Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: yMufzfTpjtboT2liof1aTID7C8amus1L2hXRkYU3Abo=
Subject key identifier: 2E:33:17:53:52:25:3E:42:B3:C8:8D:D8:CC:1E:92:BB:F1:C1:A7:AA
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 019CA9B3653E92CB176D7BC28169B303B7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 08E5
Signing time: Sun 01 Mar 2026 14:00:32 +0000
Manifest this update: Sun 01 Mar 2026 14:00:32 +0000
Manifest next update: Mon 02 Mar 2026 14:00:32 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: ic6NQsOjAPAwzfZShj3tpVZbQIHy+HqwnWX2r93MRl8=)
2: qdFP8iSD0Z_J4wvN-DjLd-7BFwQ.roa (hash: 0D/tNJqnYIvzeRQq9p/CHZuxh+SBEqxg5rvNHFpn3cY=)
3: vrCign6erTM1LbQRKP4h0IonXBQ.roa (hash: AQYpWzYbq4r9zz5A/4U8pWZOmJvv2qppgX/OMFbKwks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:65:3e:92:cb:17:6d:7b:c2:81:69:b3:03:b7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Mar 1 14:00:32 2026 GMT
Not After : Mar 2 14:00:32 2026 GMT
Subject: CN=2e33175352253e42b3c88dd8cc1e92bbf1c1a7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e2:d0:f0:9a:0e:6a:88:85:88:e1:fd:c9:01:
ca:53:0a:b3:23:11:40:71:c9:a2:3c:34:d5:37:2d:
ad:0b:cc:ff:92:d2:85:6f:1e:7c:bf:1b:9f:fc:86:
93:6b:58:77:af:40:fc:f0:56:ba:4a:7d:f3:fe:5e:
87:76:c7:64:10:eb:83:df:1d:64:d8:d9:ba:9a:d7:
3a:fe:26:65:23:e9:ff:7b:2b:17:5e:9d:61:a3:66:
89:85:6c:98:c8:97:c8:66:c6:9f:f1:76:5e:77:e2:
16:b0:6a:04:a9:e6:64:45:16:ea:b0:e8:ba:91:b2:
d7:84:6d:67:71:c4:7b:07:d9:5c:4a:51:84:7d:63:
9b:73:e6:c8:fa:9c:a4:cc:92:70:2f:35:42:b6:f0:
4d:1b:bf:56:f0:4d:b4:3b:32:b8:d8:35:5f:a8:65:
7f:74:d4:62:b5:02:62:06:bb:04:a3:44:75:3d:45:
76:76:ed:7c:ad:ae:1f:9e:f4:75:c1:0f:93:b4:14:
eb:51:34:df:1f:f4:57:6a:d0:94:89:8e:65:8a:d1:
11:70:a8:f9:8c:4c:cb:0a:40:1b:76:45:3a:0e:8f:
a2:6e:3d:85:7d:46:16:62:31:78:02:84:09:67:31:
6b:d4:93:53:ee:42:48:54:89:9c:dd:6f:2a:ef:ef:
33:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:33:17:53:52:25:3E:42:B3:C8:8D:D8:CC:1E:92:BB:F1:C1:A7:AA
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f2:0e:fa:94:2f:f5:9e:85:41:98:91:ef:b6:7c:f5:41:7e:
8f:87:46:29:2a:13:4a:95:2c:83:a5:f6:be:3c:7b:0b:5f:7c:
46:9e:77:c7:a4:84:03:a1:e8:c0:ab:5f:0f:bc:c2:58:ad:96:
5d:e6:aa:a6:7a:e4:b8:32:43:e3:18:3e:0b:c1:00:74:44:d5:
af:a3:6b:5d:56:50:a7:39:1f:1a:a9:57:79:6f:42:ad:e2:43:
d7:07:f3:af:63:58:e0:e5:a5:b1:b3:7d:76:32:e5:d3:06:9c:
e9:f3:72:f7:d6:06:6b:ba:fc:92:d6:ff:ff:fc:a4:b2:4d:27:
84:b3:8a:b3:2f:95:e9:9f:2a:08:08:37:f0:2d:bb:e9:25:7f:
f7:33:80:4e:0a:4b:49:1f:43:41:96:18:63:5c:a6:3b:dc:11:
b4:6a:3e:d4:5a:3c:a1:da:b2:e8:a0:e6:84:1f:c3:dd:3d:0d:
e3:29:a4:3d:a1:3c:ca:69:45:d1:00:b0:ee:92:bb:fe:15:79:
20:59:1b:77:b2:87:c8:b5:bf:29:6e:f9:a3:41:59:c1:fb:4a:
f9:0f:e3:56:13:4f:de:a7:78:8a:c0:b3:5a:bb:fa:96:75:b8:
fd:78:42:89:a2:8d:88:2e:37:51:e0:14:63:13:85:c6:95:2d:
3f:55:26:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:02 2026 by rpki-client