Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: FTrOBE3mr5Xm8qw5wiWEEaiWO9GdnY3NoKyyYWqotiI=
Subject key identifier: B2:E6:E6:61:B0:01:98:66:B4:87:E6:1E:19:20:FC:A6:8E:EC:47:16
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 019D25835189BDCC156CBA63CDC28E1F9AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 03DC
Signing time: Wed 25 Mar 2026 15:00:56 +0000
Manifest this update: Wed 25 Mar 2026 15:00:56 +0000
Manifest next update: Thu 26 Mar 2026 15:00:56 +0000
Files and hashes: 1: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: 1ZjjzIQJd1Zt/GX/GFFzXROR2TsgImlUyC5A7Q1NVs4=)
2: eh-_1IK7oCD8nbLcwB1h-jsivvQ.roa (hash: 1hB/vcchKccjfMUEW19JzNX5vcI2nAxqryUItaWwuI8=)
3: pdvwezXifSPbHn7Zg5GsoIZ-9_g.asa (hash: L3xvDc7N16Bw2yzHqAnTIftFzbiPXKuwqnDanSSbEog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:51:89:bd:cc:15:6c:ba:63:cd:c2:8e:1f:9a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Mar 25 15:00:56 2026 GMT
Not After : Mar 26 15:00:56 2026 GMT
Subject: CN=b2e6e661b0019866b487e61e1920fca68eec4716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d8:38:88:6f:85:d2:fa:3b:a4:e3:5b:89:44:
4d:12:17:e9:8b:bb:ec:fd:bc:59:fd:9c:13:2d:7f:
2d:89:e6:fd:5b:ff:47:46:ae:47:a8:5b:3a:83:c6:
0f:02:83:db:b7:98:db:ab:0d:73:73:24:ef:9d:26:
b3:08:e3:a9:b2:e4:da:2e:7f:e5:f5:c6:14:7f:0b:
c3:46:cb:d2:9a:ef:c1:f0:45:d1:fb:5d:6c:56:4a:
25:8e:22:48:1c:a6:1f:ad:fb:b0:19:57:af:2d:a2:
5c:5e:dd:04:a8:f7:0f:1d:9b:f9:89:7f:50:cf:03:
84:a4:02:b2:28:da:7d:c5:c7:5e:ee:71:70:d1:d6:
f4:c0:02:c5:e0:ca:32:ac:f1:84:50:1f:b1:d0:02:
ae:3b:05:98:ec:e8:f0:93:65:d7:c2:2f:63:69:be:
ab:3e:9f:d3:4d:d6:bc:dd:37:88:ba:91:53:ca:dd:
3b:d7:af:d8:7c:a0:c5:9d:88:3d:0d:29:df:72:5c:
4f:45:88:31:d6:32:24:fb:08:62:c2:ab:c0:60:ce:
44:db:e4:d3:ee:18:70:80:35:3c:a6:c1:c9:44:46:
50:a5:96:25:d4:92:9e:02:d3:14:fb:a6:5b:5a:75:
77:9a:5f:21:98:de:05:eb:63:84:fa:09:ad:52:3d:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E6:E6:61:B0:01:98:66:B4:87:E6:1E:19:20:FC:A6:8E:EC:47:16
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:75:be:50:16:44:77:f1:44:e9:41:4f:44:60:3c:28:2c:e7:
65:39:62:34:fb:5f:f7:c0:15:22:2c:4c:92:25:72:06:17:c2:
a5:35:01:65:29:69:a8:6e:48:67:73:46:91:3d:78:d6:64:e6:
9b:bf:f5:3b:b3:90:e1:a9:7e:3c:6d:f3:23:4c:52:ce:3b:f7:
be:ff:9b:0b:a0:73:6e:82:51:51:8d:a5:fa:3e:a2:20:a6:b1:
a3:5f:bf:7c:2d:9e:7d:4d:c6:75:6c:d2:a4:2b:d0:e2:b3:d8:
72:08:02:13:85:b5:6c:f7:31:ba:75:0d:08:7d:a2:39:13:2c:
83:6e:5b:3f:81:3b:02:1f:20:63:c9:71:0f:a5:9b:a3:d0:56:
e7:4c:88:f0:ee:fb:9a:05:02:c7:f9:3c:f0:5b:4d:34:37:4c:
87:f9:24:34:66:6b:aa:a0:4b:4d:68:e9:6f:25:86:c0:8c:40:
1b:8b:aa:a6:d7:4f:69:45:01:2c:ca:00:da:f2:08:05:0b:ec:
e5:b5:85:e4:cb:ea:7c:f2:1b:fb:76:27:fe:b3:03:77:ca:12:
60:25:1d:52:68:28:f0:9d:02:65:37:26:07:b1:3b:3d:78:19:
09:75:1f:ad:28:ac:0c:4e:cf:eb:ec:4d:20:04:0e:f5:db:39:
22:5d:9a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:43 2026 by rpki-client