Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: 7EuleI7GOA2y+0cciPO2DrhEK+UXVEYc1+QCk6pe0PI=
Subject key identifier: 84:7E:A6:6E:B9:D2:00:1B:3B:40:1C:2C:08:F9:BA:1E:11:53:A2:42
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 019CAAFD4F29E78BE8C4ABB51794CFBC0E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 166D
Signing time: Sun 01 Mar 2026 20:00:53 +0000
Manifest this update: Sun 01 Mar 2026 20:00:53 +0000
Manifest next update: Mon 02 Mar 2026 20:00:53 +0000
Files and hashes: 1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: EkDbbGY3eF+x4aWYCvD9EDERJ3cpBURLSYqu52nVCGA=)
2: r51G36-SetuHZD_3jiNwB4dx7Wo.roa (hash: V4MD7ZgRQakaXzVvC+xHIbnQN7EcZaGY5X7pj9GMtGk=)
3: z9mvcCRCkYuHKKd00BlCEYA9eQU.roa (hash: mRPfZgnI9elFYBzB1KqCj8Oo2adMJczMgSykoYWKKi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:4f:29:e7:8b:e8:c4:ab:b5:17:94:cf:bc:0e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Mar 1 20:00:53 2026 GMT
Not After : Mar 2 20:00:53 2026 GMT
Subject: CN=847ea66eb9d2001b3b401c2c08f9ba1e1153a242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:c2:e2:ed:ff:0e:d1:2f:25:87:f4:94:3f:
1b:e7:67:c5:63:6a:e3:9b:d1:64:dd:b1:92:d4:eb:
cd:21:53:aa:a9:5b:d6:c8:4a:b5:30:3a:34:a1:b5:
91:76:44:e1:65:85:18:69:42:e6:19:6d:43:f5:df:
af:c3:8a:3f:2d:1e:bb:06:4b:e3:9e:7c:e8:bd:1d:
f1:aa:78:c6:c9:3c:5f:0a:70:77:54:1b:43:af:09:
f9:2b:2f:8c:8f:76:ab:b8:fd:44:dc:65:a3:7a:ee:
c3:92:34:ad:75:3e:04:a9:4b:de:be:f9:6d:be:d0:
2e:fb:e6:28:76:df:0c:d8:1b:d9:4e:ee:fd:f9:9e:
b0:d2:a3:d6:06:d5:a8:ea:69:00:84:52:99:0b:00:
cb:67:0f:8a:f4:42:39:1f:08:26:f4:f9:20:87:b7:
a2:62:e0:4f:4b:99:98:46:c3:75:46:3c:36:57:17:
45:8d:89:bb:ab:b1:ba:3a:f3:b7:48:36:8a:2d:0d:
6a:48:d9:b4:a4:04:94:71:2b:a9:af:de:b8:97:f1:
14:58:bc:e4:88:bf:19:4d:cd:89:00:28:73:f5:f2:
3a:db:48:06:a8:4b:cd:e4:e2:9c:49:60:8a:b1:82:
62:f8:16:b2:2c:e3:1d:01:c8:ba:d2:73:f8:4b:bc:
d5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7E:A6:6E:B9:D2:00:1B:3B:40:1C:2C:08:F9:BA:1E:11:53:A2:42
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c9:3a:66:23:b3:0a:f8:6e:da:ff:d1:a2:90:18:2e:ee:35:
2e:d8:a1:4a:49:b8:43:bb:02:61:8c:2c:83:76:26:ce:79:66:
e8:37:c9:49:15:8e:02:c9:41:06:9d:82:36:2a:07:8e:e5:c3:
e9:6e:66:d3:fe:1a:55:bb:e4:7b:b7:16:97:2d:8f:3b:2a:9e:
f8:00:1f:3e:64:4a:9f:a9:89:7d:56:eb:15:df:50:00:44:c9:
92:a0:07:da:f9:f1:67:48:f4:ad:ab:c0:75:2c:97:41:68:ee:
69:09:a2:90:11:78:62:f9:08:d3:f5:7f:67:f7:26:66:ec:b2:
26:34:40:1f:e5:f2:00:f4:01:01:8a:c9:e1:d0:fa:dc:de:ae:
c8:ca:79:0c:5d:ba:de:54:42:77:77:3d:21:20:57:25:6c:30:
57:fb:7a:e3:ab:81:a7:8a:08:04:0b:cf:9d:91:dd:b2:f6:28:
ec:38:84:18:40:04:9d:23:41:3e:16:eb:22:ea:a1:cd:45:76:
31:e2:08:37:c6:93:30:94:db:c2:89:7d:5e:88:4f:80:89:d8:
ad:a8:32:3e:88:5e:e1:71:ba:78:2f:b8:8d:20:d4:a9:ba:92:
79:d4:1a:c2:ef:ae:f5:68:55:5c:90:cd:66:ab:c0:bb:3c:c0:
17:18:bb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:44 2026 by rpki-client