Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: LfyphOpRb1Ipyx8KCR28kfg9uXMNLXrpQcJA05n9GjY=
Subject key identifier: E6:66:D6:99:26:17:3B:C3:E2:C4:63:63:02:D9:D1:61:19:91:03:BE
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019D26964F38715518C6C0B97044F911507A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 1409
Signing time: Wed 25 Mar 2026 20:01:17 +0000
Manifest this update: Wed 25 Mar 2026 20:01:17 +0000
Manifest next update: Thu 26 Mar 2026 20:01:17 +0000
Files and hashes: 1: TFxdoaquIqH8vE1G0TfbaVcQfgc.roa (hash: XpBekycJaRcqmL/FgQfs6y2tHkUUKGYjMMHdix7FSFw=)
2: ZigwfFDMTq9p3ufVtUZkAGSvOE8.roa (hash: hCk1IHYdcTCr5kX9GXFGk1z+A8RaamqdMUb21r4V0lQ=)
3: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: a/hdzo804FHrV2Q05VZgo0Dln+a1kTBkfGhQArapsok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:4f:38:71:55:18:c6:c0:b9:70:44:f9:11:50:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Mar 25 20:01:17 2026 GMT
Not After : Mar 26 20:01:17 2026 GMT
Subject: CN=e666d69926173bc3e2c4636302d9d161199103be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:d0:c9:02:33:f9:a1:c0:f3:69:38:85:22:
13:c8:d3:9b:7b:6c:ec:45:a0:86:38:0d:9b:86:bf:
b4:b0:5d:ad:5d:84:77:d9:50:7f:36:2e:cf:a3:e9:
9a:82:10:c2:9b:3d:df:bb:76:f5:c9:e7:cf:f8:67:
4b:72:89:e7:4d:83:a5:f1:72:b5:9a:11:ae:6e:7d:
41:90:d3:cc:b9:50:20:0d:4a:76:4b:bb:31:d6:d4:
4f:e6:1d:e9:19:7f:06:36:a2:b2:58:a6:d3:48:e7:
d4:b3:f0:95:e5:9c:fe:dd:4f:b8:71:2e:68:84:17:
d4:9c:ff:36:4d:3e:fb:73:d7:80:68:d6:30:00:e9:
99:4d:f4:32:9e:27:2d:65:40:7c:02:36:c6:61:65:
a7:d2:e3:00:63:88:13:5c:3a:8e:02:2f:08:8e:25:
6d:3d:8e:aa:1c:10:38:52:c7:44:1a:30:92:37:1e:
b8:09:40:0c:1e:65:be:48:34:10:92:bb:ef:4b:dc:
55:df:d8:bb:78:02:5b:ff:d2:11:f1:f8:32:88:7a:
c6:0e:79:1a:c8:80:a6:eb:46:6a:05:b8:ae:8f:37:
71:08:28:ed:1d:93:b6:98:14:75:aa:0d:c3:96:2e:
b1:89:0e:a0:a9:a3:09:70:0b:57:6b:b5:2c:4d:71:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:66:D6:99:26:17:3B:C3:E2:C4:63:63:02:D9:D1:61:19:91:03:BE
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d1:b5:f8:54:84:6f:9a:9d:9f:29:0a:80:c9:cf:f2:6f:68:
a2:bf:b0:9a:52:82:64:24:53:02:04:23:55:2a:19:29:93:4f:
5b:50:9a:64:2e:bb:53:4c:a4:58:ae:fe:a1:89:00:56:47:2b:
48:ab:87:b4:cd:56:e6:d3:e5:0e:1b:61:e8:9c:f7:77:ff:df:
57:ae:f1:10:c9:8b:ac:8a:91:d9:c9:08:3b:58:0f:7b:cf:7e:
e4:9e:88:73:4f:02:90:4a:be:0f:0d:47:e8:80:78:bc:bc:24:
cc:34:bd:d4:fe:f4:9e:57:d7:b3:37:ef:14:b8:f7:0a:61:d6:
b2:18:35:d1:ff:24:19:b1:86:67:06:db:20:96:b5:96:14:12:
78:4a:24:e0:de:84:6e:18:c5:c0:33:85:ba:7b:df:a9:dc:ee:
3c:f1:70:a1:f4:18:77:ca:b8:53:b5:35:86:da:1f:b1:cf:17:
e6:43:8d:7a:1c:a9:63:06:15:ca:e3:c4:cd:74:7c:3a:e7:26:
e3:7f:83:de:40:01:6c:66:c5:68:34:65:94:6a:8d:40:e1:3f:
ee:79:e1:71:24:b1:77:52:21:2d:c6:f7:7b:21:31:fe:78:05:
36:30:b5:c9:76:40:d4:4f:93:7a:c8:5e:c5:64:a3:19:c2:bf:
be:28:9f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:27 2026 by rpki-client