Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier: HuMK29KhzFeAO9QniZvbwK0Gf9PiMkWg8T94ejc8fZU=
Subject key identifier: CD:E5:59:CF:74:C6:A6:A3:BD:9E:A1:02:04:90:A1:71:B7:54:5B:A1
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 019CAA590F38C9CC908FF021F89E70FC153F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number: 08F7
Signing time: Sun 01 Mar 2026 17:01:29 +0000
Manifest this update: Sun 01 Mar 2026 17:01:29 +0000
Manifest next update: Mon 02 Mar 2026 17:01:29 +0000
Files and hashes: 1: RirrsvwYX5j7L-75yH60raw263E.roa (hash: IOJ4XETq/n9kBBATZy+5z0L1BPBp5v7kLy/O5w5iiLM=)
2: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: YEf/+XHzXS8lpbyInZoqUI60DHT478IdfsSbPUBNUxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:0f:38:c9:cc:90:8f:f0:21:f8:9e:70:fc:15:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Mar 1 17:01:29 2026 GMT
Not After : Mar 2 17:01:29 2026 GMT
Subject: CN=cde559cf74c6a6a3bd9ea1020490a171b7545ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:f0:ca:af:0c:e4:d7:02:74:20:2f:11:54:
be:1c:22:65:2e:32:1c:f0:60:c1:d5:19:26:eb:0b:
b5:a9:91:61:42:a5:67:80:27:67:17:44:e7:c4:d4:
8f:2e:5f:be:ad:dd:fd:b0:5a:56:31:da:2f:3c:86:
74:16:f5:83:fa:ea:86:80:dd:ce:fc:4f:ef:28:70:
41:54:4e:f9:9c:95:93:e0:30:c7:59:e5:a7:e7:01:
58:0a:aa:57:ae:d2:77:3c:ee:f6:f0:7f:88:57:98:
90:22:49:c3:b7:b5:88:c3:3b:e3:67:1a:94:68:3c:
ab:41:57:95:3c:7a:09:36:f2:7a:22:ca:5f:08:d9:
5b:c2:e8:1f:ed:78:9e:77:3d:e2:3a:0f:ea:a5:20:
dd:34:da:cd:b9:66:2f:da:8d:51:d1:08:31:ae:8a:
bf:c8:e7:37:3b:60:ab:fc:97:28:66:2a:6d:76:4b:
7e:a9:60:c7:0f:40:b6:11:c1:54:88:a9:a2:19:1b:
94:43:a9:e5:38:1e:59:65:2e:6f:9f:a6:ac:59:52:
6b:61:bc:a0:33:36:88:36:85:88:26:13:9f:07:a9:
37:8d:a8:2c:f8:06:b7:f5:cd:ff:1d:1b:cc:f6:07:
67:b6:29:50:ae:bc:9a:d6:1b:b7:53:d4:14:cf:ed:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E5:59:CF:74:C6:A6:A3:BD:9E:A1:02:04:90:A1:71:B7:54:5B:A1
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d1:3a:f9:24:c2:5e:d7:9f:53:c8:22:b4:49:df:ce:d2:de:
8d:5c:e8:9f:57:e0:21:ed:55:e2:d6:95:ff:36:9e:59:88:46:
57:e1:d6:fc:55:6e:7a:b9:87:e3:42:2b:f1:01:40:e4:44:30:
85:37:bc:d1:f5:dd:36:6c:28:9c:88:fe:16:87:a7:57:60:60:
07:95:22:ad:21:27:52:eb:c2:3a:76:1b:84:b0:62:d8:ed:ae:
f9:01:93:d3:5b:5c:1d:ff:00:76:9c:a9:9d:ea:b4:a1:d2:88:
5f:56:6e:76:05:05:1b:22:40:cd:f1:da:cd:95:38:69:5d:ea:
e0:d5:1b:0a:1f:d3:96:54:e3:3a:82:e6:57:39:00:b1:cd:30:
fe:95:ad:80:0f:db:58:16:4d:b5:c1:d8:ef:78:9e:89:d2:db:
e6:82:9a:b9:e5:a3:3a:f8:bf:4c:84:be:91:01:e7:1a:cc:03:
be:a1:4d:6a:96:b8:76:f3:6f:f7:a0:4b:a0:c9:05:aa:24:bd:
ac:fd:ca:63:27:a0:06:cd:ea:ba:73:31:b7:5d:6e:20:a4:e2:
5c:f7:35:5a:22:71:df:c3:e5:de:82:a9:f3:88:fe:34:67:e5:
39:27:a2:38:2f:9f:e5:7a:88:dd:9f:64:94:6c:10:e9:13:77:
cf:cb:0c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:18 2026 by rpki-client