Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: aGuT1c2hEUxVS+0B1D5/76K3YZeeAZdJ3iq/Dmv0hSQ=
Subject key identifier: 9B:D5:D2:D5:44:F7:7F:09:2E:AF:B4:49:F2:CF:7D:C1:69:DB:CF:FD
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 019D9850D060697917DD7E1EEF978CE73ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0A57
Signing time: Thu 16 Apr 2026 22:02:05 +0000
Manifest this update: Thu 16 Apr 2026 22:02:05 +0000
Manifest next update: Fri 17 Apr 2026 22:02:05 +0000
Files and hashes: 1: Caiwf_QYVrjuMQk3SKwJbOdkL1I.roa (hash: 5fx/cD2u1bFDALyIAFqy2QpBhB4xdpPsEpLHocGA9Q4=)
2: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: Rwm0/ARqKqEuFc/v+CvSZQV7GjDW33vYFKwk5IWZlKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:d0:60:69:79:17:dd:7e:1e:ef:97:8c:e7:3a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Apr 16 22:02:05 2026 GMT
Not After : Apr 17 22:02:05 2026 GMT
Subject: CN=9bd5d2d544f77f092eafb449f2cf7dc169dbcffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:77:45:88:1b:4a:4c:48:62:43:d6:2f:e8:
96:30:d0:b6:82:d9:97:10:c0:d4:91:e7:89:a9:57:
cf:25:88:39:2f:fb:be:6c:55:e9:f5:56:0d:3d:1b:
61:10:b5:46:07:c5:ce:f8:4f:53:24:f9:fb:ee:72:
33:28:21:bf:8a:4d:b4:c3:1a:1a:03:e2:68:15:cd:
16:73:85:1f:c5:28:1f:85:83:0e:13:56:a1:81:d3:
3b:b1:de:e5:5f:de:01:b5:fe:4a:50:63:a3:bc:52:
b7:55:07:0f:9f:87:5c:c7:c9:54:b4:02:41:8d:5b:
f2:dc:75:5c:0e:18:0c:03:7d:97:d2:a5:f6:08:a6:
0a:76:96:39:fa:37:10:72:1a:4c:a7:b0:0a:0b:51:
cd:9d:28:b1:90:04:da:1a:bb:f7:51:56:18:d8:6a:
2b:4a:5e:65:2d:36:47:f1:ef:14:32:dc:38:96:f9:
79:ee:1f:3c:99:b5:b1:6b:fd:4b:ad:44:b1:82:02:
7f:39:9e:7b:cc:21:63:93:2d:e5:7d:b3:ca:60:c8:
1e:aa:27:09:b5:e5:02:55:34:64:17:07:1f:c3:78:
8a:84:68:85:f3:c4:18:66:a5:9d:62:1c:41:7c:bb:
16:c6:9d:80:78:6b:53:54:3b:9e:b7:e4:de:a4:e7:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D5:D2:D5:44:F7:7F:09:2E:AF:B4:49:F2:CF:7D:C1:69:DB:CF:FD
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a9:04:29:b5:d5:d3:0a:93:1d:f9:fa:53:31:8c:f6:f5:ae:
8b:56:54:4a:66:bd:75:c8:71:3f:b3:34:09:8a:f0:82:23:c1:
d4:2f:91:92:f2:eb:ad:14:66:4b:35:17:30:19:c9:e4:e7:03:
e9:ec:c9:70:b2:0a:db:7c:ba:ca:54:c4:77:77:73:ad:e7:a1:
33:2a:dd:69:e7:a2:64:30:4d:0a:98:53:c9:5e:42:3f:3c:67:
76:56:a9:26:73:20:2d:a0:1e:53:9c:81:5d:e5:44:91:2c:2a:
b0:99:ff:16:3d:8d:27:14:c8:2c:70:21:45:87:15:e3:d1:ca:
ba:54:52:28:15:63:91:d7:9e:1d:4c:b9:91:89:55:84:69:b6:
b8:eb:ed:29:ad:91:7c:fc:14:ff:27:23:5d:b4:da:2e:54:d5:
05:a6:f8:ba:af:a5:9e:2a:6a:9e:39:95:48:50:22:e7:08:05:
6d:59:92:41:2f:39:08:38:5c:27:bd:3a:a9:92:8d:d2:1a:00:
68:bf:5f:f0:b9:57:fc:96:21:d0:4c:2e:4e:33:3e:01:11:90:
f5:47:1d:d5:39:2b:42:e8:ce:fb:d9:65:bc:8a:5c:b6:5b:98:
39:d1:f4:db:f9:d4:c5:db:e5:92:f3:b2:c4:53:d3:97:11:39:
06:71:d6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:50:39 2026 by rpki-client