Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
File: datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json)
Hash identifier: Ugd+bWz71rTdAZBK1rHtrVjiWc/nl27OR7zjDIhwuCE=
Subject key identifier: 65:09:21:C5:6A:64:DE:A2:CA:4E:DE:92:C7:DA:E6:E2:2C:2F:AC:5D
Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
Certificate issuer: /CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Certificate serial: 019CAA8FB5E10AE15B4B7C5F3C9EBED01681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
Manifest number: 052A
Signing time: Sun 01 Mar 2026 18:01:10 +0000
Manifest this update: Sun 01 Mar 2026 18:01:10 +0000
Manifest next update: Mon 02 Mar 2026 18:01:10 +0000
Files and hashes: 1: ajNgz3i4R4z9MoH7g9Gh2FsCAiM.roa (hash: ak7eVyyVkmWQATGl9IjiTOWOerTXTRW7k0wkBuX7rhg=)
2: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: kK2hIHyOFB6RXgHQzHGN2PhUeHZAO3q/4aMOq/cyLf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:b5:e1:0a:e1:5b:4b:7c:5f:3c:9e:be:d0:16:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Validity
Not Before: Mar 1 18:01:10 2026 GMT
Not After : Mar 2 18:01:10 2026 GMT
Subject: CN=650921c56a64dea2ca4ede92c7dae6e22c2fac5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:41:55:f9:3f:b0:b6:fe:c2:c8:8f:70:fb:
3f:c0:c5:49:c1:30:e0:8a:70:a2:be:22:0c:ac:e5:
7b:f3:62:2e:b9:36:4d:73:c1:57:d6:28:7a:fa:30:
96:51:3d:f4:ac:59:b5:3b:8a:07:04:7c:9a:d8:14:
dd:b7:0a:36:70:6f:2c:85:f1:32:8d:74:37:dc:38:
25:b2:3f:0b:92:c9:5a:a6:08:83:00:0a:4c:06:1b:
81:33:64:fb:a4:03:0b:c5:f5:b4:a9:eb:7e:80:f0:
6f:11:64:98:b2:62:03:86:e5:4f:3a:94:a7:08:97:
9b:33:79:96:09:7a:d8:53:38:65:17:b2:5e:61:45:
30:25:68:34:20:07:c1:0b:95:cb:c5:0a:75:10:81:
25:12:33:d5:28:f7:78:b5:d8:ec:c8:bf:73:ed:1c:
98:88:4f:58:84:33:be:8b:48:1a:e3:40:11:f9:90:
7f:6b:95:6c:eb:da:75:b3:cb:44:30:7d:bf:1b:85:
ec:e7:31:b8:1e:0f:24:f8:dc:b5:e4:cf:16:58:88:
88:58:83:bb:d1:b0:ec:dc:7a:dc:47:f4:ee:f0:61:
64:de:4f:22:4d:4f:8f:88:cd:16:ea:8c:f8:cb:f9:
b9:bd:e1:a8:cf:48:90:17:b3:db:ae:06:9c:bd:4d:
db:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:09:21:C5:6A:64:DE:A2:CA:4E:DE:92:C7:DA:E6:E2:2C:2F:AC:5D
X509v3 Authority Key Identifier:
keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ae:e1:d5:a0:29:75:1b:fd:3b:5f:fe:cf:81:45:93:cf:fd:
3a:3b:4b:47:40:f5:a2:33:45:61:1a:06:27:6e:71:37:c3:c3:
b5:bd:6b:41:af:6e:ce:79:e8:92:a7:76:d7:c8:c2:25:62:7c:
b2:ca:7f:60:20:78:c7:be:7a:ba:b8:bc:89:89:12:3b:16:a0:
31:6a:77:be:4b:b5:08:eb:cc:d9:a3:b7:60:60:8a:0f:fe:61:
0d:c1:1f:f5:1d:52:cf:55:54:76:6c:e0:8e:2a:3b:25:47:f8:
b6:20:4a:65:05:5a:45:fa:88:af:f1:81:81:bd:db:f6:df:60:
89:f1:cc:f1:10:e2:e6:79:c4:c4:52:73:d7:62:f5:a8:1c:b5:
e9:0f:25:c4:5a:ab:8c:86:a3:ca:89:69:4f:54:87:ce:3d:36:
cb:cd:0c:27:cb:dc:04:0c:c6:46:bf:9b:a0:e5:fb:34:a5:cc:
36:25:33:2f:61:82:bb:25:ea:a3:2d:85:04:d2:6b:cd:8c:63:
bb:4b:fa:74:e0:9c:02:04:50:1d:bd:83:3d:3a:d0:81:d0:e4:
0b:ef:f5:31:bd:bd:72:65:5c:2b:50:b9:bc:22:25:e5:c1:a2:
e0:ec:24:b0:6a:1e:98:c7:24:83:be:47:e5:f2:a6:22:3d:73:
7b:a6:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:31 2026 by rpki-client