Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
File: dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json)
Hash identifier: iCPgCHkebB6U9MSNxTtjw3M0uDDN1kCbCW73D6JmRCQ=
Subject key identifier: 7D:6A:34:78:CA:30:5B:2D:45:8F:72:EA:01:45:59:F0:10:07:FA:63
Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
Certificate issuer: /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Certificate serial: 019CACEBB2B424478A2A4BF3A63A65A781FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 05:00:53 +0000
Manifest this update: Mon 02 Mar 2026 05:00:53 +0000
Manifest next update: Tue 03 Mar 2026 05:00:53 +0000
Files and hashes: 1: KwctrYLeRKoApU1-lNG2pUzIRFY.roa (hash: 1By8fKUFtlATKn4LhCiJ+z6rFS67TtSuGlxf5SYKGN4=)
2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: qhVBtoZV2S/7GWXbfDz54FEmASvsF0tMq4f4SUGSTJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b2:b4:24:47:8a:2a:4b:f3:a6:3a:65:a7:81:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Validity
Not Before: Mar 2 05:00:53 2026 GMT
Not After : Mar 3 05:00:53 2026 GMT
Subject: CN=7d6a3478ca305b2d458f72ea014559f01007fa63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:7e:96:43:fa:63:5b:7b:19:2c:66:46:3f:
76:c3:98:18:86:9d:57:fb:d9:7a:86:fa:6d:e4:1b:
17:68:a3:a5:b3:b2:45:17:df:e3:ec:6e:d0:e0:90:
dc:9e:9a:5c:77:95:67:d9:c2:66:c6:12:61:41:eb:
4f:6f:f7:7b:1d:0f:60:0f:f4:8c:6b:31:de:2a:a7:
f3:88:2f:f8:d2:8b:d7:d9:e8:6a:1a:5c:63:56:9c:
3d:c1:ae:3a:25:c1:8c:ac:a2:5b:3c:c5:fa:d4:b5:
70:78:d4:1c:11:87:45:a3:2b:46:ab:1d:56:63:76:
37:b2:b4:55:e3:6f:f1:7a:70:c3:ee:3a:9c:78:dd:
8e:8e:75:76:89:a4:c9:ed:96:20:d5:08:9f:99:4c:
5a:ea:a0:df:ba:a3:8c:b7:dc:53:ce:f1:52:ff:73:
ac:f6:d1:e3:17:0e:56:91:d1:f9:de:2e:6b:1f:1a:
c3:a9:34:62:9f:0e:2d:0d:4c:ce:26:9f:76:66:f4:
75:d6:ab:f5:02:1c:49:92:ec:8a:77:da:64:a6:95:
54:21:b5:d2:be:47:c8:00:e7:73:fd:90:8e:de:16:
ea:71:aa:2a:a2:52:af:7b:51:2b:63:07:d0:76:59:
8f:a8:d8:e7:28:e2:ee:d0:02:42:38:d6:c1:ae:f4:
b5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6A:34:78:CA:30:5B:2D:45:8F:72:EA:01:45:59:F0:10:07:FA:63
X509v3 Authority Key Identifier:
keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2c:d3:cf:fa:ee:fa:52:c5:3b:03:61:dd:ee:bf:cd:01:00:
78:20:0a:a7:96:c2:d1:2a:4b:39:da:77:be:d3:56:4f:cf:b7:
f9:59:b3:72:59:48:b2:24:bc:66:e7:6d:da:1a:58:fd:b7:69:
b8:9c:e9:34:d4:95:36:cf:87:1d:c6:a8:6a:82:26:e4:a5:f8:
ba:c6:fb:5c:60:bd:a1:ab:24:f0:12:aa:a7:2a:09:cd:a5:4d:
28:6b:ca:91:8d:35:01:5c:8f:11:6d:08:0a:52:5d:9c:5b:e1:
0c:66:87:cf:be:1f:cb:07:b3:5e:c3:7e:14:b1:f3:52:0a:25:
50:85:3a:a3:af:4b:fd:1a:f8:ec:e4:9c:82:d7:b1:8b:92:7f:
62:43:36:5a:b1:2d:75:59:69:62:1d:a1:48:31:06:85:8e:e5:
28:80:50:50:30:ec:1c:79:5e:15:c6:26:51:36:39:92:09:66:
95:88:ad:c8:9d:a9:ae:2f:41:ab:2f:4d:0b:41:fc:ae:82:f1:
0f:b2:3f:05:a8:fa:40:4a:93:f0:b9:0d:46:d1:80:66:7c:03:
3a:98:2e:0b:ae:3b:64:3b:de:b3:cc:44:17:88:80:bd:77:4f:
1a:8f:77:bf:23:86:ad:ac:ba:a5:2e:c2:05:06:94:71:4f:f1:
ba:e7:37:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys67K0JEeKKkvzpjplp4H6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YTRmM2MwYjY2YTRjOTNlODBmZjVmNmQ4OWFkODY3M2U5
NDNjNWYwHhcNMjYwMzAyMDUwMDUzWhcNMjYwMzAzMDUwMDUzWjAzMTEwLwYDVQQD
Eyg3ZDZhMzQ3OGNhMzA1YjJkNDU4ZjcyZWEwMTQ1NTlmMDEwMDdmYTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9h+lkP6Y1t7GSxmRj92w5gYhp1X
+9l6hvpt5BsXaKOls7JFF9/j7G7Q4JDcnppcd5Vn2cJmxhJhQetPb/d7HQ9gD/SM
azHeKqfziC/40ovX2ehqGlxjVpw9wa46JcGMrKJbPMX61LVweNQcEYdFoytGqx1W
Y3Y3srRV42/xenDD7jqceN2OjnV2iaTJ7ZYg1QifmUxa6qDfuqOMt9xTzvFS/3Os
9tHjFw5WkdH53i5rHxrDqTRinw4tDUzOJp92ZvR11qv1AhxJkuyKd9pkppVUIbXS
vkfIAOdz/ZCO3hbqcaoqolKve1ErYwfQdlmPqNjnKOLu0AJCONbBrvS1HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1qNHjKMFstRY9y6gFFWfAQB/pjMB8GA1UdIwQY
MBaAFHSk88C2akyT6A/19tia2Gc+lDxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMt
MmNhNDkyZjZkN2E4LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMtMmNhNDkyZjZkN2E4
LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSzTz/ru
+lLFOwNh3e6/zQEAeCAKp5bC0SpLOdp3vtNWT8+3+VmzcllIsiS8Zudt2hpY/bdp
uJzpNNSVNs+HHcaoaoIm5KX4usb7XGC9oask8BKqpyoJzaVNKGvKkY01AVyPEW0I
ClJdnFvhDGaHz74fywezXsN+FLHzUgolUIU6o69L/Rr47OScgtexi5J/YkM2WrEt
dVlpYh2hSDEGhY7lKIBQUDDsHHleFcYmUTY5kglmlYityJ2pri9Bqy9NC0H8roLx
D7I/Baj6QEqT8LkNRtGAZnwDOpguC647ZDves8xEF4iAvXdPGo93vyOGray6pS7C
BQaUcU/xuuc3tw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:11 2026 by rpki-client