Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: xTIr4dQfgLkwhvs0pGd5+qqMRoFKm4q5SzYcoW3LN2U=
Subject key identifier: FE:BD:39:F1:05:90:0B:9B:83:42:C8:8E:78:DC:2B:CA:76:2B:73:17
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 019CAAC69E4A0EFDC33CEA45BD4CB87D782F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 09DC
Signing time: Sun 01 Mar 2026 19:01:09 +0000
Manifest this update: Sun 01 Mar 2026 19:01:09 +0000
Manifest next update: Mon 02 Mar 2026 19:01:09 +0000
Files and hashes: 1: Caiwf_QYVrjuMQk3SKwJbOdkL1I.roa (hash: 5fx/cD2u1bFDALyIAFqy2QpBhB4xdpPsEpLHocGA9Q4=)
2: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: F2zVCRM5HOym3N2oxF+TZX3MaIMN7NQyZnK0RUidwpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:9e:4a:0e:fd:c3:3c:ea:45:bd:4c:b8:7d:78:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Mar 1 19:01:09 2026 GMT
Not After : Mar 2 19:01:09 2026 GMT
Subject: CN=febd39f105900b9b8342c88e78dc2bca762b7317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:f5:78:d8:60:4d:87:2f:42:97:21:21:78:
07:b4:3f:a4:5b:35:53:6d:5f:b7:8e:0e:66:8f:e8:
dc:f0:e3:86:98:f8:15:54:ec:66:b9:a2:52:e1:aa:
90:83:f7:06:8c:fb:90:79:7e:8c:76:06:30:76:be:
df:e3:19:bf:7f:8c:19:ee:bf:6c:c8:27:fe:03:e6:
8a:72:ca:88:ef:22:bc:24:29:7d:84:d1:f9:c0:a5:
90:79:0b:22:f5:b7:56:8d:f4:e1:a8:35:20:24:0e:
d1:e9:10:ee:95:a0:4a:ca:ad:64:4a:13:31:b9:78:
8a:6e:b8:2d:80:58:95:8f:ef:02:a8:1e:0e:c2:0f:
c1:a6:3d:e9:15:36:ef:0d:e6:bb:41:94:a8:55:ea:
40:37:c1:6f:5b:f8:55:e4:f0:3d:37:bc:a3:d8:a1:
b0:38:eb:b3:09:83:ba:bd:be:90:cd:5b:8a:9b:3f:
f2:63:2c:a9:64:90:a1:5b:2c:ba:bf:45:cf:24:2a:
ce:60:48:b5:32:ca:25:00:73:3e:6d:fc:8a:fa:68:
ef:6a:8f:dc:3b:7b:fc:0d:ce:91:46:1e:65:a0:23:
55:9d:38:41:34:85:56:04:47:5e:06:ad:37:8c:16:
8f:54:d3:f4:50:3f:85:b4:c4:33:14:f5:a5:1a:d6:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BD:39:F1:05:90:0B:9B:83:42:C8:8E:78:DC:2B:CA:76:2B:73:17
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:39:fa:88:42:89:89:fd:0a:c4:ee:8b:25:9b:5b:3b:0f:fe:
cf:a6:4e:89:8d:e5:81:78:6e:9b:3d:a6:32:d1:94:2f:8c:84:
cf:64:4c:37:56:53:0c:be:66:68:4a:b9:1f:da:a7:82:f6:62:
d3:24:40:80:00:ac:d5:41:60:05:b4:26:08:f6:bf:db:ae:4a:
b9:08:d2:07:71:37:71:32:68:76:8d:cf:b8:5e:64:03:8f:a8:
58:cf:19:7a:7a:2d:06:bb:7f:f2:44:ab:50:7b:eb:62:52:c5:
b3:a9:5d:95:4a:87:67:2d:33:63:01:7c:ed:fc:09:13:a6:56:
76:71:e9:24:c3:78:88:ef:02:2e:7d:92:f3:36:b4:66:e5:a1:
85:d7:3d:83:30:09:15:38:bf:7d:2a:e7:aa:8c:b6:6e:44:34:
e9:6b:d2:ea:be:c1:8d:f4:87:9d:44:29:c6:b1:72:83:05:d8:
ae:e5:42:eb:e6:44:30:18:a2:c1:97:7e:34:99:97:54:a1:7b:
91:08:fa:0d:5a:d0:c8:0d:24:d1:1c:e1:fa:c2:8e:de:a9:2a:
0b:67:60:f7:1b:9c:c1:0b:63:f4:79:e1:46:3d:fc:1e:ea:86:
5f:94:7b:78:6e:5b:f9:3c:62:8f:0e:0c:51:ae:c7:d3:23:38:
1f:a5:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:30:31 2026 by rpki-client