Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json)
Hash identifier: Dhjm5BL+VyNxxEDgvllrXwBwiO/CBgN+fkVxo5+l0w0=
Subject key identifier: 72:88:10:DF:F3:DB:51:B3:F3:78:77:30:B9:08:61:75:FB:E4:66:4B
Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Certificate serial: 019D25F1AA53740393F0B79709470D8A1FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
Manifest number: 0A32
Signing time: Wed 25 Mar 2026 17:01:27 +0000
Manifest this update: Wed 25 Mar 2026 17:01:27 +0000
Manifest next update: Thu 26 Mar 2026 17:01:27 +0000
Files and hashes: 1: HBiP4paC0MlxmT9TqUdXSCFpVek.roa (hash: 5/zIGY+6xQLGjEfA2psYBflaTdU36mi9/74Ob0mM/kg=)
2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: k1na4jAdMXISN+ll4VOXgcL5zuvfkXtnmozLzia6kC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:aa:53:74:03:93:f0:b7:97:09:47:0d:8a:1f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Validity
Not Before: Mar 25 17:01:27 2026 GMT
Not After : Mar 26 17:01:27 2026 GMT
Subject: CN=728810dff3db51b3f3787730b9086175fbe4664b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:05:6d:58:e8:c1:9c:55:f2:60:ca:69:a2:
58:c1:0b:54:a9:4f:64:1f:d0:13:0d:5b:e0:c0:83:
6c:56:84:cf:c1:50:a8:2a:23:61:73:83:62:c3:cf:
8b:12:77:f8:df:f4:4d:66:14:8a:2d:5e:97:2c:57:
0b:aa:3f:41:e3:95:b6:0d:b3:3b:f9:e6:21:2c:a1:
83:36:0a:6a:c6:1f:ce:bf:20:f9:14:9d:01:69:5e:
20:73:dc:4e:f2:f9:a2:49:0e:b8:c4:47:6a:da:81:
4b:ca:6b:90:d5:f5:de:a2:4b:b2:fc:e9:9e:95:8d:
72:cd:1d:e0:a8:91:5f:5e:cf:e3:2e:a5:b9:58:e2:
6d:7a:87:47:eb:49:32:43:69:ec:28:ed:aa:e9:1b:
f7:a8:27:20:4f:8f:1c:04:f6:82:8e:43:16:09:3a:
17:d5:ee:cf:6b:49:a0:1e:de:16:cc:0a:24:5a:b1:
ee:05:d6:9a:50:9c:ce:02:9e:57:c7:5a:8c:c2:fc:
5d:18:03:35:cb:4c:db:2c:ea:92:91:c5:0d:80:f0:
30:3b:7e:69:77:bc:ff:ef:8f:f6:5c:70:9a:5d:6d:
05:9b:7b:35:5f:98:da:1a:e0:9f:71:de:15:6e:ca:
5b:c4:9f:b7:cf:8b:06:f6:bc:87:6b:e7:ab:24:95:
d1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:88:10:DF:F3:DB:51:B3:F3:78:77:30:B9:08:61:75:FB:E4:66:4B
X509v3 Authority Key Identifier:
keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:53:9f:54:68:02:0a:24:03:54:fe:ca:0b:8a:43:74:9e:20:
b6:be:36:70:14:d1:9e:a9:05:12:c1:7d:28:07:98:6e:5c:dc:
0f:b5:02:07:ee:db:38:d8:61:48:05:89:fa:11:da:0b:21:e9:
2f:99:41:8d:3e:8e:a4:94:64:64:8b:04:13:6a:13:30:be:dc:
a6:14:40:68:17:63:d6:47:69:bf:f0:78:89:13:6c:aa:62:fe:
fa:6f:93:c6:ee:68:24:66:2e:3c:d0:c5:4c:4b:29:d5:45:ed:
b8:dc:72:2f:2f:0b:0e:c1:97:7d:1c:67:fe:25:71:68:46:f3:
23:cd:37:79:39:c0:f0:9f:47:f2:63:73:74:80:79:98:01:7a:
e5:13:ac:c1:fa:3a:55:c6:27:c1:25:97:28:98:ad:8a:f9:97:
e6:68:c8:41:cb:0f:d2:f3:06:0d:77:c3:19:5b:d8:02:99:31:
2e:6c:71:10:05:e9:17:6b:78:cb:ac:4a:ae:08:9c:52:10:71:
01:ff:b1:9f:60:ae:14:60:3f:dd:b1:81:75:83:1f:53:0f:b5:
cd:cd:5f:e7:ce:09:46:a3:8e:09:e4:9a:0b:dd:96:e3:27:8a:
a9:2b:5d:1b:2d:ec:78:08:dd:94:5c:81:6b:4d:56:e8:02:e1:
bd:35:a1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:51 2026 by rpki-client