Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File: dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier: sWpOIiV0Tl79OMHjZTXmk40EmaUjfkeGJnYWn5gMMZQ=
Subject key identifier: 2D:45:95:0C:E3:65:66:4C:8A:30:94:95:CA:05:77:83:A7:6D:D4:0E
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial: 019D27DF85EC5BBBBF917F30CF53398E56A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number: 132A
Signing time: Thu 26 Mar 2026 02:00:53 +0000
Manifest this update: Thu 26 Mar 2026 02:00:53 +0000
Manifest next update: Fri 27 Mar 2026 02:00:53 +0000
Files and hashes: 1: 2snz2cHxMIqDrmWpyQdj5PDHUMA.roa (hash: PDvyyYGhi1AmhDsFwKXgGPleS0592sAJ/29+42mhJtU=)
2: ck9fph3pnGBfD51d6ySumkAZbWw.roa (hash: cePM5hzSAL7gxgiyzP8i8tA4JspwG2EEsvqQZVUTIU0=)
3: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: HhMH6JM58tb7IQCOfUocEFYWjpEMW4Bw5JSK4RC7MUg=)
4: zsYC7eTs7CKxZQzMiKBYtW02NU4.roa (hash: zfsiqu/7VESSfUyUGFpkJ4f5HeLFmZSKqmckIw2soSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:85:ec:5b:bb:bf:91:7f:30:cf:53:39:8e:56:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Validity
Not Before: Mar 26 02:00:53 2026 GMT
Not After : Mar 27 02:00:53 2026 GMT
Subject: CN=2d45950ce365664c8a309495ca057783a76dd40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ce:e4:a4:7c:c1:15:bc:7d:96:ed:a1:e5:c2:
e6:2b:5c:83:7e:57:be:3d:fc:cc:e9:76:36:6b:82:
c8:d8:36:b3:ec:5b:70:03:f4:18:47:d4:3b:19:7e:
9a:cc:66:70:ac:68:fc:4b:a6:b3:3f:a1:b4:c8:a5:
90:6b:02:46:af:dc:ae:97:11:39:a2:85:ef:a0:f8:
0f:f7:72:46:fe:ca:90:1d:0f:0a:04:38:e0:66:ce:
fb:96:06:ca:7c:99:5b:f9:57:34:da:8f:bd:66:91:
f5:59:b3:d3:7f:70:0f:f5:73:b0:5c:59:f3:95:93:
5a:d2:0f:75:2c:bc:f4:7d:14:01:11:f4:a2:04:f8:
63:5b:71:1f:fb:39:a5:b3:3e:f9:0b:a0:30:e7:e1:
45:06:98:67:85:a4:55:9a:59:34:0e:5b:2e:a0:7d:
80:2a:9d:fe:e4:a9:69:75:51:f4:b2:78:e9:48:ae:
1c:43:55:50:3a:13:e1:0c:d8:c6:c5:99:7b:5a:98:
0c:8d:78:4c:ab:6f:40:73:cf:74:19:4b:18:09:14:
73:2d:d4:d6:74:ad:c8:8e:ae:57:d5:40:97:b9:dd:
28:fa:64:77:8a:2b:a1:2f:3a:e0:91:fe:ce:14:81:
6e:26:18:a8:81:54:7d:f4:10:95:08:27:48:0a:e9:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:45:95:0C:E3:65:66:4C:8A:30:94:95:CA:05:77:83:A7:6D:D4:0E
X509v3 Authority Key Identifier:
keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:82:ca:de:7f:61:84:c9:f1:5f:22:db:2c:9b:dc:62:4c:fb:
a8:4c:75:dd:6e:cc:24:48:fa:35:c9:dd:b8:de:6a:47:87:81:
c2:6d:3c:01:5e:f0:ca:01:58:31:01:ae:b4:36:21:a9:3a:42:
49:10:5b:b8:80:96:c7:29:e1:ed:65:17:c6:9e:d9:af:64:47:
ab:93:19:05:e9:d0:f0:fd:bd:28:2f:4c:76:07:e2:ea:50:bf:
f9:ff:79:9a:34:e1:14:0d:c9:41:27:f2:25:b5:8b:94:80:93:
76:c0:9e:c1:2f:26:5e:46:ac:1f:90:d0:be:8b:c6:c3:ff:14:
e9:57:01:2a:e1:8b:b6:3f:4d:50:32:49:f1:8c:bc:bd:f4:fb:
d9:b7:d7:15:9f:22:a6:ab:96:e1:81:77:95:bc:32:f1:65:30:
f0:11:22:a3:49:6c:c5:0d:8b:19:dc:b3:b9:bb:32:a5:d2:44:
e0:64:73:9e:7f:59:37:c3:a1:9e:7e:01:c4:21:fb:d8:ca:ab:
83:07:7e:71:c1:98:be:47:ec:21:aa:23:37:3f:43:ee:cf:9d:
b8:e8:c6:8b:d2:56:e8:ae:ff:63:0d:17:33:ae:44:9f:5a:61:
56:e0:8d:33:1a:65:e4:6f:bf:4b:4d:7f:57:10:15:e7:72:0e:
b8:85:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:03 2026 by rpki-client