Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: cPefPEbsd2K9pqFZJlCP8rCz5ONjMFBzGWW3a3ZhBrI=
Subject key identifier: F4:F9:28:81:E6:F2:CF:1A:46:F2:42:F7:35:42:22:42:C6:E0:7F:C4
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 019CABA1E176A673F4D83EB54646B5340A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 23:00:38 +0000
Manifest this update: Sun 01 Mar 2026 23:00:38 +0000
Manifest next update: Mon 02 Mar 2026 23:00:38 +0000
Files and hashes: 1: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: H3iWL3/x+S2HNj88F+oooe72L0uluGiV1LLIVUKPfa8=)
2: g7fYHM51W9swYseMkrEDa3soWXY.roa (hash: k9K4BHL4fbJsHQSn19Joe+3Hon27U4MZ6GclcBUO56E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e1:76:a6:73:f4:d8:3e:b5:46:46:b5:34:0a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Mar 1 23:00:38 2026 GMT
Not After : Mar 2 23:00:38 2026 GMT
Subject: CN=f4f92881e6f2cf1a46f242f735422242c6e07fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:f9:9e:89:5c:1f:28:b9:35:a5:b6:71:6f:
38:3e:68:c2:e3:26:19:56:2a:bf:77:2d:0b:41:65:
cf:b3:cd:eb:97:12:38:5e:2e:82:3b:45:18:7c:e6:
2b:92:c5:36:24:03:cb:cb:b0:21:eb:b5:b4:8c:1c:
14:bd:ca:64:9a:26:20:a0:1e:45:a3:76:da:2e:dd:
60:a1:8e:7d:31:a9:a5:10:a8:ad:a0:d5:4a:b9:4e:
8a:88:d1:3b:68:a5:2b:ab:5a:de:06:58:03:36:19:
cc:8f:d7:59:04:43:b6:e4:db:a2:e9:8f:fd:b0:a2:
bd:a0:d6:b8:f7:0b:88:46:51:34:77:5d:03:f3:f9:
7f:c2:d7:0c:a5:16:9c:38:99:05:65:8c:e0:18:ad:
7a:1b:0b:14:1a:fb:e4:de:0c:69:d7:23:94:2d:16:
7a:7a:8a:70:e4:45:0b:b6:c6:51:fe:ca:62:6b:fe:
03:54:20:49:a8:86:53:a6:cf:8c:1f:72:36:18:4f:
46:b2:84:39:a3:9e:25:0f:57:ae:f2:d1:1f:81:53:
d3:31:6a:6e:c4:69:65:c0:b0:65:1c:cc:d6:e8:33:
12:45:2c:bf:bf:27:12:02:5c:1a:5c:ab:01:d7:f7:
b0:ad:b3:c5:0e:0d:17:bb:3e:7e:70:83:98:b0:11:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F9:28:81:E6:F2:CF:1A:46:F2:42:F7:35:42:22:42:C6:E0:7F:C4
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b8:ef:18:5e:15:08:60:a0:a3:55:03:28:d9:c4:40:00:8a:
85:37:12:30:16:31:03:54:f8:b8:71:9f:2e:1b:fe:d3:18:80:
7a:24:2e:3f:69:a8:d9:ed:22:71:25:24:a9:b8:ee:11:d0:54:
5e:3f:48:d1:04:bf:b1:2c:bd:4a:fc:78:e4:31:6c:75:e9:11:
b7:ae:13:3d:f3:fd:49:fe:24:30:da:f5:50:e3:a1:f0:49:29:
e2:46:ed:a8:0c:d4:37:96:0a:01:f4:fb:6a:3b:e8:1a:83:e4:
6d:c1:13:37:5b:0e:23:be:9d:f2:ef:50:50:0b:67:2a:6a:5d:
b4:ca:1b:71:d5:8b:66:4f:e3:34:78:05:48:c5:4e:6a:62:e0:
22:49:9f:f7:13:46:4d:7b:0a:d7:f9:e7:7a:54:fa:0f:2a:f8:
ed:61:4e:09:2e:d2:9d:63:a4:d4:b5:6e:7c:6d:9a:4d:92:c0:
37:94:26:b9:d4:c2:e6:77:a8:22:09:b3:2b:1e:8f:72:27:c2:
d0:7a:a4:16:36:51:8e:d7:e5:dd:dc:4b:12:39:96:4e:7a:f5:
bd:73:d7:ef:02:52:c8:3a:f0:7e:0a:65:ba:cd:91:f5:d5:fd:
dc:e3:89:f4:3b:83:50:74:4c:fc:de:14:59:da:a4:12:44:21:
b6:43:b3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:35 2026 by rpki-client