Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: Qf5eRnDaZyNpJzKg3wy4yGVr4fMwL0Hh8J4xFLgS4Q0=
Subject key identifier: 14:8F:92:6D:FF:45:A8:96:CE:B0:FB:A7:97:D1:2E:AF:22:5B:A0:76
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 01A1C4794DD7A3DB26E1B8AF89E28D0879B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 18B0
Signing time: Tue 10 Nov 2026 08:00:46 +0000
Manifest this update: Tue 10 Nov 2026 08:00:46 +0000
Manifest next update: Wed 11 Nov 2026 08:00:46 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: v+tiiswDuVpb8la1ccd5RGBbAStTisi2513ikO+gs34=)
2: mGAQzPjBEuNvLBk4PZVTydQ08Ik.roa (hash: nFMnkaBb6s7S3hBrs96M6UKrx0AkayAu23OFBBKrBXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:79:4d:d7:a3:db:26:e1:b8:af:89:e2:8d:08:79:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: Nov 10 08:00:46 2026 GMT
Not After : Nov 11 08:00:46 2026 GMT
Subject: CN=148f926dff45a896ceb0fba797d12eaf225ba076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:21:68:55:e0:35:cf:ef:12:1c:1b:e1:31:
05:7c:73:23:13:2d:1d:3b:79:ea:24:3d:08:1b:d0:
41:1d:7e:35:d1:dd:62:7b:da:ee:28:d3:33:ea:cf:
01:f5:87:25:80:65:67:01:b3:e7:44:c8:4a:5f:28:
0b:10:e7:98:24:57:fa:e1:bb:fc:4b:ad:b8:71:67:
66:dd:44:74:07:f0:af:ad:a7:e7:a9:67:43:bf:5d:
5a:f6:89:ec:8b:2d:8d:f3:02:5c:de:ce:95:82:49:
ec:c0:22:55:6d:46:43:c1:7f:d5:df:1f:ea:d1:d0:
9e:45:14:04:af:0f:69:dc:c2:91:7a:22:90:02:88:
1c:f2:f9:07:96:3a:71:da:82:6e:e7:ad:99:ef:87:
aa:ad:3e:81:38:52:77:dc:47:ab:32:a6:f2:f1:79:
76:bc:27:40:4f:2e:61:96:71:bc:76:97:65:45:5f:
1e:98:0f:62:58:fe:ff:a9:fb:d6:7c:76:ce:af:c2:
98:2f:62:af:df:d9:c1:84:e5:2e:02:e4:3f:43:b7:
d2:b2:76:b0:cf:0c:55:e1:18:a1:d7:e6:60:5e:37:
e4:6e:60:3a:06:c8:66:ef:b1:b5:ea:56:ad:89:3c:
b0:2c:40:5d:61:f8:09:d9:af:a2:42:16:e7:01:86:
c8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8F:92:6D:FF:45:A8:96:CE:B0:FB:A7:97:D1:2E:AF:22:5B:A0:76
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2f:df:21:60:9c:11:09:5d:5a:e3:7c:80:b4:39:7f:16:90:
60:9d:9b:c0:a6:33:e3:31:5b:1f:db:91:94:e7:43:dd:23:b6:
fa:51:b0:9e:56:42:06:e1:31:62:e4:cb:61:c6:68:97:88:12:
cc:80:5c:1d:97:73:7f:86:20:c5:69:c2:fe:8f:10:e6:bf:d7:
61:61:56:42:82:5f:e1:6b:cb:a1:ea:05:04:71:9b:19:27:81:
51:05:91:01:37:86:61:c2:77:a8:93:8f:07:3c:6f:ab:ad:d2:
c1:4d:d7:ec:c5:c8:4b:9f:36:0e:32:71:57:e0:a5:93:04:14:
14:ea:91:f4:ac:71:95:e8:45:59:bd:94:f0:77:6a:5d:c4:02:
e4:ae:05:f3:b2:25:3d:c1:fa:36:8c:02:7a:21:7d:b6:79:d4:
e2:3e:6d:63:32:22:c8:14:ba:6b:13:d4:30:d0:da:55:91:6f:
d9:6b:92:53:ef:a8:7e:9a:9e:d7:d2:42:b7:66:90:39:bf:d0:
d9:1f:93:09:2a:ac:36:be:88:f3:25:be:50:8f:4f:f0:52:20:
d5:e7:10:93:13:62:76:7a:b8:f6:30:dc:2e:59:6f:6d:70:37:
78:ef:14:76:b3:cc:6d:6e:d3:57:4c:e5:3f:b9:79:fc:ee:da:
4a:0e:d3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:32:42 2026 by rpki-client