Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: H3TiRz+cM8XMPCPcjIkvQlecvCQSx4ujfr5NyXT5lIo=
Subject key identifier: 54:86:FB:26:FA:7E:29:B4:72:6D:55:7D:16:75:C3:21:2E:84:8E:50
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 019CAB34606875F065C3EF3EF227F5FE6258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: 05C9
Signing time: Sun 01 Mar 2026 21:01:02 +0000
Manifest this update: Sun 01 Mar 2026 21:01:02 +0000
Manifest next update: Mon 02 Mar 2026 21:01:02 +0000
Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: McLwYkEybIfb5aZa2svxobOR59nmXODljyujKoNmyiE=)
2: elu1abDHd3RfzpApGEKnDnwdAcI.roa (hash: HHOSPK0nfYS+xwtq8H1DXb/qJlWmVpm7P0B6dxlEAcU=)
3: ygV7k6nVaZCAnScNFHt4paZc8MM.roa (hash: Fv0BlTXpeeDK0QHZ/q3zQcl9lKT33vm1AnUd5vQrW08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:60:68:75:f0:65:c3:ef:3e:f2:27:f5:fe:62:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Mar 1 21:01:02 2026 GMT
Not After : Mar 2 21:01:02 2026 GMT
Subject: CN=5486fb26fa7e29b4726d557d1675c3212e848e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:6f:48:af:11:ff:b7:12:71:77:d3:88:0a:
d8:98:f4:5c:e9:f1:b2:8c:ce:ac:83:1d:1a:1c:7d:
f2:50:fe:cf:dd:d0:86:7f:00:95:95:22:3c:c9:66:
cc:3f:49:42:ce:a4:7a:02:38:bc:c8:8f:71:4f:02:
24:5d:4b:a8:69:b5:66:37:47:2e:68:eb:4f:23:ab:
d7:ca:dc:f9:1d:75:7e:8c:7a:b3:02:6f:13:dc:8d:
19:ad:bb:2d:b0:25:f5:e5:97:6c:c3:15:bd:ad:56:
ec:a9:13:a6:57:db:8d:2b:77:be:a9:4a:3b:62:26:
5a:aa:c4:e9:c0:74:50:0a:7d:51:05:84:d4:cd:17:
1f:b1:22:e3:99:13:ce:57:53:d0:04:0f:23:21:2e:
43:53:16:1c:89:84:42:4d:c7:fc:b5:72:27:31:c5:
16:9e:a9:f1:54:fe:56:a0:fe:16:de:ed:64:5c:38:
16:31:8e:ba:c5:d4:91:b6:58:f7:a5:2c:27:2f:08:
61:84:ad:42:67:92:24:f6:db:62:17:72:a3:64:c3:
fe:39:c9:02:fb:48:d0:54:e9:c1:3e:eb:51:8d:6c:
34:cc:90:bb:cf:32:cc:f1:24:6f:36:0f:9c:1a:01:
5e:ed:ae:0a:3b:14:92:57:f0:cd:d0:bc:ae:5e:26:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:86:FB:26:FA:7E:29:B4:72:6D:55:7D:16:75:C3:21:2E:84:8E:50
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:8d:e0:96:e4:82:3c:8f:e1:04:71:80:ff:26:09:21:88:97:
91:25:75:09:61:5b:82:a5:30:fb:50:9f:3f:d0:b5:7f:26:0a:
92:4b:30:fd:ca:5e:12:88:4a:19:c3:6e:2c:4b:73:c3:08:b1:
4f:77:d2:57:f7:11:a8:84:fc:e3:26:eb:c8:c6:9c:80:00:95:
4a:d4:e9:10:5d:0d:89:5b:c5:f2:18:43:2c:c6:33:f6:6c:39:
84:3f:49:d8:d9:c5:a6:0b:1c:a8:01:fc:04:6a:d5:10:32:77:
3a:38:ab:cd:6a:3b:20:a9:03:63:79:98:66:fd:7d:5d:2d:65:
3d:09:50:71:cd:07:af:ad:7d:0c:4a:ec:f6:c5:64:6d:6a:56:
62:f3:89:6e:be:9d:4b:61:db:b4:9c:09:1d:9b:dd:31:73:2c:
bf:37:a5:46:8a:08:51:a6:41:d3:cd:f7:c9:02:d2:84:1c:3a:
38:45:02:a9:d1:9c:b0:92:83:03:91:e0:a6:02:84:b9:f2:c3:
ce:09:a4:c8:8c:d2:24:6b:95:9b:20:b4:e1:ac:e6:a0:66:1e:
94:e2:2a:6d:a9:c0:b5:9b:74:d1:30:03:3e:92:51:ba:76:5a:
84:5f:c7:96:f5:ee:9a:cc:5a:93:2a:b9:28:02:f9:03:b4:cf:
c0:84:93:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:56 2026 by rpki-client