Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: TxGWy4puaY6qzVx//fb4azG7U34oGi/q6N4td27gbGA=
Subject key identifier: 04:BC:5E:6B:F7:AF:C5:9C:DA:C3:89:EA:BB:0F:91:1D:2D:9E:2B:64
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 019CAD598B351CA2A25154F52BA90E5F9830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 07:00:52 +0000
Manifest this update: Mon 02 Mar 2026 07:00:52 +0000
Manifest next update: Tue 03 Mar 2026 07:00:52 +0000
Files and hashes: 1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: Ux+ed9R7R1mSUR1FH76nOtJGgGIaja3pB0lEb3S5Ntw=)
2: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (hash: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:8b:35:1c:a2:a2:51:54:f5:2b:a9:0e:5f:98:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Mar 2 07:00:52 2026 GMT
Not After : Mar 3 07:00:52 2026 GMT
Subject: CN=04bc5e6bf7afc59cdac389eabb0f911d2d9e2b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:40:37:89:aa:ea:31:13:7f:81:bf:fd:d1:
ce:6b:83:6e:8a:f3:4d:1f:a0:49:da:4c:6f:5f:35:
af:7d:29:78:85:3b:cc:fb:cb:ba:14:86:f5:1f:db:
f9:71:04:cc:f3:5e:c6:5d:4a:e4:39:99:c4:6e:82:
97:bb:88:ef:5c:56:9b:34:f7:55:a4:06:f9:ed:3b:
63:77:26:93:05:b5:ea:7b:88:d0:85:5c:95:fe:40:
df:61:4c:66:5f:2f:6d:4c:59:3d:fc:34:90:4b:b9:
a3:3e:9a:78:e0:70:b8:b5:27:fd:15:3a:7b:17:02:
e5:46:3e:cc:30:9f:e0:cb:f1:55:7b:46:d6:1a:0b:
9f:0f:07:f7:a0:0b:1e:1b:f5:66:c1:a7:dd:3a:c1:
d9:23:9d:31:11:ba:8e:36:6f:99:2a:73:f6:d0:ae:
f2:35:07:4c:d7:c4:74:08:c3:55:6f:fc:4c:8a:d5:
36:8e:fb:a1:2f:ac:51:dc:28:77:87:5c:46:81:f1:
6d:7b:23:15:25:71:30:94:8d:fe:88:18:6e:20:1f:
10:d4:6c:8a:3a:f4:98:e4:dd:2e:4b:0c:8a:db:80:
c1:20:47:14:c8:da:64:1b:90:94:b3:cb:cd:d1:c1:
bf:9c:16:2f:5e:4f:dd:7e:53:69:23:16:fe:c6:cf:
65:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BC:5E:6B:F7:AF:C5:9C:DA:C3:89:EA:BB:0F:91:1D:2D:9E:2B:64
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:96:7b:9f:10:c3:20:aa:19:2a:b8:25:8b:ee:fa:21:03:1e:
8d:4a:f2:3e:b2:e4:12:d4:05:22:ea:44:36:2d:32:a8:4f:06:
18:38:7a:23:a4:c4:87:1d:ae:5b:fd:f1:58:09:2d:f1:f7:c1:
50:cc:bb:02:9d:4f:18:3d:e5:c1:8e:83:d6:14:0a:02:19:df:
b4:b0:30:8a:34:45:55:65:3d:60:e2:3b:9e:4b:8c:2f:80:5c:
ad:0a:62:20:ac:05:36:b2:45:be:68:f1:b0:45:20:44:d3:28:
40:b5:9d:7e:75:ed:c5:83:36:83:0a:18:f8:1a:fa:68:30:8c:
b2:0f:84:ff:a4:97:c8:c4:5b:04:55:4b:20:27:5b:13:1a:1c:
20:0a:fe:47:e4:8f:0e:c0:1e:6f:80:a0:6f:e6:2b:08:22:44:
87:2f:d4:f9:b0:01:e2:dd:67:d1:aa:23:67:96:8e:48:90:43:
c4:4e:c2:59:2f:e2:81:01:6d:d7:30:1e:e6:45:67:94:11:c6:
12:e6:55:4d:f2:5b:55:23:d4:0c:1c:a1:e0:11:32:9d:25:f0:
95:08:ee:9f:d4:23:a1:b7:04:e2:6d:e0:15:5e:2b:6a:1f:6d:
b3:db:44:a2:23:a9:d2:f9:91:52:bb:a6:d3:bf:6c:54:50:b2:
2c:42:ab:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:27 2026 by rpki-client