Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: UUpxHtB75sY/FGAaf7LwsssLWoNHRvRPDQF6NEkCXl4=
Subject key identifier: 1B:F5:EE:BA:BF:A0:44:03:BE:7F:64:8A:38:D2:71:D6:5D:0E:6C:13
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 019CAED9E678EC219767F1F71C39251D5F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 160E
Signing time: Mon 02 Mar 2026 14:00:41 +0000
Manifest this update: Mon 02 Mar 2026 14:00:41 +0000
Manifest next update: Tue 03 Mar 2026 14:00:41 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: +WJZmg+EhTbHprRDnWQNvIDbKWroso+DZi2+l95vJ5o=)
2: mGAQzPjBEuNvLBk4PZVTydQ08Ik.roa (hash: nFMnkaBb6s7S3hBrs96M6UKrx0AkayAu23OFBBKrBXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:e6:78:ec:21:97:67:f1:f7:1c:39:25:1d:5f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : Mar 3 14:00:41 2026 GMT
Subject: CN=1bf5eebabfa04403be7f648a38d271d65d0e6c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:4c:6d:14:23:fd:59:9d:8d:95:7a:c5:31:
d3:9a:82:29:4e:4a:56:a5:90:8c:6a:a3:ec:a6:df:
53:67:0c:36:ae:c1:9e:b3:c7:68:8c:0d:b4:81:49:
00:68:31:75:e1:78:0d:51:ae:a0:a5:1e:f3:e1:ac:
b2:2b:39:88:ce:ad:8d:0b:06:7c:59:d0:40:7a:37:
03:0d:88:0e:8a:7e:6e:03:79:b9:5f:7f:6a:85:de:
cc:20:ad:80:f7:b6:13:3a:88:f3:ed:d9:bf:a7:e7:
63:f2:ae:c3:e1:9a:59:c5:ae:b3:29:37:14:45:c7:
7b:43:3e:fc:f4:da:5f:bc:80:af:c3:6d:b0:60:92:
d1:b7:28:5d:81:cb:06:0f:2a:7f:65:f2:c0:90:f1:
3c:c2:2d:99:0a:b4:8e:66:d9:b8:14:bf:fe:66:30:
6d:bd:0b:70:06:06:61:a2:db:74:fe:46:e4:2e:e3:
27:ba:7a:fb:c6:45:e6:b4:d1:a8:00:5e:08:f1:22:
33:17:e0:91:e9:e5:65:28:70:9a:25:c8:fc:94:fa:
c2:5a:f9:21:91:96:5d:95:81:55:ba:d7:74:32:b4:
7e:12:21:1a:32:4a:74:3c:ac:29:65:0d:a7:be:c5:
11:a7:46:60:32:a0:3d:16:7f:96:c5:54:37:61:a4:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F5:EE:BA:BF:A0:44:03:BE:7F:64:8A:38:D2:71:D6:5D:0E:6C:13
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2d:5c:a4:19:7b:f2:b4:50:63:d4:95:cf:e7:81:c8:ca:f7:
d9:72:3d:70:81:dc:e7:70:54:e7:f2:5a:b3:66:3f:ab:96:f4:
c6:e7:f8:51:2e:26:65:70:71:c6:0b:bd:dd:6e:2e:7d:94:6e:
6d:60:ae:24:29:b2:c1:d6:f9:c7:36:b4:59:ee:0e:af:10:84:
10:02:2b:62:77:9c:86:3a:d5:b7:24:0c:ad:ec:a5:51:fd:bd:
1e:c1:6b:79:97:18:9a:1b:a0:89:da:8a:bb:fc:e8:67:5f:50:
f4:7c:9b:56:ca:fa:b5:ff:77:75:17:7c:f7:70:3c:6a:71:13:
b7:9f:81:62:51:a2:6d:15:7c:f0:9c:e3:10:1a:25:8c:a3:d4:
b6:26:26:a5:73:17:f2:c9:6a:74:d2:f5:3b:e9:b0:9d:ab:52:
5e:34:cf:8d:5d:a3:7f:f0:69:47:dc:fa:22:65:db:a0:d0:75:
b5:c6:74:54:ff:2d:23:5b:a8:b0:a6:79:7c:25:e6:0f:2d:ac:
7c:45:8d:5f:d1:f3:69:ff:42:2a:5c:00:32:b2:c6:88:4c:7e:
07:e8:66:c2:ac:b9:0f:4c:0c:3d:58:bf:bb:7e:da:7d:7f:02:
65:bb:e3:22:ad:54:26:58:b8:8e:b3:ae:ac:b7:10:63:c3:3f:
81:ee:c1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:15 2026 by rpki-client