Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: Ig49orTTP8BZ+hdDmUicmYK9vmrEWb617W85AFcq/6E=
Subject key identifier: F4:9F:42:2E:74:66:06:5B:81:2F:B4:CC:E2:D6:6E:20:27:65:21:80
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 019CAAC61B42182A91D12EF4E76FFA6A1CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 18CA
Signing time: Sun 01 Mar 2026 19:00:35 +0000
Manifest this update: Sun 01 Mar 2026 19:00:35 +0000
Manifest next update: Mon 02 Mar 2026 19:00:35 +0000
Files and hashes: 1: aTug7YNO613h0EdhaVanobAofs4.roa (hash: JO+eAjDs3aZGB9gkmGCHWKFzmsIX3/pwIhE/HLe+REE=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: PPpVxC8P5Y+fIR1gDHkZmDJ+vBjDtlHV5y1m0V0g6WM=)
3: tZk_CaKCryAvJRReN7aPc9CJl5Q.roa (hash: GDF5SYSr5M1uY12BBc2vpgU4RwEGW3L9n697ONqnZ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:1b:42:18:2a:91:d1:2e:f4:e7:6f:fa:6a:1c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Mar 1 19:00:35 2026 GMT
Not After : Mar 2 19:00:35 2026 GMT
Subject: CN=f49f422e7466065b812fb4cce2d66e2027652180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:37:b4:27:1f:bc:9c:00:45:92:2c:32:03:
af:52:d4:7f:3b:48:19:1a:6e:9c:db:76:a9:0d:0b:
47:27:fc:09:5f:db:9b:07:02:d9:8a:01:94:a5:f0:
51:0d:0d:80:90:5f:63:22:32:29:a2:03:4b:70:88:
11:f9:3d:13:25:80:ef:47:6e:e7:6b:20:76:1e:a2:
20:59:cd:bf:77:f9:6d:a3:07:b9:d6:0d:34:47:d7:
c2:30:4f:ff:12:ce:8d:fb:f5:2b:0a:0c:5c:54:02:
16:9a:a6:e8:37:0f:df:f7:50:02:ae:e3:a5:bb:1c:
50:c0:a9:26:4f:62:03:40:d3:57:6d:0d:77:77:93:
0a:d4:05:49:ef:f4:a9:b6:58:05:0a:76:e8:b8:92:
cb:f7:d5:27:7a:3b:aa:e5:19:26:73:ef:bf:2c:17:
a3:0d:81:66:46:bc:af:1a:09:c4:6c:b7:4a:02:1f:
64:16:41:65:b9:1b:99:a0:c7:15:79:6d:0f:d7:0b:
1f:4e:da:be:86:cf:e4:76:7d:7b:f6:36:63:e9:d8:
e8:e4:23:80:f3:d6:0a:6e:ff:6b:e6:71:41:04:ff:
a1:ab:cb:69:a1:6a:80:4b:a1:74:90:67:d0:f7:ee:
57:ae:73:aa:d4:48:93:0e:7f:14:5e:2c:24:fc:7d:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9F:42:2E:74:66:06:5B:81:2F:B4:CC:E2:D6:6E:20:27:65:21:80
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:17:5a:5c:e5:e7:6d:16:b4:a9:34:c9:4e:b1:70:ae:4e:3e:
37:93:03:1e:38:98:a8:f6:d1:68:70:c0:05:05:58:62:de:44:
85:7e:ba:46:e3:99:22:10:fc:6a:c6:d7:06:f7:c4:b9:b8:c2:
c6:ed:e0:ac:70:84:d0:38:d6:c8:b0:45:ea:27:6f:c4:71:bd:
20:68:f5:64:13:ca:0c:d6:76:2f:bd:ae:c9:c2:a7:95:ba:bf:
00:2e:a1:a5:c0:ba:fa:42:63:06:dd:67:9a:80:47:ce:59:71:
49:31:86:82:a6:18:1d:97:37:c6:ad:79:aa:60:71:8b:70:59:
5e:14:56:29:66:04:47:4d:07:8b:d3:11:48:41:05:8d:29:a0:
74:bf:7b:81:29:f8:8a:51:4e:38:35:04:65:91:78:38:5e:78:
49:ea:4d:d0:42:49:fa:6f:f2:2b:44:82:f0:d0:d5:c7:68:a2:
37:ce:30:2c:09:d1:69:3c:00:9c:8b:c6:6c:67:02:fb:c7:00:
96:c3:8c:f4:48:ac:d0:19:9f:d8:55:54:c5:f1:bb:9f:bd:9c:
8c:f6:6b:fb:17:e4:11:fb:e8:eb:84:17:e1:48:da:e5:9c:8e:
7a:38:47:bd:53:0f:ad:2d:2c:a0:19:2b:a6:d0:b2:9b:6f:fa:
89:76:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:55 2026 by rpki-client