Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: rkS07NwlUqhDnWodp/kx+hkZC3VK1B00ZwVaBhex+nk=
Subject key identifier: F1:E9:A6:CA:39:8C:18:0D:19:B2:09:16:F9:92:81:8C:29:59:FC:50
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 019D284E35F6ED84536B57D5169D853F0825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0A1D
Signing time: Thu 26 Mar 2026 04:01:47 +0000
Manifest this update: Thu 26 Mar 2026 04:01:47 +0000
Manifest next update: Fri 27 Mar 2026 04:01:47 +0000
Files and hashes: 1: Caiwf_QYVrjuMQk3SKwJbOdkL1I.roa (hash: 5fx/cD2u1bFDALyIAFqy2QpBhB4xdpPsEpLHocGA9Q4=)
2: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: ts661BH1/X2UmL7eUu14Gspi9H+Ev1LL0j2zvY8pRKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:35:f6:ed:84:53:6b:57:d5:16:9d:85:3f:08:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Mar 26 04:01:47 2026 GMT
Not After : Mar 27 04:01:47 2026 GMT
Subject: CN=f1e9a6ca398c180d19b20916f992818c2959fc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:e9:e2:4b:64:dd:31:36:2c:8a:e8:66:87:
77:29:75:86:16:a1:9c:96:82:c1:83:0a:34:69:f0:
36:54:7f:46:0f:18:5d:fe:61:84:02:ca:e4:44:2a:
3e:f4:0b:a7:e2:45:63:51:0f:f4:3f:39:1f:19:85:
ac:9d:51:0b:5f:f1:26:69:cf:5c:7d:bc:90:dc:3d:
c2:0b:65:e2:81:5d:34:d1:20:6f:38:e4:41:fb:f4:
04:53:55:cd:44:e2:45:da:2b:02:e3:12:e3:8f:7c:
fb:83:25:c3:dc:a3:58:87:f9:d7:bf:dd:e6:08:55:
7f:fb:97:58:07:a6:8a:dc:d3:4d:dd:1f:62:43:59:
ee:d0:96:6f:25:02:55:77:05:6b:7c:68:23:f6:7f:
e3:a5:f0:44:bb:91:27:c5:0c:c8:98:52:11:a2:d3:
1f:9c:ab:2f:cc:ce:84:23:df:8a:2d:28:1f:f9:64:
d9:7c:88:e8:b1:ee:a0:e0:ce:04:e6:98:77:9e:f7:
b4:d0:6a:82:cd:3e:c8:9f:5c:cc:3c:2c:43:79:96:
a3:0a:2f:9f:d1:24:ac:7c:de:ee:2f:c5:26:a0:b8:
5d:ce:43:d6:47:ba:0d:16:c3:b5:72:3c:10:34:97:
32:bc:20:87:a6:1d:59:f0:75:f5:7b:e6:ae:37:5e:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E9:A6:CA:39:8C:18:0D:19:B2:09:16:F9:92:81:8C:29:59:FC:50
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:11:ca:e3:3a:68:67:b9:22:94:52:81:ba:ec:e5:52:de:93:
5d:0f:8d:d7:fc:36:b0:20:e8:1b:d8:6f:9c:72:49:c4:dd:d1:
52:9d:45:60:56:d8:b9:bf:ea:9e:42:88:e0:2f:be:39:4e:b7:
b2:c1:1c:dc:40:19:21:c0:b1:a3:d5:95:f2:e7:15:d5:68:1c:
c8:bc:ba:98:84:da:b6:fc:ba:72:56:07:4c:21:7a:c6:9f:98:
08:7c:66:19:d2:d7:05:ff:94:69:1a:6b:c5:48:de:3d:72:c8:
00:c5:dc:97:45:da:ec:93:7c:af:4b:ad:3d:36:84:ab:1e:a2:
ba:f5:c0:d3:9b:4a:9f:84:1f:3b:82:4e:f8:49:90:de:58:b3:
ed:73:94:90:d5:00:b5:e5:57:28:f2:d4:97:e4:a8:70:bc:b2:
0f:8f:9d:87:08:f7:f2:5d:2d:57:ac:30:e4:9a:32:bc:8b:47:
9b:71:d8:b4:83:62:3b:3e:19:ec:76:ff:ab:45:52:73:45:b7:
d3:de:1f:9a:e1:d5:7a:d2:39:80:90:ae:89:01:9a:d4:0c:b7:
fb:44:5e:f3:74:6c:37:d8:cb:ba:3f:c7:e7:4a:4c:57:d1:e7:
e4:e6:fa:79:87:4e:08:8b:eb:ad:26:b0:35:dc:6b:c3:56:7c:
31:52:18:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:49:02 2026 by rpki-client