5F:20:98:F6:9B:89:6E:85:E8:95:DB:93
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5a:7c:8b:0b:36:60:89:36:bf:82:22:28:07:f1:62:b3:1c:
89:be:0d:78:f1:b4:71:67:00:00:24:5b:76:b3:5b:80:ee:52:
ef:5e:d0:83:e8:19:81:90:65:ce:c7:0f:8f:bc:64:b7:2a:78:
c6:c2:7b:87:01:f4:85:ed:96:dc:00:10:0d:73:d3:c9:ad:c1:
5b:13:dc:9c:8b:e5:c8:49:19:a5:8a:f2:3d:d8:26:a1:a1:8b:
b5:71:60:5d:ad:52:b7:be:21:fa:1a:c8:28:90:8f:67:88:a5:
f4:c2:dc:31:a7:19:43:ba:43:a2:9f:56:2a:73:cf:ff:17:d2:
93:86:e2:89:0a:7f:1c:d6:39:f2:e0:54:f3:95:39:00:7c:86:
28:4b:4d:bd:92:4d:c3:dd:4c:99:86:91:0d:0a:cd:87:08:ec:
68:e0:79:ab:d2:47:ff:ef:ca:e2:a6:07:19:9f:92:53:e9:8a:
cb:ce:7f:83:05:b4:16:ec:03:8f:0e:ca:86:c0:b5:7e:94:3d:
a2:e1:67:74:4e:79:84:0b:2b:5f:3d:e3:94:11:64:91:17:95:
3a:f3:02:1f:4a:38:19:93:11:f7:bb:4b:c7:af:3d:56:9f:b1:
c6:9d:f1:95:64:e2:2a:a0:81:35:46:4f:d8:40:24:c9:7b:34:
f2:8c:93:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:43 2026 by rpki-client