Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: vAfjEDdMNfgORX0qVvwCoZ+1dYozXeZYHuSUT1gm7og=
Subject key identifier: 42:6F:4D:3D:BD:35:F6:2F:4E:E6:66:57:BD:0D:79:DA:20:DD:7E:CA
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 019D2704206ADD1A893B82DE437FFC7395C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:15 +0000
Manifest this update: Wed 25 Mar 2026 22:01:15 +0000
Manifest next update: Thu 26 Mar 2026 22:01:15 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: jekfChf4sMnezFjqPrz/TVx0WBndVNJkHvk4TvhM6Ps=)
2: hU1lZW7ePs-jJStAbmgwJQdywgk.roa (hash: GCbi7/7u241zxcC9BwBBXY2OG87lKhbUz6RrhT+13oQ=)
3: oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa (hash: hhGP/lSRzYSBVwOdWUcy+jdF25VySsbxm9Awg1JpKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:20:6a:dd:1a:89:3b:82:de:43:7f:fc:73:95:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Mar 25 22:01:15 2026 GMT
Not After : Mar 26 22:01:15 2026 GMT
Subject: CN=426f4d3dbd35f62f4ee66657bd0d79da20dd7eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:c8:ed:1d:09:d9:d4:cb:fa:ee:ba:42:14:
7a:74:9d:24:5a:81:7c:e6:76:46:77:b5:46:3c:1f:
59:17:fa:90:2a:fd:4f:df:a2:7a:af:3c:63:96:63:
fc:aa:aa:2c:12:c2:8a:32:aa:ca:1c:1b:85:9a:a2:
1c:cb:f7:f6:22:89:c2:fb:ce:1b:4e:4f:33:6e:c8:
d8:9e:f9:b9:08:be:ee:a5:94:79:f6:c0:91:4b:5f:
82:94:45:71:9e:82:6c:62:b7:f2:9c:ac:5f:93:66:
ef:28:87:2f:66:e4:e6:67:63:51:d9:aa:b9:4f:de:
15:04:5f:cd:2c:22:23:6f:fe:e1:e4:f0:5d:5e:97:
99:72:70:0d:6d:06:8a:01:f2:d3:2f:b4:76:80:ae:
e6:0c:32:3f:da:98:3a:ad:e3:f6:e3:b2:7e:62:2a:
e2:dd:34:a6:22:fc:b7:c0:4f:01:cd:db:4c:a2:1b:
08:53:8c:e3:27:d3:df:30:3d:50:7d:c7:bb:82:f1:
7c:1a:34:6b:89:b6:59:d4:ed:4a:09:85:02:c4:03:
c2:06:87:c3:13:df:a1:8e:11:d2:1c:46:4b:f8:fe:
69:b0:30:8a:f1:0b:85:b9:d2:ce:a7:1b:88:73:1b:
03:c0:8f:02:f1:ce:2b:70:a2:c9:14:63:a3:f2:ac:
31:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6F:4D:3D:BD:35:F6:2F:4E:E6:66:57:BD:0D:79:DA:20:DD:7E:CA
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1e:24:81:a3:c3:7d:08:ad:4a:1e:66:78:db:50:7c:93:5d:
84:f9:77:bf:65:c1:c5:d8:a1:3d:00:14:c7:b7:9b:7e:ed:83:
f4:68:40:f0:30:be:b3:7d:a9:cc:78:7e:3d:28:bc:5b:12:99:
27:0c:a1:36:c7:1e:d3:ca:82:9c:49:18:05:dd:85:c1:fd:13:
3d:43:d9:30:e2:2b:eb:88:62:cf:f3:58:2c:22:6f:b1:28:83:
ed:d9:04:26:9d:9e:a9:1f:14:e9:8b:9d:4b:8b:a7:fb:fd:44:
c1:a3:ee:3e:c9:fa:71:53:5b:25:8c:c8:7b:1d:36:92:2a:73:
9f:0f:c2:dc:ce:45:9b:ef:be:3c:49:4d:e8:15:cd:6e:51:d9:
66:fe:1f:1a:22:c9:ef:f5:66:b0:a8:d3:8a:47:f8:84:b3:9b:
c3:4e:4e:3d:7d:62:a6:7d:a1:fc:5f:29:b1:d5:09:29:4b:7b:
c0:81:62:17:59:57:a5:36:af:19:5c:1c:ca:bf:3c:a4:63:0f:
e1:62:e4:3d:6d:4e:b9:24:67:68:8e:c9:1c:ac:2a:9b:40:3b:
c7:08:47:03:9a:a5:ad:84:ba:55:21:22:11:ac:b0:eb:46:70:
e9:be:e6:80:be:89:ad:b9:c0:38:20:a5:61:62:4e:41:51:f1:
5a:39:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:29 2026 by rpki-client