Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
File: Dxd9Rq5RS92RniRMevdK337bqNU.mft (raw, json)
Hash identifier: 3hG3EwaqA1Yx704OBfKJ86IIJWWN1vGqVJ7OWypojAA=
Subject key identifier: 8B:7E:1F:A1:AD:C1:DC:20:76:E1:75:6C:8D:2E:4C:AD:47:02:88:20
Authority key identifier: 0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5
Certificate issuer: /CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
Certificate serial: 019CAD598CC171FF1485CB11FDA54EA498B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
Manifest number: 5F
Signing time: Mon 02 Mar 2026 07:00:52 +0000
Manifest this update: Mon 02 Mar 2026 07:00:52 +0000
Manifest next update: Tue 03 Mar 2026 07:00:52 +0000
Files and hashes: 1: 25aFLsrtr-3cg85dYuCtUtJ12DI.roa (hash: Q6BbhiSVhBcdb9sUM5J8K87QWD5MUDWEKTLkdgJwJhY=)
2: Dxd9Rq5RS92RniRMevdK337bqNU.crl (hash: vwL2LOnXvvSkWbG39uBaqz2P/ML7AOYorJzW1zi7Uwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:8c:c1:71:ff:14:85:cb:11:fd:a5:4e:a4:98:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
Validity
Not Before: Mar 2 07:00:52 2026 GMT
Not After : Mar 3 07:00:52 2026 GMT
Subject: CN=8b7e1fa1adc1dc2076e1756c8d2e4cad47028820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:ad:4b:8c:57:bf:f0:c9:7b:9d:41:32:4d:
c5:5c:bc:4c:92:b3:a2:75:76:a4:45:07:d6:b3:1f:
79:87:62:9f:ab:cc:ad:9c:22:29:17:95:ea:a2:bf:
1b:9b:5b:86:a4:6f:c3:6c:c3:ec:37:be:57:3a:cc:
d8:6f:e1:4a:5b:41:fe:29:05:f7:75:98:29:b8:17:
84:5f:29:37:ba:4a:36:49:39:2e:9a:6b:47:5e:2d:
63:55:2e:36:8a:0f:2d:77:8b:87:7c:39:ba:39:32:
95:d6:77:a4:4e:2b:ed:88:d8:9e:84:d1:e0:0c:30:
c1:66:2b:51:de:77:d1:87:60:5b:18:73:1c:8d:cb:
bf:d1:03:5e:09:29:23:4e:8f:41:05:fd:35:0e:66:
8b:a0:85:0d:24:e1:e8:66:38:a9:ea:5f:1e:48:bf:
0b:c0:dd:c1:9b:dd:04:a0:dc:24:18:3f:43:f2:c7:
f5:49:62:1b:48:97:b1:ba:e2:ab:6a:11:ea:89:39:
f6:97:46:67:8a:3b:ee:d7:3b:2c:26:f2:f3:17:3b:
a3:df:f3:45:ef:a8:cd:8a:93:07:46:83:9a:d8:6e:
0d:1e:d0:66:47:25:95:2e:80:ed:04:c3:21:b0:ad:
27:08:00:3c:ed:60:7b:e0:27:b6:1b:46:98:15:d4:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7E:1F:A1:AD:C1:DC:20:76:E1:75:6C:8D:2E:4C:AD:47:02:88:20
X509v3 Authority Key Identifier:
keyid:0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6a:fb:6b:3e:7f:60:ec:0a:28:fa:bd:11:df:a5:e3:19:8c:
bc:40:df:a3:73:00:8b:72:e6:a4:5e:6d:62:66:5a:99:29:fd:
1b:84:ed:75:ee:e8:c6:60:bb:6b:68:30:17:f0:77:c1:a8:c1:
80:22:ca:5b:9d:86:dc:66:9e:47:d2:81:0d:e6:a2:60:7d:80:
f8:a2:70:ad:e5:18:89:bd:40:d4:87:18:62:41:48:68:21:93:
0f:a4:41:2b:56:72:16:a7:6a:72:d2:df:51:75:d0:0c:c4:c7:
f0:da:45:8e:8e:39:2c:cf:aa:ff:fc:b1:51:92:51:b3:23:bb:
bd:22:1f:52:5a:91:e5:be:43:ff:1f:d8:1c:15:cf:ee:9a:1a:
48:ff:96:0e:3a:1d:4e:6d:40:c9:56:47:96:f0:45:99:8e:2e:
77:98:10:b7:64:84:f6:9f:2f:55:78:0a:ec:72:d9:31:89:6f:
cd:3d:24:75:d3:3f:fd:ee:1d:94:e6:39:94:55:77:fe:9f:eb:
93:db:f2:49:53:5a:26:65:3d:12:33:70:28:38:de:40:a5:5e:
84:8f:81:b0:f1:cf:b2:06:0b:f4:28:e0:fb:86:be:13:f5:75:
20:22:cb:00:57:b3:fb:14:fd:ba:9c:29:c1:cf:40:12:22:5d:
04:0a:44:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:59:41 2026 by rpki-client