Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
File: dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft (raw, json)
Hash identifier: Xurz3bBe+htlop9IKmXiXKswf6ATW3qzkQ/XGGl0XU4=
Subject key identifier: 54:D5:82:12:F9:FB:B7:FB:77:1B:B9:92:24:A7:43:D0:2C:CC:50:D1
Authority key identifier: 76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
Certificate issuer: /CN=769a0ed13591d4b84ca79a8eb577226076651a14
Certificate serial: 019CAEA328A0F95A55F5EAB5D80948655222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
Manifest number: 0C56
Signing time: Mon 02 Mar 2026 13:00:54 +0000
Manifest this update: Mon 02 Mar 2026 13:00:54 +0000
Manifest next update: Tue 03 Mar 2026 13:00:54 +0000
Files and hashes: 1: EN7XiEfKlFXBlZqtNN-oRqqWPD8.roa (hash: hOsYakPKoUo+w1ZXynrtNEWFAogAYXmthy1G2XJLeXc=)
2: dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl (hash: pD+RYKiqNhm8WclRSdr0pJKuHlgy4V2qdvOggQIzaeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:28:a0:f9:5a:55:f5:ea:b5:d8:09:48:65:52:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769a0ed13591d4b84ca79a8eb577226076651a14
Validity
Not Before: Mar 2 13:00:54 2026 GMT
Not After : Mar 3 13:00:54 2026 GMT
Subject: CN=54d58212f9fbb7fb771bb99224a743d02ccc50d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:a8:9d:6d:68:68:a5:3c:82:f0:79:1d:af:
b5:7a:36:9b:ee:03:98:21:0e:1b:fa:93:48:4d:01:
4b:6b:87:32:4a:ff:10:4a:8a:f1:06:98:f3:07:74:
1b:57:cc:74:2c:78:b8:ff:59:e5:73:e8:c1:b5:ec:
82:f8:48:22:99:ac:a8:e7:88:e5:f7:89:e4:86:97:
d1:3d:c9:cf:03:9c:bb:6c:d3:54:d4:5a:ac:54:34:
6b:44:0f:80:a6:54:fc:60:a3:22:48:79:52:50:fa:
19:51:1d:aa:e3:20:df:da:14:58:9c:da:62:f9:5b:
99:19:b7:e4:47:51:3b:1e:1d:a5:ba:a6:5c:10:be:
32:43:29:df:59:7d:45:9f:14:37:29:c4:45:31:5d:
4a:d8:a2:ef:5c:95:2f:ec:53:40:fe:93:b4:92:d3:
5a:02:fa:eb:6f:70:dc:5e:28:1f:22:a4:01:ef:17:
0a:ca:86:05:8d:01:26:2b:51:45:b4:91:2f:c1:27:
3b:98:88:fe:c2:6f:df:5c:40:41:ef:2c:0e:d4:1d:
cd:dd:a9:0e:37:73:c1:cf:3b:ae:8c:72:8d:c9:6f:
e4:83:bb:e5:5b:fd:41:b3:4b:86:fc:f6:84:ce:eb:
02:49:1e:ec:3d:4e:e8:4a:ce:3d:6d:ae:0c:89:c8:
7c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D5:82:12:F9:FB:B7:FB:77:1B:B9:92:24:A7:43:D0:2C:CC:50:D1
X509v3 Authority Key Identifier:
keyid:76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:83:57:e8:fc:57:5b:e3:71:bf:60:72:9f:c9:6e:51:b3:8c:
c4:0d:53:7e:a9:9a:11:7b:8d:48:8b:9a:f0:78:0e:1d:b4:3f:
3e:3f:a2:4f:d0:c0:ac:55:a6:1b:21:e3:9c:95:8c:85:cb:6e:
cf:48:4a:2a:b7:b8:0e:88:9a:b4:cc:19:e2:dd:70:5f:ab:0b:
d9:77:38:15:80:9c:c1:b6:d4:6e:33:64:42:fb:11:ca:e7:97:
a4:7b:49:94:52:19:cf:ec:9a:90:2c:92:b2:b5:1d:71:4c:fe:
cf:29:0f:d8:67:17:cf:95:2c:5e:91:f8:1d:15:d8:b5:f8:44:
38:e8:30:cb:bb:7c:e3:84:a7:10:3f:37:14:f5:22:7b:16:ea:
1c:9c:c5:97:da:b4:68:14:33:85:ae:6f:fb:de:85:78:8d:03:
8a:3d:ef:a8:d8:6c:f7:59:d1:bc:8d:6f:f0:1e:09:84:36:46:
12:70:22:b1:07:f7:63:60:4e:5d:b9:3d:e1:d1:1d:8e:0c:06:
96:72:40:54:0d:c6:27:de:fb:a8:21:b2:8e:38:05:d5:89:6a:
a1:47:56:04:58:30:64:bd:6e:bd:0f:63:c1:e3:3a:67:35:c8:
54:df:f3:a2:a6:f6:f7:56:d4:39:8b:4e:f7:b1:ae:61:ea:5d:
16:e1:88:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:08 2026 by rpki-client