Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
File: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json)
Hash identifier: Y+zYLJFCMZiAwbuzU6um9ZnxYK7pncOTVCFE7OWV6kA=
Subject key identifier: D3:17:A1:88:A3:4C:18:DA:43:59:E8:1D:31:E1:8B:0F:BB:CC:38:C3
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial: 019CAC7E54223671764854FE68E99F4DFBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
Manifest number: 111D
Signing time: Mon 02 Mar 2026 03:01:25 +0000
Manifest this update: Mon 02 Mar 2026 03:01:25 +0000
Manifest next update: Tue 03 Mar 2026 03:01:25 +0000
Files and hashes: 1: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: TghMRuPOobZqesfVYoHzpmzjZc+ll3dU3fep8w5IZJw=)
2: gNzUmUgQXk7G4YryRBrkTshiOLY.roa (hash: jrGbKzoOn481FO6Gv/dBrgR8DcLBCJ5w3uT6Yvsqj0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:54:22:36:71:76:48:54:fe:68:e9:9f:4d:fb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Validity
Not Before: Mar 2 03:01:25 2026 GMT
Not After : Mar 3 03:01:25 2026 GMT
Subject: CN=d317a188a34c18da4359e81d31e18b0fbbcc38c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:23:cb:f7:b3:43:6a:be:53:62:3b:06:b6:
9f:32:32:a9:6d:80:b2:c7:f6:b0:51:86:c5:77:68:
4b:4e:1c:59:7c:e9:7c:9b:f8:17:7c:cd:38:7f:77:
bd:48:99:d5:3f:95:15:27:88:1e:03:29:67:d2:f8:
6c:ca:65:c3:85:bf:e4:9a:71:34:a5:28:8c:fc:2e:
23:d7:e6:88:2c:d7:c7:d4:a4:57:3b:67:bc:09:70:
51:07:32:f7:85:5a:8a:9e:88:11:38:80:1e:56:69:
18:2c:66:56:84:06:b5:9e:6c:eb:fb:8e:7e:6e:b6:
07:91:0c:51:b5:3e:41:4c:13:bc:5c:c5:a5:75:0c:
32:dd:18:80:37:ab:f5:91:e6:ee:51:3c:9d:9f:09:
79:62:73:ce:eb:14:22:e3:d8:aa:52:97:5f:8c:c8:
f1:f7:1b:70:c5:91:2f:ea:05:19:55:d9:e2:41:61:
b5:a5:46:58:3c:74:39:36:69:8c:8b:d5:7e:5d:3c:
56:82:3d:f0:3a:94:f6:09:18:5b:c9:71:66:08:ba:
ae:ff:5f:6e:ed:8a:39:47:b1:9a:0b:9a:56:36:51:
7e:1f:b4:fa:9c:08:85:57:db:4a:08:62:7a:78:f6:
56:a4:af:29:cf:d8:6e:aa:e7:61:07:73:47:71:f0:
b0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:17:A1:88:A3:4C:18:DA:43:59:E8:1D:31:E1:8B:0F:BB:CC:38:C3
X509v3 Authority Key Identifier:
keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:53:76:cc:61:6e:5b:5d:c0:5b:eb:5e:db:6f:92:4d:9c:96:
ff:cc:dc:53:9f:71:6a:af:02:46:7c:58:60:f5:20:74:76:94:
77:1f:3c:f9:18:93:cf:78:52:e0:d2:6d:b1:f4:3b:c1:29:fb:
2c:33:0d:73:77:77:8b:ae:5a:14:98:1c:c8:f8:62:c4:65:4f:
e4:88:73:f8:46:92:03:47:0f:f0:e0:f7:49:aa:24:dd:6c:12:
db:00:d2:5b:41:9d:58:39:c7:ba:b9:e4:41:88:9f:ac:dc:c9:
49:c8:f5:cb:b2:b3:bc:bc:0e:bb:77:8e:cc:55:c3:75:8f:ca:
8b:5a:b8:77:51:af:23:f2:4a:e5:1e:c5:8d:70:d0:1a:0f:25:
8e:c0:cb:ae:c8:e5:88:d4:3a:df:5d:6c:47:8d:63:2c:d8:9e:
de:a3:ed:48:3c:a7:32:ff:c0:1b:45:f8:69:05:e4:e0:85:b2:
6d:f6:ef:f6:14:46:a7:14:f2:b7:35:96:bf:9d:9f:5c:43:06:
33:f0:46:a3:6f:8b:a8:51:79:73:14:d9:1d:b9:6a:0d:5e:60:
66:e1:e5:83:38:f8:89:a8:e4:ab:a2:53:22:96:34:08:ea:6d:
ce:c8:00:fe:58:ee:9e:44:0d:38:f8:55:f8:6d:2e:2a:f4:05:
48:14:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:12 2026 by rpki-client