
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
File: dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft (raw, json)
Hash identifier: L1Tw+VVuBirkoabmEy3wEKK30xZCzBllY1E0Xb+anhg=
Subject key identifier: 99:AD:E5:A5:CC:BC:57:FF:FD:3F:CB:1C:66:B6:4A:85:6D:56:74:BD
Authority key identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
Certificate issuer: /CN=749ea3b1e58ba060b41fc2a078f6016264759664
Certificate serial: 019CAB34444A121D2F5B4F1A53706BF1D520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:55 +0000
Manifest this update: Sun 01 Mar 2026 21:00:55 +0000
Manifest next update: Mon 02 Mar 2026 21:00:55 +0000
Files and hashes: 1: dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl (hash: 5HQfRw1QAkCTAhlirNmvidmE+JepXGAPwtMa8azqo4s=)
2: kVHOrLRn8dYHPF-qShmVfrIGZWE.roa (hash: RBY+pXDY3wuZ3UWMC49u2LOFQA3uX8fBCHLmuTx0kas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:44:4a:12:1d:2f:5b:4f:1a:53:70:6b:f1:d5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749ea3b1e58ba060b41fc2a078f6016264759664
Validity
Not Before: Mar 1 21:00:55 2026 GMT
Not After : Mar 2 21:00:55 2026 GMT
Subject: CN=99ade5a5ccbc57fffd3fcb1c66b64a856d5674bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:38:2f:8c:0e:65:43:ef:2a:e7:68:51:3e:
8d:5a:56:a7:0f:53:ba:5f:6a:2c:47:52:83:fc:24:
a5:15:c1:13:5b:b4:c5:24:7b:f1:27:aa:88:07:ab:
e4:1e:21:e8:7f:d1:d2:26:5f:c0:66:f9:b2:60:d2:
5d:f2:1f:17:cb:d7:af:7e:a8:9b:fb:26:96:98:01:
d5:18:35:96:ff:54:e8:9b:4f:5b:a4:e4:d4:03:46:
47:06:25:65:06:5b:c6:ea:8a:2a:99:cb:3f:04:48:
f3:e8:41:e3:cd:1b:81:89:7c:3b:e9:90:ae:0f:44:
e0:5c:a7:2e:3b:30:cf:0b:70:1a:21:78:39:5d:35:
bc:a4:4d:f6:66:18:c7:89:85:95:b4:64:c0:69:75:
10:be:56:b4:0f:0e:80:fb:fe:41:74:7d:bb:bf:ad:
7a:6a:48:1e:fd:db:1c:ae:08:ce:72:24:9c:52:6f:
12:3d:94:64:4e:74:a1:6a:33:82:f0:33:11:bd:da:
51:4f:ce:7a:52:04:4d:ca:9f:25:87:62:43:f4:9f:
85:dd:11:01:e0:68:29:32:db:ae:17:e0:c0:7e:bc:
92:70:d6:52:c1:cd:d4:b3:e6:80:ab:8f:c3:5e:30:
80:b0:dc:bc:cc:4c:68:32:fa:eb:06:72:c2:fb:dc:
4b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AD:E5:A5:CC:BC:57:FF:FD:3F:CB:1C:66:B6:4A:85:6D:56:74:BD
X509v3 Authority Key Identifier:
keyid:74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f2:be:87:be:9d:a3:f0:dc:a1:1a:d9:d8:49:b0:73:92:e2:
c6:04:83:63:9f:6c:c1:0b:18:87:d2:94:17:e9:31:ec:6a:89:
94:7a:bc:52:eb:64:4d:e8:1d:48:fc:f4:8b:51:98:00:06:06:
18:12:2e:79:98:fb:d2:45:3c:59:94:37:38:d8:fa:5f:9c:ff:
03:b1:52:0a:6b:40:ad:d2:5b:a4:12:32:31:79:5e:c3:75:79:
92:aa:6d:cc:2a:35:9b:a2:01:e7:69:e1:be:27:cb:cc:cd:84:
0b:67:78:53:32:ac:73:87:da:53:38:d4:35:62:4a:74:35:6f:
9e:6d:40:d7:3f:f0:06:99:3f:ad:96:f3:c1:71:c9:5f:33:45:
f3:9c:10:a6:b4:7a:48:ba:70:9e:0f:0e:2e:91:36:40:4f:6c:
e4:4e:fc:27:3b:51:59:5e:8c:50:65:d9:ca:16:fb:87:a0:00:
19:b6:21:a2:ff:35:b2:ba:95:d3:cd:19:8e:d6:87:80:16:bc:
22:57:94:15:07:16:a6:b7:94:00:22:0b:c0:cf:56:50:9a:51:
1b:50:d3:04:f8:79:9f:5a:b8:36:df:2c:c0:dc:27:48:70:52:
20:e4:85:91:7c:87:24:b9:5a:62:15:86:25:77:93:3c:8d:99:
3c:6f:8c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:27 2026 by rpki-client