Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: bAuA/ih63SaU27njAF4dH4O775nVDxy6zZPt+HhHojo=
Subject key identifier: AF:FE:2C:FB:07:BD:7E:AF:1B:00:95:86:34:CD:0B:8A:8D:31:66:02
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 019D992B3BC7810F112E64472719406B75BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 0961
Signing time: Fri 17 Apr 2026 02:00:40 +0000
Manifest this update: Fri 17 Apr 2026 02:00:40 +0000
Manifest next update: Sat 18 Apr 2026 02:00:40 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: j74qh0OxMZfNRIhQSUuwsCKadZiKzJZUrlt0gGw2rjk=)
2: qdFP8iSD0Z_J4wvN-DjLd-7BFwQ.roa (hash: 0D/tNJqnYIvzeRQq9p/CHZuxh+SBEqxg5rvNHFpn3cY=)
3: vrCign6erTM1LbQRKP4h0IonXBQ.roa (hash: AQYpWzYbq4r9zz5A/4U8pWZOmJvv2qppgX/OMFbKwks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:3b:c7:81:0f:11:2e:64:47:27:19:40:6b:75:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Apr 17 02:00:40 2026 GMT
Not After : Apr 18 02:00:40 2026 GMT
Subject: CN=affe2cfb07bd7eaf1b00958634cd0b8a8d316602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:f9:ee:4f:3e:73:8b:4f:9e:17:34:d1:80:
55:f0:22:ec:eb:26:3d:52:19:18:4b:63:eb:cd:71:
e5:6f:e8:01:2b:65:2a:d4:6c:bf:3f:4e:7c:ab:69:
5d:3a:be:52:a9:02:9f:d0:b5:c2:1c:41:7c:64:71:
d2:42:3d:ca:12:81:a1:5c:bf:3a:ca:82:6f:9e:0b:
d0:16:c9:d1:63:61:8e:cc:4c:57:06:d3:fd:9e:6e:
53:c7:dd:2f:8a:c4:a4:99:6d:46:c3:9a:ee:bb:76:
4d:a9:46:56:4c:88:2b:a3:a7:e8:b5:b7:4e:b8:e8:
b6:2c:b0:87:31:b2:44:4b:7a:c3:ce:20:ad:70:4b:
b7:29:fd:00:63:a0:43:c7:f6:2f:6e:38:c6:41:86:
60:f7:a2:62:30:29:26:57:cc:d7:d1:8f:d0:f3:84:
cb:0c:bc:fc:00:db:c4:fb:91:c2:64:a0:86:d5:77:
d7:b7:f8:1e:e0:61:1d:05:f0:ed:6b:8a:ad:64:ee:
95:7d:55:a0:1e:ac:99:e4:a2:53:8f:3f:a6:86:42:
3a:c4:b2:ab:91:27:8b:96:b2:59:7b:55:d0:3a:8b:
f8:03:b1:25:0d:20:c6:e4:63:ca:f9:ba:94:ad:2d:
88:6a:9d:06:e4:38:16:b4:56:bd:cb:37:38:0c:9b:
b3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FE:2C:FB:07:BD:7E:AF:1B:00:95:86:34:CD:0B:8A:8D:31:66:02
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:73:f6:ca:fd:b5:84:55:59:e4:bc:6b:2a:2c:c0:88:07:59:
51:3e:26:0d:a2:82:9c:25:0c:c4:ae:3a:4b:06:c0:fe:fc:d0:
4a:1c:06:eb:c9:cc:fe:62:c1:19:04:5c:9f:bb:2e:e8:60:02:
da:d1:3f:ed:de:54:f2:18:4b:2c:16:28:bc:3e:7f:42:3f:78:
57:3c:7a:75:a9:ef:5e:5f:7d:6b:be:79:27:84:0f:04:2f:87:
ea:c6:f8:fd:53:99:32:bb:2f:2a:68:0d:ca:e9:5d:85:14:85:
d4:89:3f:73:45:d4:fe:1c:85:4b:d1:02:68:61:02:e0:b7:26:
7c:4f:80:9a:2e:89:45:ee:d4:b9:df:f6:71:05:35:95:03:90:
53:f2:9f:32:49:4f:7c:cc:7a:3a:36:63:9c:8a:c3:7b:c8:3a:
e6:fa:73:78:cd:08:b4:1a:99:87:68:bc:30:b1:85:13:2c:09:
96:78:8a:de:2e:59:ce:36:34:db:39:a3:da:4e:5b:79:8f:87:
69:b3:5c:9a:65:52:ef:98:1d:29:53:0d:41:33:fe:96:f8:7c:
bb:87:eb:18:ab:0c:55:bb:62:b0:c8:c7:d5:d8:9b:ab:bd:39:
88:84:d6:5a:c7:03:1c:38:0a:ce:63:6f:eb:eb:82:b7:67:51:
c9:e1:57:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:12 2026 by rpki-client