Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
File: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft (raw, json)
Hash identifier: L4b30SIMl+DFHaRITzpszP0PraHWeb5QfrlACEvBQBU=
Subject key identifier: A7:FE:2F:46:90:A3:D9:DA:06:32:BF:B7:92:AB:FA:C6:FC:E9:28:A3
Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Certificate issuer: /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Certificate serial: 019D284E5636E9464A0287C928D670813727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 04:01:55 +0000
Manifest this update: Thu 26 Mar 2026 04:01:55 +0000
Manifest next update: Fri 27 Mar 2026 04:01:55 +0000
Files and hashes: 1: T4BJnDBfE6AyBSAWAjPZ1GzLlMM.roa (hash: SXBhd3/vnyIoPB/kDRi62FVnMbysfno7J5T9Eftc8tY=)
2: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl (hash: sJn6tHtJ/IYKR10rW3Lj1c+dW1xeZrPfqMHE241vnBo=)
3: tSpDrZGtdp0mH1aXKivR6nDrhuY.roa (hash: xkSEr+C7WhhCLocSo1zhSLhZi6gcFYi1jnV4sR3gnUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:56:36:e9:46:4a:02:87:c9:28:d6:70:81:37:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Validity
Not Before: Mar 26 04:01:55 2026 GMT
Not After : Mar 27 04:01:55 2026 GMT
Subject: CN=a7fe2f4690a3d9da0632bfb792abfac6fce928a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:6a:6f:fc:a7:96:29:b5:b6:d5:7b:4c:20:
e7:89:ac:43:ba:9d:62:2f:91:17:1a:7c:be:22:dc:
e4:df:a2:07:92:ba:99:ba:8a:e9:ce:6e:e9:4a:2d:
1b:1d:b4:82:07:f5:c8:5f:54:71:52:c9:d4:b7:e2:
f9:de:db:b3:e4:d0:60:e5:d2:a4:db:41:b9:02:b2:
20:28:cb:11:5a:2a:2f:a6:5a:98:66:a9:30:ef:46:
33:c4:e2:e3:ec:89:37:cb:7f:1d:83:79:1e:4b:bb:
f3:ad:fe:9a:ea:7f:d2:37:f2:19:8a:47:70:5e:e1:
13:a7:10:ee:5e:32:64:58:78:5d:34:30:0f:56:02:
e4:bd:10:5d:a5:ca:a0:b0:bc:01:65:ea:a4:db:aa:
8d:fb:ed:cf:56:a9:74:55:52:54:2c:e4:72:66:35:
a0:69:54:8f:13:81:21:cb:d6:9b:65:2f:f9:e6:38:
71:85:68:d4:50:52:bf:15:c4:da:30:ce:85:a7:40:
93:15:85:0d:81:f5:02:09:0b:9b:d9:85:24:c1:06:
ff:da:b6:56:1e:5f:d9:bb:a0:60:dc:69:84:fa:11:
d2:c1:a7:cb:4d:2b:d0:d2:35:a8:be:0d:32:0b:c0:
0b:0b:81:07:fb:4a:69:f9:4c:4b:5c:2b:86:78:14:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FE:2F:46:90:A3:D9:DA:06:32:BF:B7:92:AB:FA:C6:FC:E9:28:A3
X509v3 Authority Key Identifier:
keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9d:5b:58:27:84:4d:2a:85:10:71:32:67:7e:79:74:bd:ed:
d5:19:de:59:99:25:bb:1b:4e:b5:ad:6a:1b:de:aa:54:7e:9c:
2d:15:d5:a9:4e:f9:3c:c8:98:80:42:84:7e:3f:d3:d2:02:d9:
a7:4a:ca:8e:b9:9c:da:66:45:8e:e1:4d:b2:10:53:4c:bf:68:
6c:00:38:28:83:22:52:a0:ce:35:e2:41:0b:3e:db:d4:66:5c:
53:0a:ab:40:65:96:a7:de:86:e7:63:cb:a3:d3:17:31:fe:56:
92:82:cf:05:a1:4e:f2:2d:e2:ee:b5:10:07:e4:a6:f8:45:70:
67:e1:47:eb:57:45:90:a6:87:ac:0c:4a:12:43:8e:50:37:86:
f1:d2:16:e3:87:83:d6:3e:e5:44:3a:12:fc:99:88:c2:0e:8d:
5e:61:4d:50:50:87:ed:29:8e:9d:2e:64:9e:c0:93:48:40:9f:
79:ff:26:b6:2f:65:a7:c2:17:d9:6e:7e:e2:17:58:bb:f8:ad:
18:3a:21:ab:df:e9:37:bb:c9:f6:f0:80:f2:1e:e5:aa:f4:7b:
d4:ba:55:dc:93:04:a6:d4:ab:52:86:44:00:d0:f3:f4:63:bd:
a7:74:33:1c:0d:d8:9e:31:1b:59:aa:70:bf:08:37:85:5e:00:
5f:dc:5c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:38 2026 by rpki-client