Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: i3HubE4UKP3XisO/Nbe5vosTtsd6l10Ja9DiUP5+utM=
Subject key identifier: 6C:50:2A:11:B3:DB:6E:57:9A:D6:FF:3A:D1:7D:C6:DD:AD:8E:84:D2
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 019D9886DBE63CC25E9F44442FEC1B31A574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 1687
Signing time: Thu 16 Apr 2026 23:01:08 +0000
Manifest this update: Thu 16 Apr 2026 23:01:08 +0000
Manifest next update: Fri 17 Apr 2026 23:01:08 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: EssUcWDD3DdnzaappJWBjbDTZ8DMrPnOZmWgSr2nOQw=)
2: mGAQzPjBEuNvLBk4PZVTydQ08Ik.roa (hash: nFMnkaBb6s7S3hBrs96M6UKrx0AkayAu23OFBBKrBXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:db:e6:3c:c2:5e:9f:44:44:2f:ec:1b:31:a5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: Apr 16 23:01:08 2026 GMT
Not After : Apr 17 23:01:08 2026 GMT
Subject: CN=6c502a11b3db6e579ad6ff3ad17dc6ddad8e84d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:b7:b1:e3:8c:b5:c3:ca:9f:4f:aa:8b:4a:
32:cb:69:d2:38:97:76:32:2d:3a:65:a7:6e:0e:4a:
c3:e5:7c:c1:6f:4d:1a:15:20:f2:63:3c:3e:ea:c6:
c7:38:c7:a8:1d:94:0e:7f:93:f7:a4:30:1e:0c:ea:
83:54:12:5f:5e:88:56:4e:3a:93:35:11:a7:2d:7d:
ac:39:ad:52:cd:b4:65:8c:df:1a:d7:e4:63:0c:86:
5c:c0:04:9e:34:8d:2b:90:e5:fd:43:c2:f8:12:0b:
03:21:5b:61:16:1c:ad:5a:b8:4d:fd:c5:c6:46:60:
b0:6a:61:82:85:a8:26:e3:1e:e6:80:a6:6a:d3:7c:
f6:be:28:f7:91:7e:e9:6e:07:e0:81:db:46:a7:ae:
8e:f7:1b:1c:5c:70:e4:a8:cf:03:8f:44:1c:93:4f:
8a:da:5b:92:fe:64:d4:16:60:99:a8:b1:5d:69:8c:
3c:5d:db:e6:1f:55:73:23:7a:a1:2d:71:9c:d4:91:
84:ad:bd:f8:be:17:31:83:66:db:fd:ff:d9:5b:d7:
b2:c3:9b:4c:36:6f:cb:9f:34:07:38:d1:4a:7b:77:
5e:70:65:2d:4c:f4:dd:b3:23:9a:86:c4:88:d4:f8:
9b:6b:a5:54:c3:ac:46:4e:91:79:90:f4:dd:a0:42:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:50:2A:11:B3:DB:6E:57:9A:D6:FF:3A:D1:7D:C6:DD:AD:8E:84:D2
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:12:fe:88:5f:ee:a5:04:6d:cd:66:e0:07:2c:93:17:29:a7:
06:e5:1d:03:59:3b:36:c6:c0:b9:aa:c5:fa:1f:42:99:7c:4b:
70:1b:2d:33:45:9f:87:3b:a2:4c:bb:27:bb:02:ad:67:57:e6:
72:a5:a7:61:41:c3:4a:04:c6:59:f2:d2:c3:50:d5:cc:c1:e3:
95:1a:fb:de:c8:02:ee:23:aa:e0:bb:f5:4d:18:b1:a6:06:4f:
ef:7b:97:60:3d:a5:96:1e:cd:4f:8d:ff:b0:53:0c:8d:98:cf:
7d:e6:a0:be:3f:69:3e:2b:cd:c5:54:35:52:ed:e2:cf:20:7e:
a7:eb:9b:c8:d3:13:7e:7c:ed:27:b4:71:d3:11:39:27:5a:8c:
2e:e2:1c:99:dd:ed:4f:f1:d5:f3:87:d7:0d:5e:17:07:d6:c4:
2e:e6:30:55:16:55:ae:c1:b6:de:9d:11:01:8a:4b:0e:19:32:
bf:a7:8c:fe:00:94:a4:3a:b9:57:14:98:d1:0e:d6:3f:87:8e:
c7:3e:fa:5a:f6:4c:b9:e3:81:16:88:6a:a0:7e:8f:de:db:59:
8d:b4:17:51:a8:50:5c:3b:9d:10:02:01:e0:45:21:d1:92:c7:
d4:a1:8e:d9:06:54:87:2f:7b:fd:b3:72:b6:b4:a1:bc:b2:a6:
1c:bb:a8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:07:25 2026 by rpki-client