Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
File: dXFLWBraGW41UcCM52JDvgWLROs.mft (raw, json)
Hash identifier: f2ysDqZ08uC5qulOQBZPzGZvOF9DNOjYu9kuZfB08vo=
Subject key identifier: 68:87:02:FB:E7:AC:AC:0F:03:33:61:97:93:68:CD:0C:5A:69:00:7B
Authority key identifier: 75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB
Certificate issuer: /CN=75714b581ada196e3551c08ce76243be058b44eb
Certificate serial: 019CAE35793C9042D0BE2387AEFD76525995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 11:01:05 +0000
Manifest this update: Mon 02 Mar 2026 11:01:05 +0000
Manifest next update: Tue 03 Mar 2026 11:01:05 +0000
Files and hashes: 1: 6TGqIbfBirKwY8Rk6PCVIU2K2Ks.roa (hash: Qk1RBNZJLMvjKgF43IlbWL77De/BDCbxdLr5OTm2nJA=)
2: dXFLWBraGW41UcCM52JDvgWLROs.crl (hash: PTGftrEcJ33y4HHJJHADr04bItQqFpUvOtAgfW+o1f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:79:3c:90:42:d0:be:23:87:ae:fd:76:52:59:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75714b581ada196e3551c08ce76243be058b44eb
Validity
Not Before: Mar 2 11:01:05 2026 GMT
Not After : Mar 3 11:01:05 2026 GMT
Subject: CN=688702fbe7acac0f033361979368cd0c5a69007b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:35:58:cd:37:65:bd:a1:00:24:59:2a:00:cd:
cd:42:47:35:2f:ed:dd:e4:0d:f7:39:8a:b7:93:27:
e5:ca:91:67:9d:aa:57:fc:c2:21:06:c8:30:73:28:
75:bc:6a:f7:90:f6:60:dc:a2:ca:0d:24:7b:ec:ad:
f1:db:df:99:2b:2a:56:3a:f0:82:56:05:e7:76:3a:
ac:9d:e0:7d:a6:0a:ce:5e:3d:97:ad:af:f9:a7:5e:
b9:41:aa:aa:73:40:ae:ad:e8:85:2a:19:1e:b7:a1:
bf:20:ca:79:f6:dd:fe:aa:d6:c1:45:ec:b4:51:f9:
e1:e5:12:61:d0:ab:1b:6d:ef:a4:ab:c1:d0:15:2f:
39:8b:d8:fe:d5:b2:d7:a7:7d:63:9d:53:8d:95:e3:
7e:e4:1e:ff:bd:8b:10:0d:12:48:f6:c4:7d:3f:22:
24:b9:3f:db:24:73:81:d3:e5:13:75:05:98:73:9a:
55:39:fe:bc:95:d4:84:8b:cb:9d:b7:ec:82:cc:44:
44:f8:0f:1e:03:69:d2:92:f3:83:6f:f4:c5:b6:3b:
03:08:08:70:03:6f:52:f1:5c:c8:55:28:55:38:dd:
dd:7a:42:58:42:80:c8:e4:33:13:87:0f:17:80:ef:
36:b8:b0:35:25:2e:12:38:98:cb:a5:ae:03:24:5a:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:87:02:FB:E7:AC:AC:0F:03:33:61:97:93:68:CD:0C:5A:69:00:7B
X509v3 Authority Key Identifier:
keyid:75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c2:03:56:ed:23:0e:12:f0:5f:cc:8b:28:2d:67:3d:d5:8e:
8d:0f:27:6f:6c:70:51:11:68:04:bb:1d:7c:53:d6:2c:0f:91:
fd:f3:3d:c0:c5:85:09:ed:26:80:87:c2:2a:d7:14:66:fa:d3:
54:b7:6a:ec:ba:81:28:31:d2:b0:39:f1:dc:04:da:ff:0b:0b:
ed:43:87:34:35:a1:ee:ba:e3:a2:88:b3:22:66:16:b2:5e:9d:
d5:0c:bb:ff:f3:3b:78:cc:e0:fd:d0:24:39:02:ad:d4:89:26:
cd:74:ce:86:29:ed:a1:1c:59:eb:e0:af:9f:44:72:7f:83:f1:
74:f0:93:d7:2e:a2:99:1c:c4:f6:da:4c:d2:9d:55:3d:65:0d:
c7:c3:bc:06:28:bb:d9:a2:3b:b1:a1:9a:d6:0c:56:89:78:9a:
43:92:a8:3e:00:ab:25:6e:b3:01:74:fd:b6:e4:1a:b4:7f:4b:
a8:26:c8:73:80:f3:f6:02:6d:e4:b6:b7:44:f8:6e:d2:92:61:
01:b7:93:c0:64:66:fb:02:ff:46:67:cd:7d:ca:ee:c6:bf:83:
80:79:88:ad:3e:be:3a:59:78:f3:a9:4b:f8:f3:19:b3:1a:f3:
b9:00:a8:ca:c7:a4:6e:6d:eb:23:eb:3b:8c:2b:e2:6e:84:ee:
0d:af:f8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:40 2026 by rpki-client