Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
File: dEMndQQU00na3gIjNJfPR2Vc0-Q.mft (raw, json)
Hash identifier: 6SK2Dkdjy6qEpYzIdzweiCT5fd/t6VFNJPraggVvrvg=
Subject key identifier: 76:D9:C8:07:A4:F0:F9:38:0B:44:65:6A:73:6D:67:49:57:29:F4:0D
Authority key identifier: 74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
Certificate issuer: /CN=744327750414d349dade02233497cf47655cd3e4
Certificate serial: 019CACB568610758FEABDB1C6E50C74344B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
Manifest number: 1219
Signing time: Mon 02 Mar 2026 04:01:35 +0000
Manifest this update: Mon 02 Mar 2026 04:01:35 +0000
Manifest next update: Tue 03 Mar 2026 04:01:35 +0000
Files and hashes: 1: dEMndQQU00na3gIjNJfPR2Vc0-Q.crl (hash: 4XaB65DTqf6lnSh54XXKcR9lM/lhCuARR0hrV5BPVjA=)
2: qgoIbqs7ffhe71hmB-z1aOesfwY.roa (hash: unpX7d9a/7Ql3d6uX8FBvvq+RxiOD+GU1AIVMyoQ+QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:68:61:07:58:fe:ab:db:1c:6e:50:c7:43:44:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744327750414d349dade02233497cf47655cd3e4
Validity
Not Before: Mar 2 04:01:35 2026 GMT
Not After : Mar 3 04:01:35 2026 GMT
Subject: CN=76d9c807a4f0f9380b44656a736d67495729f40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:bd:b4:0d:97:42:ea:43:1a:f4:a0:82:3d:
f7:33:f7:17:a9:e1:8a:a0:46:11:84:54:4f:ec:0a:
bf:e1:86:ea:81:4b:bd:87:94:25:25:af:8a:d3:04:
87:1c:0b:d6:35:9e:87:6f:77:90:11:67:d0:40:cd:
08:65:78:31:ff:c1:e3:92:8a:79:16:1e:d9:b3:9c:
89:82:f0:b0:b4:22:24:78:70:36:aa:a6:d8:96:a6:
39:3b:40:16:00:aa:e4:07:7e:3d:ab:d0:fe:d0:a6:
05:83:7e:69:35:c8:56:e2:86:97:0e:f4:27:bc:43:
44:fb:26:be:84:2f:c2:64:1e:29:cf:76:c5:d6:44:
5b:fe:f1:9c:5d:54:16:70:ee:d7:71:8d:ca:c2:30:
98:00:b9:59:c9:57:25:8c:34:8b:ea:5f:b0:4b:15:
29:e6:ff:24:60:b6:00:53:af:69:fb:75:25:e8:ae:
79:84:f6:72:d7:08:59:23:58:c0:bd:71:b6:78:0c:
66:d8:8a:06:69:44:96:13:67:55:4f:74:aa:70:5e:
1f:34:11:c0:a4:91:18:bc:41:89:61:27:aa:1e:c6:
be:33:5a:6b:7c:c7:c2:b1:04:c7:ba:7d:07:6f:ff:
4e:af:eb:cb:08:ac:d0:5a:2e:62:18:76:80:7b:48:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D9:C8:07:A4:F0:F9:38:0B:44:65:6A:73:6D:67:49:57:29:F4:0D
X509v3 Authority Key Identifier:
keyid:74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:87:53:99:50:9e:5b:19:60:70:60:36:79:4d:e9:d4:d0:2e:
98:38:b5:48:76:2d:7b:c9:18:8c:84:fd:2a:ad:ab:b2:b8:fb:
ab:39:7f:48:00:c8:a2:69:10:18:2c:3b:fc:a5:03:10:0c:9b:
f5:3c:6b:70:0d:cb:32:b1:66:ec:ab:04:13:f0:42:2c:ec:1a:
e6:87:ae:af:11:0d:f0:5e:f3:5c:6e:f4:cd:75:b1:20:f3:d5:
66:d0:36:5c:ae:00:d1:61:dc:d1:74:df:a5:98:f8:2e:21:8f:
a0:af:ed:77:e0:2e:f8:5c:ec:a3:9c:c3:e4:da:8c:d1:36:73:
64:7c:ab:dc:fa:48:e8:f2:96:5f:71:cc:7e:bd:c0:01:d8:d6:
a4:67:8e:22:9c:a7:98:4a:d4:6d:0c:18:38:d4:b1:ee:f1:7a:
d4:1e:a8:1d:cd:0d:ee:74:6a:05:74:04:6e:9e:fb:27:4c:fb:
65:ca:6f:d4:8e:aa:76:25:0b:e8:bb:23:e0:0b:bf:96:b2:36:
19:f4:14:b3:8c:46:f6:d8:e3:41:23:8e:cc:24:c2:f1:fe:f1:
52:65:7a:6d:5d:83:90:e5:fa:8c:1c:7c:cd:07:53:05:85:a7:
5f:32:73:1c:fd:bc:8a:38:c0:f9:e4:54:17:29:b4:90:47:a1:
74:62:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:26 2026 by rpki-client