Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: rCpRhKrqTWv3dBlMoSok5QwI+/6Zu/QZzPHlHduzJsI=
Subject key identifier: BD:0B:3B:B3:1E:DC:77:9D:A1:DB:D5:EF:2C:D0:44:D6:80:C8:17:1D
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 019FA9AB8E99C103D831B0104EA12B0E0E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 1799
Signing time: Tue 28 Jul 2026 17:00:20 +0000
Manifest this update: Tue 28 Jul 2026 17:00:20 +0000
Manifest next update: Wed 29 Jul 2026 17:00:20 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: EA5xcfhcqvpIbCyclNgw14Mhg+xvNluadquFN9meSqY=)
2: mGAQzPjBEuNvLBk4PZVTydQ08Ik.roa (hash: nFMnkaBb6s7S3hBrs96M6UKrx0AkayAu23OFBBKrBXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:8e:99:c1:03:d8:31:b0:10:4e:a1:2b:0e:0e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: Jul 28 17:00:20 2026 GMT
Not After : Jul 29 17:00:20 2026 GMT
Subject: CN=bd0b3bb31edc779da1dbd5ef2cd044d680c8171d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:68:cf:cc:6c:2f:99:e4:14:2e:7a:6a:1b:
7f:a5:5c:52:3d:cf:b4:e1:02:c9:eb:c0:dd:99:cd:
1a:62:00:e3:95:a0:b3:25:ed:10:49:70:ca:5e:86:
30:4f:ac:89:1e:f6:5e:10:cb:82:e5:87:13:d8:f2:
42:0e:8e:50:57:00:a2:10:04:50:ee:f3:c9:bf:d6:
03:e6:9c:73:cd:a7:d2:7d:ab:d2:c8:c4:10:e8:c2:
e2:b2:73:2d:d0:97:bf:0e:52:27:a4:74:08:ce:a5:
5d:6b:c2:39:2a:d8:d2:b0:68:79:3a:10:0e:66:0c:
c4:9d:e1:97:27:db:a5:eb:36:15:0d:42:88:ac:66:
71:9b:5b:5a:dc:4f:b1:9a:5a:62:0e:df:89:11:9f:
2b:51:00:53:30:08:b9:68:07:cf:79:65:4e:f4:f2:
dd:1e:4f:a0:70:b2:97:92:07:1c:21:a2:6d:21:dc:
5a:64:1c:c8:8b:1e:26:87:69:ee:ed:44:ed:9d:83:
9e:c1:44:e2:11:01:0e:5a:21:12:15:2b:76:dd:ed:
b1:89:58:96:7e:72:af:3a:e2:3d:61:e5:64:91:2e:
da:30:89:aa:b9:f2:8d:6d:57:f3:be:de:26:d6:83:
37:8b:e4:92:e9:7c:13:10:6f:96:9c:d3:95:98:c9:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0B:3B:B3:1E:DC:77:9D:A1:DB:D5:EF:2C:D0:44:D6:80:C8:17:1D
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:64:41:46:b4:91:2e:5e:20:c3:7d:9a:b1:87:5d:db:cd:d9:
5a:05:ff:33:0d:64:71:c4:64:a7:08:50:8d:4b:0b:85:0a:0f:
c0:34:fa:39:f4:e0:ca:a0:41:18:a8:92:7f:74:ef:2f:1f:1b:
81:d5:d4:28:3c:f5:0b:fd:df:9d:3f:99:b6:c2:61:45:60:bf:
51:50:6f:3c:13:12:89:25:21:29:d5:0a:c7:d6:5e:4b:ec:d1:
9c:25:83:fe:6c:40:63:fe:e8:fe:31:fe:73:9e:98:4d:ff:a9:
e7:bd:14:e7:cb:2c:e7:e0:04:4e:f2:cf:59:d7:ab:0e:ad:b7:
38:3a:5e:da:17:66:d0:18:ef:7d:3b:ff:ab:9d:0f:b8:48:f8:
50:77:6b:10:b7:fe:1f:72:f5:34:62:90:d5:6b:f0:9d:a2:e8:
f9:79:9a:38:1c:c7:60:00:ba:9e:07:8b:76:27:3f:72:af:7d:
12:d4:d7:02:b6:e8:a0:4b:f6:c6:d9:0e:65:42:5f:a0:10:9b:
d7:48:17:d3:e0:8a:2e:7a:89:9c:40:7b:e3:94:48:90:fa:33:
7f:ee:9f:cc:f6:17:af:ab:20:41:c2:02:a1:35:e2:55:3e:04:
d1:d8:21:2b:48:aa:12:16:68:f5:1a:9e:2c:91:fe:49:bc:fb:
8f:88:51:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:36 2026 by rpki-client