Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
File: dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json)
Hash identifier: J66rEEifIIdEFHqudQoIlLm9R+5XCcyssxkCsTRKaCo=
Subject key identifier: 11:32:27:E5:0D:E4:97:60:30:68:8E:65:FF:3A:CC:EB:FF:AE:C5:F3
Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Certificate serial: 019CAB349684778711D2CF23B31FD7822210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
Manifest number: 1326
Signing time: Sun 01 Mar 2026 21:01:16 +0000
Manifest this update: Sun 01 Mar 2026 21:01:16 +0000
Manifest next update: Mon 02 Mar 2026 21:01:16 +0000
Files and hashes: 1: NqpHuEMuxziK_s6FwV4-BlExn5I.roa (hash: vG3pCOebbp8ka7ppT4ebnWl3F1yFRDRI4TRKdbhBhzs=)
2: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: oO8OvUQHwfWLMpC8NDthl0QfUkQFc2H9S0UbKajDkvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:96:84:77:87:11:d2:cf:23:b3:1f:d7:82:22:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Validity
Not Before: Mar 1 21:01:16 2026 GMT
Not After : Mar 2 21:01:16 2026 GMT
Subject: CN=113227e50de4976030688e65ff3accebffaec5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ff:87:fb:da:4e:28:58:61:7b:74:66:e8:b3:
95:25:38:51:38:dd:0b:3f:6d:0c:03:32:52:14:65:
b3:f4:39:c7:11:77:b4:65:df:81:04:59:ec:0c:0d:
da:72:69:52:c3:0c:3f:b3:86:99:09:e2:fd:83:01:
cd:ae:cd:d3:4d:60:93:d1:17:6b:ee:e6:6c:57:1c:
82:30:2a:f7:0d:6a:4b:4f:94:9f:0a:c0:d9:97:85:
7f:a4:47:c8:77:57:08:34:bc:f9:66:4b:2f:e2:a9:
3b:d6:66:2f:47:7e:a8:dd:fb:76:70:c8:27:6a:94:
fe:fa:39:62:ab:4d:35:83:dc:cb:e4:b8:0c:9a:83:
f1:08:30:f2:d1:11:c3:53:da:06:38:66:f7:31:40:
5f:d1:aa:14:05:d8:ee:21:b9:d6:ea:96:a1:f6:fb:
11:85:a9:28:6f:c0:5f:da:02:69:80:96:a3:33:42:
06:db:4d:8a:49:ff:50:dc:43:5f:8f:62:43:c2:af:
cd:42:10:f9:2b:6f:ff:a8:60:13:6a:b3:54:42:07:
6a:e1:05:e3:af:96:8d:49:ea:7c:97:57:ef:8f:8e:
1d:6b:18:29:46:5e:57:01:42:75:b5:8a:54:ca:de:
4b:fa:78:51:c2:3f:cb:b7:51:98:a4:d5:e4:d2:69:
f6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:32:27:E5:0D:E4:97:60:30:68:8E:65:FF:3A:CC:EB:FF:AE:C5:F3
X509v3 Authority Key Identifier:
keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:21:fd:01:e6:19:15:b3:62:b8:fa:91:bf:60:30:da:6f:9e:
77:e1:d3:36:31:8d:d5:97:94:36:44:20:a6:ca:f4:50:7d:06:
21:b9:4e:07:cd:02:fe:e2:ce:26:72:f1:5d:d7:e3:bc:9d:48:
79:3e:7d:85:29:ef:c4:69:0c:ba:87:76:ec:71:25:71:d6:1d:
86:e3:80:fe:71:41:c3:ec:39:a8:af:0c:b5:0c:61:dd:67:34:
cf:5d:28:35:a0:d3:a7:a0:10:bf:d4:1c:89:93:a5:d5:f1:35:
fb:3c:36:fc:98:b5:30:b1:07:22:93:90:0f:64:5d:b1:67:06:
4f:05:c1:f5:4f:95:f1:fa:6c:98:a5:93:4c:0c:72:6e:cc:19:
07:6d:63:fd:f8:61:81:6b:e8:a6:2e:20:31:d0:c3:4e:32:97:
36:e5:a8:7f:dc:83:a8:82:9e:88:df:85:36:eb:e8:23:6f:30:
45:82:d6:f1:85:4e:00:c2:6a:ba:9f:f5:b9:39:4f:28:aa:a2:
58:50:93:61:42:84:b0:31:16:73:b1:ea:c9:7d:54:10:2c:70:
1e:ae:5d:82:c7:58:82:00:90:b9:e7:b9:5d:20:a4:27:0c:a4:
68:b2:9c:43:8c:c8:bb:d0:ec:e8:25:d9:e6:5c:3a:16:b6:c3:
8e:2c:85:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:05 2026 by rpki-client