Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
File: dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft (raw, json)
Hash identifier: Bk90Ec5g7WGH/qw8JAkQX26lWI4ld3WVSyiFPDs34zg=
Subject key identifier: F2:05:E8:19:76:E4:E0:4F:80:A9:6F:83:89:08:A8:08:52:74:45:06
Authority key identifier: 74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
Certificate issuer: /CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Certificate serial: 01A0EE1D32639561DAE7B211FA59ACBD8379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
Manifest number: 03F7
Signing time: Tue 29 Sep 2026 17:01:25 +0000
Manifest this update: Tue 29 Sep 2026 17:01:25 +0000
Manifest next update: Wed 30 Sep 2026 17:01:25 +0000
Files and hashes: 1: 1-mmnoNOS11tga2Q29yD5BQAuFLE.roa (hash: GOq5nJwjD0VCVYVCda8zJe1uGhLFpPTQrRyVuZj7aM8=)
2: dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl (hash: /BK8Fdh+tOQK0O4dSCc5pr2OW4MOuATgSwXmYfJPhug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:32:63:95:61:da:e7:b2:11:fa:59:ac:bd:83:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Validity
Not Before: Sep 29 17:01:25 2026 GMT
Not After : Sep 30 17:01:25 2026 GMT
Subject: CN=f205e81976e4e04f80a96f838908a80852744506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:81:02:7c:7a:9e:38:26:c0:79:fd:fd:b8:
25:2e:cb:b4:83:1a:fe:52:0a:80:3c:f9:6e:72:45:
8b:48:63:1d:16:d7:92:d2:3b:b1:ea:7d:bc:b4:95:
f2:dc:0c:b1:52:5f:d5:19:92:a3:17:2f:ec:df:e8:
bd:94:78:49:22:51:18:c1:1a:f6:03:e6:a4:71:eb:
c3:a5:88:ed:39:b0:67:55:a8:2b:f4:a0:a2:c9:07:
f6:af:7a:8e:f9:28:62:58:5e:10:d5:3a:ae:03:96:
5e:8c:43:ec:c9:a8:e5:57:e9:45:3c:bd:12:fe:07:
95:e4:01:1e:fc:8a:ea:20:b5:2c:8e:38:26:e0:4a:
fd:c8:da:79:35:7b:a2:a2:38:5e:6e:60:50:e0:14:
f6:f9:7e:31:dc:05:09:7b:ea:f5:e3:68:c8:7d:a3:
a9:57:c0:6e:17:7c:97:83:19:c5:9a:f8:94:e1:0d:
9c:a1:6d:cc:3d:7d:c7:73:f3:af:98:dd:e1:12:dc:
88:16:e2:ef:0d:6e:14:8c:13:4c:04:71:64:b2:e2:
34:db:87:fb:8f:cb:2b:fe:09:28:87:1a:b1:bd:7b:
17:2e:69:fe:43:04:ba:b7:a2:03:4f:63:e1:e3:a5:
8c:71:32:e1:78:90:91:97:2a:32:46:77:85:8c:cd:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:05:E8:19:76:E4:E0:4F:80:A9:6F:83:89:08:A8:08:52:74:45:06
X509v3 Authority Key Identifier:
keyid:74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:36:ad:a8:a5:f1:9d:79:da:00:73:2d:7a:61:72:63:ad:c7:
69:ad:05:de:d3:cc:7a:20:3c:ab:00:2b:a7:27:66:bc:30:74:
f0:1a:2b:ea:63:1e:4f:f3:48:d2:ad:77:0e:a6:3d:38:c7:9b:
5d:14:df:90:d6:2f:a0:ab:49:0e:b0:48:54:03:44:21:84:c7:
50:51:f8:bd:81:2d:b2:5e:6f:5e:37:be:e7:f6:e6:97:fd:c9:
0c:4c:42:96:dd:1b:9f:87:5a:df:97:06:c3:cb:91:dc:02:09:
e3:75:e5:02:44:4a:ce:d4:8a:41:13:bc:e9:7a:94:83:fb:86:
4a:4d:76:94:0b:8a:b9:e5:cf:f2:f5:c3:f6:00:eb:b5:18:0e:
18:c6:65:ab:0e:40:f3:60:12:46:65:a3:de:39:b5:84:cf:51:
91:05:c5:2f:28:92:f7:70:04:3e:72:1e:85:c8:e3:e4:3b:96:
26:3d:1f:83:63:45:d4:63:21:d5:41:0d:ec:f6:70:86:0a:38:
53:3a:f9:aa:a7:e1:d8:c0:09:0e:c4:62:f1:78:c2:00:7a:a4:
c5:5c:e7:31:ae:95:9f:d1:f3:f6:90:f7:34:a0:b1:25:4b:b1:
9d:83:4f:74:e8:34:87:ae:64:7f:fa:68:28:38:12:76:46:cd:
06:bb:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 02:00:44 2026 by rpki-client