Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
File: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft (raw, json)
Hash identifier: E4Dp56lJmsqbfoIfOJSmPCYLOQp4FtVdf4qMwaznyaA=
Subject key identifier: 74:FE:65:6A:76:87:3E:B8:86:CF:AA:EC:23:23:E3:59:EE:3F:9C:42
Authority key identifier: 76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
Certificate issuer: /CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Certificate serial: 019D2A3C2B64E421CF91875718D61621577B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
Manifest number: 04F6
Signing time: Thu 26 Mar 2026 13:01:19 +0000
Manifest this update: Thu 26 Mar 2026 13:01:19 +0000
Manifest next update: Fri 27 Mar 2026 13:01:19 +0000
Files and hashes: 1: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl (hash: dg/70T99bhP1TXuOQvMviSV6B7G/0mvlwa4P9J4dEQ8=)
2: kmwS9zp0FNoIdCYHmD7lEmcie3Q.roa (hash: dnAyHkLRkKFButzzN0BFh8XkXJNa+fP4jBji3sBqddo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:2b:64:e4:21:cf:91:87:57:18:d6:16:21:57:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Validity
Not Before: Mar 26 13:01:19 2026 GMT
Not After : Mar 27 13:01:19 2026 GMT
Subject: CN=74fe656a76873eb886cfaaec2323e359ee3f9c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:75:b4:4f:e5:c4:80:99:47:73:82:05:01:04:
4e:fa:d1:94:49:84:96:23:ee:71:e6:b1:bf:c4:97:
43:a1:3b:0a:82:0f:1e:25:89:81:a6:f1:c5:8d:5f:
c7:82:d7:0a:87:60:a6:73:38:9a:db:f7:74:a2:92:
98:fe:0f:e2:3f:9b:40:98:c8:22:54:17:48:3f:32:
3f:90:84:a6:2c:8c:d0:97:32:36:5a:38:02:94:c6:
72:ac:67:4d:1f:be:c6:ab:dc:cf:5b:30:46:83:7b:
3b:49:62:0f:6e:84:19:34:e5:28:f2:10:7b:85:1a:
c7:97:74:32:91:50:6f:26:90:dd:85:ea:88:60:7c:
ad:c0:45:6c:a5:3e:40:f0:8a:89:d4:5e:69:87:a9:
a3:2d:90:15:90:76:32:30:2d:bc:3a:2e:8a:5c:e3:
cc:ec:02:2f:e2:f5:7f:11:1e:e1:b7:6c:0b:e5:99:
83:ce:48:b2:12:35:60:cf:3b:dc:cc:1a:75:b8:fe:
c8:37:c8:db:a0:77:e9:4b:26:dc:09:cb:d0:3a:c7:
70:af:c1:32:02:da:19:a9:29:57:6e:dd:f9:d0:a4:
1c:e4:10:a9:d2:71:c2:72:5f:d1:6f:2c:70:7f:25:
2f:4c:56:3f:ae:8f:4f:d0:70:7b:9c:68:b0:4e:14:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FE:65:6A:76:87:3E:B8:86:CF:AA:EC:23:23:E3:59:EE:3F:9C:42
X509v3 Authority Key Identifier:
keyid:76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:26:d8:50:78:32:cd:bc:b6:6a:27:15:b0:eb:9f:fd:84:25:
46:0f:4c:b7:d5:53:58:7e:8b:ac:73:7d:b1:a4:09:d9:d9:27:
30:ce:5c:73:f7:93:b1:2b:af:8b:f8:1a:e2:c2:a0:d5:f0:08:
23:d1:78:d0:31:74:e4:79:57:b5:51:bb:c4:a6:a6:3f:59:06:
26:b0:80:f0:e8:6a:38:7b:68:dd:7a:2f:4f:12:0b:33:4e:08:
2c:66:aa:82:dc:e5:3f:bb:2f:36:ff:9b:18:f6:6f:32:73:bb:
53:a8:24:3d:ab:40:10:16:18:85:5b:be:fe:6c:0a:32:b1:97:
f8:f3:7b:62:b4:73:d0:81:c6:be:0d:85:51:33:0c:52:96:83:
8c:9c:88:f2:f2:f8:3e:32:2c:22:d3:c1:a0:ad:c0:f6:d8:80:
51:fc:72:42:a5:df:58:45:c7:9b:7c:88:e7:14:ea:f9:d3:48:
cd:ce:84:27:a2:c2:89:48:40:a7:86:71:d2:49:72:d1:e4:07:
36:6b:20:13:6a:10:6c:cf:8a:c6:68:91:6f:04:1f:55:2d:9e:
c2:0b:8a:30:b4:3d:ef:2c:3a:14:8c:5c:43:3e:15:fd:c0:c2:
12:34:67:70:28:c4:e5:94:64:0a:ad:5d:04:c0:61:7a:02:8a:
2c:c3:f1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:44:17 2026 by rpki-client