Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
File: dFYQDLNjsOFKnzhOeowc-aO4W_M.mft (raw, json)
Hash identifier: Pf/lMZb87HoX2pP7CIir36m2DSHaBlkFKrgYiU+UI/k=
Subject key identifier: 1F:F2:01:A7:79:79:55:4A:1E:30:BA:3A:E0:74:29:02:6B:19:BE:4A
Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
Certificate issuer: /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Certificate serial: 019CABD8F951FFE2C5083713107CE7C93C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
Manifest number: 1166
Signing time: Mon 02 Mar 2026 00:00:49 +0000
Manifest this update: Mon 02 Mar 2026 00:00:49 +0000
Manifest next update: Tue 03 Mar 2026 00:00:49 +0000
Files and hashes: 1: dFYQDLNjsOFKnzhOeowc-aO4W_M.crl (hash: eHFa1Sekl6ClIcSgAeEgnc+ZTdJbzXYJCIE3Vs09dCA=)
2: wXYslh9daqxVdpjLENOri_Gkabc.roa (hash: 9LvmPHXeSyF1LLUJyo35Xz9ELuGmAcM1NO5fTifvClg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f9:51:ff:e2:c5:08:37:13:10:7c:e7:c9:3c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Validity
Not Before: Mar 2 00:00:49 2026 GMT
Not After : Mar 3 00:00:49 2026 GMT
Subject: CN=1ff201a77979554a1e30ba3ae07429026b19be4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1a:5b:6c:7b:9b:21:04:27:01:98:ea:92:9c:
13:74:a2:67:96:89:14:46:6c:c0:a7:c9:51:c4:db:
26:23:71:49:50:f6:4c:08:9e:23:06:38:2d:78:11:
28:46:a0:57:46:2b:a2:45:e3:d6:6d:31:32:eb:51:
c3:57:f1:d9:7f:da:96:d3:61:be:88:fc:60:00:35:
d1:d4:52:e5:cc:0f:7c:00:24:f2:79:48:e8:ab:77:
24:c8:b5:55:5c:79:4c:6b:56:21:78:56:41:4d:46:
28:b9:df:f8:8f:3e:45:55:96:a3:5c:a4:88:32:13:
5c:93:3d:a0:c2:d7:b8:81:76:f6:0d:3e:03:f5:5b:
d5:be:e5:01:6c:80:47:a3:c5:71:8d:1c:2d:a3:4e:
a8:76:96:d7:64:1a:53:40:b3:e1:21:6d:bf:e7:ad:
30:3a:ea:be:e2:32:2c:ff:c9:f1:e9:aa:75:3e:23:
f9:aa:ab:d2:f2:18:86:c5:b7:c2:25:40:42:f5:27:
ee:55:27:6d:f1:d1:12:65:f0:4d:3c:45:7a:ae:f4:
a5:fe:17:49:9b:ea:12:41:ca:cb:70:6e:31:22:c4:
5e:db:29:6c:d6:bd:88:ca:4a:c8:ed:09:8d:60:ab:
78:f9:0e:13:37:43:a9:57:c3:ea:df:d4:71:73:5e:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F2:01:A7:79:79:55:4A:1E:30:BA:3A:E0:74:29:02:6B:19:BE:4A
X509v3 Authority Key Identifier:
keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e3:c6:66:70:62:07:4a:66:fa:9b:42:b1:67:04:e4:8a:59:
d2:c7:24:b1:f3:76:fe:48:79:a5:3d:f8:99:7e:07:b0:4a:71:
34:75:24:90:2b:c8:e8:0f:5d:96:b0:3c:13:5d:a0:c6:7d:99:
f5:d7:3d:09:a2:a6:c7:8a:28:1c:b1:1b:d0:58:90:92:90:cd:
4a:cf:64:4d:a7:27:e1:ac:c9:f0:cc:79:08:4f:7d:e5:9b:fd:
8f:f9:06:bf:d3:3d:90:33:85:86:57:18:e8:d5:f1:89:7e:21:
fc:2a:16:87:cc:d0:ed:89:28:be:a0:6f:8b:4a:f3:99:21:89:
57:98:3f:87:a2:f2:fa:fb:29:b7:9f:e1:6d:65:64:f5:23:02:
d9:83:5a:f9:a7:c4:34:aa:0a:8d:5f:b8:36:c8:07:c7:cc:1d:
98:01:b5:94:19:df:52:08:ef:1d:10:d0:b9:f4:dd:11:f4:9d:
a7:98:71:eb:dc:9b:6c:24:06:b7:c8:cb:d3:c9:88:4e:5b:75:
94:64:2c:37:33:6a:d0:da:7d:f2:75:e9:8f:f4:a7:80:3f:9e:
a8:9f:b6:ba:d5:db:be:ad:1f:68:5d:22:cd:f2:8d:e4:b6:01:
27:d3:83:39:67:c8:0b:0a:36:17:e6:dc:27:a3:7b:c5:2f:47:
c5:66:0e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:09 2026 by rpki-client