Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier: cUlke6H+k2XkyuPfHN+97EPhVieuFNm79dFCAKpxzZ4=
Subject key identifier: AA:B2:E3:6D:C8:78:E6:1D:09:C8:91:E0:B2:91:41:E3:C7:DC:DA:52
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial: 019CADC778499D459A91853C9D66F3BF4E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number: 13CC
Signing time: Mon 02 Mar 2026 09:00:56 +0000
Manifest this update: Mon 02 Mar 2026 09:00:56 +0000
Manifest next update: Tue 03 Mar 2026 09:00:56 +0000
Files and hashes: 1: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: S/1iJgO0J6xM7ZixWbhl49Dyo9vSY6+vH3wP5vVCL+M=)
2: pyuMnNg45Imlk2H0jl_EMiwNCJY.roa (hash: Du2wmMU/s9sp+p6yThJQ53vWQyfYeVO+yB5tdkmnkw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:78:49:9d:45:9a:91:85:3c:9d:66:f3:bf:4e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Validity
Not Before: Mar 2 09:00:56 2026 GMT
Not After : Mar 3 09:00:56 2026 GMT
Subject: CN=aab2e36dc878e61d09c891e0b29141e3c7dcda52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:03:54:0c:8b:a4:08:28:b5:88:03:02:30:
bf:65:79:b3:56:15:cb:28:f6:ed:ca:cd:eb:f8:9a:
68:87:eb:0d:4b:84:e9:06:d0:bf:eb:84:10:26:a8:
d0:d0:f7:76:ab:f4:ec:01:e7:8f:e1:fa:9a:1a:54:
12:ca:c7:ba:88:fe:03:37:6a:87:44:fb:26:75:2c:
c3:b3:8f:29:11:35:5b:24:0c:0a:3d:2b:6d:16:20:
45:ac:31:cf:77:fb:d2:a5:8c:6f:65:b7:78:e1:c6:
b7:73:22:9c:2f:46:19:b6:ec:19:b0:e1:50:28:7a:
03:80:a8:5f:5d:28:da:c4:55:ab:e2:c5:e6:e4:bf:
40:cc:7a:67:d8:a4:89:7f:19:da:7f:a5:f2:d7:7e:
49:ed:2d:a0:90:5e:0a:82:62:a3:ce:6b:28:47:dc:
9e:eb:b3:3a:ee:c3:18:3a:a4:52:30:05:7b:2f:fe:
46:c8:62:8d:dc:64:02:c3:9f:e3:49:43:f3:80:c2:
27:77:41:ae:cc:46:ff:13:2b:8b:46:0d:59:16:2a:
a6:94:4c:46:b4:70:4b:08:4b:9c:19:54:d0:b7:00:
bb:2e:90:0d:8b:e3:6d:ab:56:8a:16:39:0b:65:a1:
0f:d1:7c:26:69:c6:ad:42:f4:c9:b9:86:e8:ba:8c:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B2:E3:6D:C8:78:E6:1D:09:C8:91:E0:B2:91:41:E3:C7:DC:DA:52
X509v3 Authority Key Identifier:
keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b4:40:57:58:f1:33:19:e2:96:65:1e:18:36:89:d7:56:a2:
62:d5:e8:c9:8b:13:9d:66:8d:32:25:23:2a:c3:d8:9c:77:82:
57:b7:39:06:7a:43:dd:b1:f2:2c:f4:26:4e:e2:a4:ce:7b:d1:
5c:c1:7c:16:67:b9:3c:98:cb:51:75:c4:b0:26:2f:9e:fa:1d:
b6:f5:32:a7:db:57:16:1b:48:51:e9:45:b2:64:68:c3:52:fa:
da:ac:90:19:85:86:d5:0d:52:6d:12:42:62:42:fd:14:68:4e:
83:47:76:55:80:36:2a:6c:c6:bc:b1:24:82:06:1d:25:48:91:
70:73:4b:05:b6:52:f1:14:af:f9:b0:eb:f6:96:a1:a5:2a:d0:
a4:8f:01:1b:3f:94:11:bd:81:ca:23:cd:72:f6:9a:58:e7:ac:
ca:35:fd:95:0e:ca:22:c0:1a:19:b0:66:49:a8:30:91:82:6a:
b5:b2:ee:14:4e:25:4d:b2:18:ac:2e:bf:d4:c6:36:29:11:11:
b1:a1:33:72:db:c0:f0:d2:93:e0:1a:c7:c8:14:a9:e8:b2:07:
1e:99:86:4e:79:d2:cd:0f:8b:db:71:80:15:3a:01:ad:24:ad:
1c:cd:d9:82:f1:f1:02:3d:4a:8e:72:74:ea:11:10:f0:bd:08:
c6:21:c2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:23 2026 by rpki-client