Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: LO7vWwskpBZeSgvOA8a2j0k4gfuUOZz8xmDQU4gzP3s=
Subject key identifier: F5:91:5D:2C:29:CE:91:1E:5C:D5:74:BD:2E:C1:F1:B8:A0:E6:C5:29
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 019CA8D7C3EAA5429B0D8135AF3B9D282781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 0FE3
Signing time: Sun 01 Mar 2026 10:00:38 +0000
Manifest this update: Sun 01 Mar 2026 10:00:38 +0000
Manifest next update: Mon 02 Mar 2026 10:00:38 +0000
Files and hashes: 1: DvoMmaNQLR-F0c_ZQLqJj27XJNw.asa (hash: mEX2A8L8N6B6jxBchbjmo4MApYmBl5md4ZvzoDkGIHk=)
2: OWX2u3h86crIqlZrJEDgTq1vnqE.roa (hash: LsGVcbsq1OthlSGdFhoXpBIhd+P4m0nMhxD/QuTqmCw=)
3: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: pEvcwSbRYt8uLt87bEBTiQEWZxnMqJnEjwRyT5Qgzvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:c3:ea:a5:42:9b:0d:81:35:af:3b:9d:28:27:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Mar 1 10:00:38 2026 GMT
Not After : Mar 2 10:00:38 2026 GMT
Subject: CN=f5915d2c29ce911e5cd574bd2ec1f1b8a0e6c529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:6f:80:e1:0e:92:9c:1b:cd:e8:a5:ea:51:
4d:e0:d7:b8:1a:7f:b2:cd:2f:0f:2b:fb:b8:f0:39:
e8:c2:93:4f:5d:25:9c:40:b2:95:a1:93:8b:2d:4c:
93:62:7b:3f:b8:ca:7c:d1:ee:d6:ff:5d:6a:62:9b:
5c:9c:8e:a5:5c:a1:1c:7b:a3:b1:a1:5d:81:34:c2:
c0:10:19:f0:92:f1:04:a6:72:82:11:ca:5d:ed:31:
45:ba:80:15:d3:fc:83:53:a6:ce:c7:6f:6a:4a:5b:
57:dc:a5:32:7a:8e:6d:35:9b:8a:3e:35:c9:45:9f:
30:5b:66:fe:49:38:dd:fb:a6:1e:8b:46:0b:8a:4e:
7d:46:07:29:9c:5f:f5:6c:1f:a6:52:f5:2b:23:49:
1b:96:ab:13:be:e7:80:bd:7c:06:15:0d:54:a1:38:
e5:a4:23:ce:97:3b:56:0c:19:2c:d3:fa:54:2d:d3:
59:8c:ea:1f:0a:0e:d7:fc:a4:08:bc:54:c5:e9:83:
12:ad:b8:5a:25:31:4e:99:8f:ea:86:c2:b3:f0:7d:
80:79:23:43:88:5c:a3:c6:6b:af:6f:bf:c5:45:ff:
7b:05:12:df:1d:a6:25:ed:bf:ae:46:7b:6a:30:a3:
31:5e:0b:7a:5b:9e:37:58:6c:05:43:37:59:17:6b:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:91:5D:2C:29:CE:91:1E:5C:D5:74:BD:2E:C1:F1:B8:A0:E6:C5:29
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:14:3f:70:65:2d:11:ab:c0:fc:1a:3c:ed:9b:a3:1c:ce:5e:
9c:17:4a:9c:6c:8a:f0:8a:10:fb:8a:31:62:a0:d2:a7:0d:14:
78:bf:0c:dd:61:8d:77:c1:2d:f4:64:11:b3:c6:b8:06:a5:59:
79:05:a1:49:21:46:1e:11:bf:cf:d0:2b:48:1f:74:26:8c:c8:
da:96:f5:3a:06:66:c8:27:2d:fa:21:32:cd:0e:01:62:88:6f:
91:67:79:c7:e8:58:d8:a1:21:07:ee:c6:e4:64:df:45:ae:ff:
6f:f2:38:14:35:e0:25:7b:8a:90:d2:ba:5f:3d:51:31:1f:08:
69:c1:d8:b4:db:ee:f3:d6:b8:67:ba:a7:a0:a3:d3:bb:00:89:
49:a2:87:ae:91:d7:bd:83:c1:72:0b:ba:d2:fd:93:4b:4d:8b:
de:f4:f7:ac:3f:cf:4d:64:26:e0:c1:39:2c:86:3c:16:e8:d4:
89:aa:3e:e4:b9:63:78:df:83:a4:ae:4e:8f:5e:e0:00:0e:16:
a0:fd:ce:c5:20:c9:b4:06:fd:94:35:b4:ce:04:e9:77:f9:08:
75:38:51:c3:3a:a9:fc:98:9d:43:4c:46:93:a3:25:60:40:d6:
1c:5e:2a:6d:2b:6b:ea:9b:7f:e9:f7:9e:a9:23:d9:83:e6:b9:
9f:ea:cc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:20:57 2026 by rpki-client