Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: jXXqY1hromATz+BQTYT00Qs5yTYSFrF6Zg9e0PxhJ1A=
Subject key identifier: 42:B1:A6:AB:76:C2:00:C8:CB:A3:80:E3:62:DB:DD:F1:4E:89:F1:53
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 019D28F210D6D5525A392BAE7DB47E718E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 07:00:45 +0000
Manifest this update: Thu 26 Mar 2026 07:00:45 +0000
Manifest next update: Fri 27 Mar 2026 07:00:45 +0000
Files and hashes: 1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: bhx/CqyPgwxYHDskcCLeIxAmwTNEpEYrmpBWUQTgyBo=)
2: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (hash: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:10:d6:d5:52:5a:39:2b:ae:7d:b4:7e:71:8e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Mar 26 07:00:45 2026 GMT
Not After : Mar 27 07:00:45 2026 GMT
Subject: CN=42b1a6ab76c200c8cba380e362dbddf14e89f153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:cf:dc:1e:38:77:4d:ed:0a:20:7f:83:84:
19:89:eb:fe:38:c0:b6:df:72:80:a0:a5:06:7e:7a:
ed:f7:0b:4e:ae:3a:f9:72:0f:d4:f4:04:1e:ed:a8:
6b:95:d3:1f:f8:38:81:71:1f:0d:d8:9e:a5:ba:8a:
b5:55:bf:a3:76:63:20:ae:1a:83:5a:98:59:dc:76:
e8:8b:e8:0b:5f:4f:f5:40:52:bb:57:00:9e:24:da:
9f:63:8c:62:d5:2e:a9:7a:64:dc:64:e2:3d:c9:ca:
24:07:85:d9:08:ce:26:bb:ce:bc:9c:1d:d4:b4:f0:
17:44:7e:04:c4:a6:1f:2d:68:3e:e4:e2:b8:55:af:
40:cf:c4:3a:1e:2b:90:68:5e:40:f5:bc:e3:22:a2:
59:5f:07:75:d7:1f:4d:dc:58:8b:18:ad:52:c0:5d:
cb:c4:04:b7:b0:f8:01:a4:5e:2b:fc:de:2b:e2:aa:
2e:5a:67:ab:f0:97:72:56:af:2e:1c:44:2a:ba:20:
ac:c7:26:f2:ac:15:56:ee:90:ac:ac:78:1b:fe:a6:
da:49:3e:d7:b8:ff:80:00:d3:ba:a6:5a:d3:0e:94:
28:25:68:88:ec:a6:19:bd:6e:b3:5d:2e:d1:61:63:
29:7e:99:52:72:01:9b:2b:0d:dd:09:f2:97:c7:1d:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B1:A6:AB:76:C2:00:C8:CB:A3:80:E3:62:DB:DD:F1:4E:89:F1:53
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9d:62:13:03:67:ed:f1:87:95:f3:62:44:5b:04:61:04:dd:
c5:85:e5:ce:48:88:49:20:b3:8e:75:99:3b:86:c9:1b:6d:b0:
57:ae:d3:75:f7:46:50:97:9f:8c:73:fd:c6:a2:b7:6a:63:cf:
d5:df:3c:29:7d:11:35:0f:30:30:32:37:b6:c8:3d:54:67:52:
a6:50:a7:34:da:f2:94:cb:08:0c:7c:65:d7:44:44:dd:c6:d7:
f5:5c:83:75:4c:dc:29:cc:90:fb:2b:44:fa:01:4d:56:41:b8:
a9:06:7c:52:17:22:73:03:8d:65:87:2c:d2:4a:15:88:50:af:
53:d9:df:e4:54:a9:f0:d6:b9:e0:96:09:ee:4a:23:df:38:b8:
8d:93:8b:7e:78:59:04:19:e5:12:1a:1e:d1:c5:ac:44:22:31:
78:74:a3:d7:d8:9c:be:fb:e8:43:e2:ae:2e:ed:6d:9a:2f:6c:
58:2f:5a:cd:70:b6:8f:e1:a5:f9:b2:4b:2e:2c:8e:9b:ce:42:
80:f0:52:10:92:9c:2f:88:00:44:8e:fe:cf:94:ba:70:79:a2:
89:dc:65:b0:13:5e:45:41:9d:42:e3:cb:14:90:4a:78:58:e7:
cf:64:d8:5c:a0:8b:5b:df:ee:9d:78:55:89:8c:ef:af:35:79:
0c:b1:d3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:10:23 2026 by rpki-client