Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: nPEZmNZXCJ598mexVA58crKMHd4PDsrTCbD7HKvXq9k=
Subject key identifier: 5F:BA:9D:EC:A2:80:19:84:DF:ED:B2:A6:E0:A7:EB:BB:A7:53:E5:10
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 019CA9EB807A338861D6BCE563E0059EFFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: 03DD
Signing time: Sun 01 Mar 2026 15:01:49 +0000
Manifest this update: Sun 01 Mar 2026 15:01:49 +0000
Manifest next update: Mon 02 Mar 2026 15:01:49 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: 758vBRXO9fS/uugSIw1bpo5GJl98LnNzBUA4YmuXQps=)
2: WBE9XqEf7MFyalSUqu-vF0MYUwE.roa (hash: dqMxE1BdW8dFl07KbG3IeIB419vd91Jj1Eyr9ex+Uk0=)
3: WBO5Gvlksp1h2Nj2XcuQWgWe3aM.roa (hash: 21Q33n7ktv9Mw0KQGNV5mbgpviM4S02U0e8hX8gzv14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:80:7a:33:88:61:d6:bc:e5:63:e0:05:9e:ff:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: Mar 1 15:01:49 2026 GMT
Not After : Mar 2 15:01:49 2026 GMT
Subject: CN=5fba9deca2801984dfedb2a6e0a7ebbba753e510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:b8:1f:c8:77:de:85:46:33:60:f4:09:e7:
8f:58:f2:33:23:cd:f9:08:fd:67:ab:8d:40:a3:1a:
bc:3d:c4:7c:d4:d3:bb:85:bd:79:1e:88:1d:20:87:
21:c6:59:77:2e:b8:fc:3b:21:c8:27:d3:51:a1:2b:
62:8e:1a:f0:a1:79:01:93:67:65:48:1c:36:d3:f9:
46:ef:79:e3:88:7a:a7:49:58:05:52:c0:90:97:8f:
7a:8e:93:44:e3:ba:86:80:20:03:d7:96:ea:a6:f3:
9a:6b:06:1b:79:07:ee:27:44:f7:9d:13:60:db:02:
27:a9:23:52:4b:1c:b2:f3:af:33:54:97:e8:83:90:
76:02:e2:8e:49:4e:37:41:e4:c0:7c:3b:1a:31:61:
25:9e:a3:f0:13:af:c1:69:b3:3d:4a:07:cc:c8:ea:
94:f9:e5:f9:55:de:c1:0d:f8:a2:aa:b5:97:41:e0:
86:27:5a:48:a4:a1:56:6c:65:11:cc:c6:00:36:96:
f3:e7:46:45:e4:d8:14:bd:45:63:b8:2f:c7:c7:24:
88:3d:2c:01:5d:05:59:91:7a:5e:e8:01:7d:fc:80:
e7:a1:ed:24:96:ef:6e:c3:ee:27:cf:54:fd:cc:0f:
18:13:11:c8:e1:13:b6:f7:d7:3f:df:ae:83:d4:8f:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BA:9D:EC:A2:80:19:84:DF:ED:B2:A6:E0:A7:EB:BB:A7:53:E5:10
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6d:07:c0:9f:4a:64:bd:ce:35:32:23:29:26:73:95:61:5c:
90:e2:55:76:9f:32:22:01:db:fa:31:b2:1b:fc:12:93:2b:0f:
c7:2f:8b:f7:ec:bb:fb:f1:bf:a7:3f:e5:e3:4d:c8:00:c8:3d:
8a:74:0a:01:58:1f:9f:38:29:d9:e4:f7:b1:0e:fd:c3:75:19:
97:fa:93:09:57:54:74:ed:4e:bd:da:2d:5e:32:b9:a8:aa:45:
42:ee:53:e2:b8:f6:cf:03:53:b3:84:1f:98:3a:47:cc:09:d0:
82:82:5a:13:1c:91:f8:81:2b:9f:07:c9:f0:15:0f:54:1b:47:
8b:e8:b4:eb:87:84:3b:44:0a:d4:29:6f:19:c6:0a:93:11:54:
f1:d8:0e:6d:1e:e5:d2:1a:11:83:6f:b1:bb:67:5f:b8:fe:a9:
db:e4:85:a8:eb:97:41:98:6b:cd:26:f5:78:17:30:1a:a1:65:
80:b1:36:b9:4f:92:c2:b6:38:0c:d8:4f:60:7e:c7:68:24:7e:
47:d4:90:76:93:2e:47:23:e1:b7:65:fc:31:a3:da:32:fe:f7:
b7:2d:27:38:c8:63:66:a5:38:14:0f:05:2c:08:40:88:4f:f4:
09:38:76:1e:ed:60:a4:74:3c:39:8d:11:fc:1a:34:2d:ae:25:
b9:21:8d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:39:33 2026 by rpki-client