Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
File: dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json)
Hash identifier: mHHTyJdiCD/J/URpIEhJ5WdqEvsHW4sENTEzYK9Iaak=
Subject key identifier: 0A:3C:C2:5B:D7:48:65:E8:5B:1F:97:97:28:47:28:C9:DE:30:71:2F
Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Certificate serial: 019D26CD8C0124C7224B49C331713C8FDAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
Manifest number: 1366
Signing time: Wed 25 Mar 2026 21:01:38 +0000
Manifest this update: Wed 25 Mar 2026 21:01:38 +0000
Manifest next update: Thu 26 Mar 2026 21:01:38 +0000
Files and hashes: 1: NqpHuEMuxziK_s6FwV4-BlExn5I.roa (hash: vG3pCOebbp8ka7ppT4ebnWl3F1yFRDRI4TRKdbhBhzs=)
2: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: aeTYz2X/G7S6SKr2wA2iBzD8FOdB9XjtN8xw6zIHaRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:8c:01:24:c7:22:4b:49:c3:31:71:3c:8f:da:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Validity
Not Before: Mar 25 21:01:38 2026 GMT
Not After : Mar 26 21:01:38 2026 GMT
Subject: CN=0a3cc25bd74865e85b1f9797284728c9de30712f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:d7:1a:a3:e6:81:b9:fa:25:4c:89:5f:09:
0e:82:ed:81:6a:38:5b:e6:34:c7:bd:de:a7:fe:c1:
ca:62:a1:64:a7:2c:7e:35:9e:ec:ee:07:b1:23:a4:
91:7d:1f:81:6a:ae:53:8e:12:01:6a:92:e1:bb:36:
b1:22:6e:22:58:6e:f3:59:10:52:87:96:fc:40:1b:
05:32:66:92:37:d4:ca:f9:06:a1:09:2e:ec:d8:7a:
7a:7b:56:89:27:1b:d9:3a:75:a8:47:a8:27:25:f8:
20:e9:b9:58:a7:73:dc:57:1c:bc:bb:d2:5d:58:4e:
4b:26:73:28:8a:9f:4a:8e:88:f3:59:9b:b1:23:45:
28:f4:73:d9:9d:9f:46:e0:25:b6:80:d0:d6:16:0b:
24:36:d4:ff:77:29:64:5b:80:e0:a3:f0:e7:09:4b:
70:63:1c:dc:40:e1:6e:82:1e:c6:0b:c6:40:a0:7a:
c5:47:9b:6f:ae:e5:ad:73:0e:3a:9e:29:ac:6d:84:
71:30:20:2c:f3:14:fc:80:1b:d6:e5:31:1d:55:b8:
4b:dc:a0:c7:52:e6:69:ec:83:67:58:9f:53:49:db:
6d:d7:f3:f1:0e:b6:9b:c3:26:88:8a:b2:aa:03:da:
c7:21:90:59:78:51:cf:af:0e:3a:4d:ba:88:84:9a:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3C:C2:5B:D7:48:65:E8:5B:1F:97:97:28:47:28:C9:DE:30:71:2F
X509v3 Authority Key Identifier:
keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3e:33:ca:84:69:8c:1f:b7:35:26:47:f5:e3:53:56:c5:4d:
53:69:4f:e1:ff:cc:52:3f:51:13:7a:06:7e:e1:9e:59:22:4e:
12:82:b6:a8:75:bf:6c:53:21:5a:14:0b:b3:66:ba:b2:db:1b:
e0:76:a0:7c:70:58:08:2c:c9:bc:f1:ea:78:9c:c7:46:a7:95:
fb:86:ab:37:c2:64:a5:45:26:6a:9b:ad:3e:44:97:59:76:e6:
bf:3d:b2:97:4b:56:59:9b:fe:33:2e:36:d7:b0:c0:1e:1b:b5:
a7:88:c9:1d:12:60:51:54:e1:2e:5e:af:4b:42:75:98:81:4f:
b6:50:51:aa:b0:84:cd:cd:02:86:c7:a4:e1:4a:14:0c:b9:e2:
dc:b0:5b:30:b2:b3:6c:89:0b:eb:43:02:b9:c6:7b:72:bc:f7:
b0:4a:f3:7e:c5:6c:48:cc:28:32:0c:0c:1f:5d:e5:d7:70:f9:
2d:29:c8:bc:e2:7b:63:a3:37:4c:10:87:60:09:f6:a1:eb:e9:
c4:33:9a:58:c9:1b:be:fc:0b:ca:d4:96:18:70:80:8b:80:14:
14:67:9d:71:30:1b:a3:aa:66:ca:99:c3:86:52:27:ad:09:d5:
1d:fa:1b:03:d7:ee:ee:ae:54:2c:c8:cf:09:ea:a8:c1:59:ed:
c7:58:67:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:16 2026 by rpki-client