Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: LW/AyK9EtScz9ruiempIoAkmjw1coBBDpX1WtUSeQOc=
Subject key identifier: F9:44:9A:67:B8:1D:C7:F9:77:51:EA:28:EE:44:73:D6:38:8D:26:24
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 019CAB6BB88F6D9766570373E934001894B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 1041
Signing time: Sun 01 Mar 2026 22:01:29 +0000
Manifest this update: Sun 01 Mar 2026 22:01:29 +0000
Manifest next update: Mon 02 Mar 2026 22:01:29 +0000
Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: wyPyksM39YziEfo3YjeA2vOMFb5FH6yTAp9ybNLoknc=)
2: uO0hPRixKdpQ7dRmQ2or2PuLKb0.roa (hash: oMcY71q6qwU4awB+i8utxGyZwUW4XEtlGqfFSQ3WTP4=)
3: x3r5MAGnwo9sJOqgqq7L5j88SZc.roa (hash: PdGQVPWLQTL/E0T0LOBkbwg2HWh9KKOf2sd5PHKTZpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b8:8f:6d:97:66:57:03:73:e9:34:00:18:94:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Mar 1 22:01:29 2026 GMT
Not After : Mar 2 22:01:29 2026 GMT
Subject: CN=f9449a67b81dc7f97751ea28ee4473d6388d2624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:ff:de:42:75:43:df:b5:06:a9:57:2a:06:
7c:dd:b3:53:6c:75:e8:2a:23:82:dd:53:78:40:ac:
67:c1:6b:0c:8c:25:f6:d1:5d:7f:3c:31:f9:b3:bf:
cf:45:d0:91:c4:95:90:f0:af:e3:46:a6:fe:24:53:
89:02:27:50:a1:e0:e6:d0:ef:20:4a:4a:71:bc:00:
00:47:3b:37:c4:02:cd:71:48:df:4f:02:d2:87:35:
43:f6:3d:1e:30:d0:4d:6d:fb:c7:b3:39:93:62:d9:
bb:90:07:11:ab:2a:94:d0:78:0b:39:02:11:e8:46:
8f:43:5d:6d:db:05:9f:c9:43:aa:59:fc:bf:b1:80:
5d:d3:0f:a7:3a:76:44:57:e2:87:dc:db:a5:fb:a5:
a6:00:d1:13:9d:3f:cd:4f:60:f7:a5:13:25:e2:09:
e6:d9:b3:81:94:82:4f:f6:c6:f9:16:ab:4b:4d:8e:
ff:7f:2c:af:11:ae:4e:03:02:f9:22:52:41:02:f4:
08:07:f7:ca:54:70:ad:23:34:a0:f1:7e:20:f6:3e:
df:ab:b2:79:75:4b:f3:41:76:08:8f:58:3e:bb:e0:
70:d7:58:de:b9:bd:b9:7f:66:5e:4f:a6:dd:e7:8b:
f4:6a:c6:47:ac:bd:53:c8:03:9d:97:cd:e6:e8:ae:
66:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:44:9A:67:B8:1D:C7:F9:77:51:EA:28:EE:44:73:D6:38:8D:26:24
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b8:29:58:14:1c:e7:68:9c:de:f9:46:24:8d:38:47:b9:c0:
39:34:e5:1d:ab:bc:4e:a2:0a:95:65:d0:88:5c:89:7d:9b:32:
3f:d6:5e:4e:17:d5:db:4c:e1:d9:e9:3f:fb:ef:09:19:3b:8f:
9b:59:49:ce:1f:27:68:96:dd:f9:34:a8:03:29:ea:2c:f6:39:
66:6e:7a:66:b8:4e:3b:78:e1:3d:12:f4:1f:63:4e:ed:ac:aa:
9a:a0:97:a7:e4:ee:c8:79:33:28:f1:b3:bd:d9:43:8f:e0:4c:
16:0d:f3:40:a8:04:5c:16:21:1b:1c:97:eb:5c:bd:51:ca:cc:
48:eb:db:7a:6a:d4:ea:30:c9:94:ef:00:0e:08:cd:94:84:ac:
da:1f:91:aa:e9:01:28:09:65:a4:82:85:14:03:96:a6:93:59:
f8:64:b0:a5:df:3d:fc:aa:2c:5e:e2:aa:bb:2a:c2:7c:e1:68:
5b:47:bb:62:e1:01:30:3d:ef:03:c0:99:1e:26:fa:3a:ce:f7:
76:8e:68:ae:1a:27:67:f4:85:88:09:a6:b2:21:ef:1d:29:4b:
22:f1:80:00:11:f1:5b:08:14:2f:00:95:42:74:43:b4:83:e8:
97:48:29:b5:44:a9:af:f0:56:09:f0:a2:02:ef:0d:5d:c0:ad:
81:6d:01:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:43 2026 by rpki-client