Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: Vghy+1HqEBiiDBoLzWN5dAYnx5h+Dm90l7w+P0EgtgQ=
Subject key identifier: D5:4B:D9:36:44:D7:63:55:A5:49:35:21:20:CC:52:31:84:35:1C:0C
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 01A0D8A80AA11DA340D3D74E42D1429EA241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0C06
Signing time: Fri 25 Sep 2026 13:01:26 +0000
Manifest this update: Fri 25 Sep 2026 13:01:26 +0000
Manifest next update: Sat 26 Sep 2026 13:01:26 +0000
Files and hashes: 1: Caiwf_QYVrjuMQk3SKwJbOdkL1I.roa (hash: 5fx/cD2u1bFDALyIAFqy2QpBhB4xdpPsEpLHocGA9Q4=)
2: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: pZzzTSyqJiKf5uNH35+4iaMtLNcR9FhX6frZHFC2yTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:0a:a1:1d:a3:40:d3:d7:4e:42:d1:42:9e:a2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Sep 25 13:01:26 2026 GMT
Not After : Sep 26 13:01:26 2026 GMT
Subject: CN=d54bd93644d76355a549352120cc523184351c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:8a:c9:e9:b6:53:64:66:ae:3f:41:c0:38:
2d:88:62:c5:89:a4:f6:61:2a:bf:52:55:ae:54:b7:
37:51:38:69:31:a2:7f:13:ab:85:c4:10:bc:f8:6b:
ad:e9:5b:cb:20:77:ff:a4:7e:82:a9:a4:5d:73:70:
ff:6f:d6:f4:58:e9:9e:23:df:aa:70:cf:7d:48:c8:
b9:75:21:7f:30:fc:ac:07:68:81:21:cd:46:bf:16:
ac:68:17:03:41:22:24:37:c8:4e:41:69:0b:bd:6a:
24:bd:96:e6:e4:50:ba:86:bc:d8:d6:72:6f:b8:15:
9a:0d:ad:0f:59:8a:65:cd:44:2f:ef:14:8e:61:1d:
fb:af:76:a4:d4:ba:34:25:b5:d4:ce:71:a5:5f:6b:
0e:d7:b9:5b:03:2b:6b:0c:d5:11:2b:a4:c9:79:7d:
b6:4d:08:19:23:66:97:bf:80:fb:46:21:31:9a:c5:
d2:ac:c1:d8:20:80:4c:ac:6b:c0:60:37:65:d1:85:
39:cd:ec:b3:e6:5f:95:4d:70:70:36:ad:e9:5d:91:
92:01:ae:f4:f9:81:9c:62:4c:10:b1:2a:d7:af:c8:
db:5f:bd:b4:72:2c:39:cc:cf:46:5f:8f:73:02:5b:
33:82:2e:2f:fb:94:26:f1:58:f4:49:0e:54:4f:db:
9f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4B:D9:36:44:D7:63:55:A5:49:35:21:20:CC:52:31:84:35:1C:0C
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9a:ec:fa:99:0c:a2:8f:ab:76:16:65:ff:93:4e:ce:3f:84:
0d:e8:da:e7:b4:e5:8c:6e:82:c1:ff:f9:fc:31:a0:70:27:2e:
0a:86:03:33:05:4d:04:0b:6f:09:5e:e6:33:96:b3:34:26:40:
45:2d:25:f5:22:a7:8f:8c:42:61:d2:35:c7:0f:2a:db:63:31:
c6:27:ef:72:14:3a:a6:2a:5b:79:ee:76:1e:76:af:87:68:8a:
dd:ef:3e:fd:c9:f9:28:65:31:9f:0f:ff:66:b1:4e:74:ba:ef:
3d:a5:72:55:5d:6a:35:59:1e:36:fe:78:2b:6c:a5:9c:48:20:
a7:41:87:d2:4e:6b:97:1f:cb:95:86:df:cc:01:5b:d2:39:87:
d8:17:37:61:76:ec:5e:9e:eb:46:e9:30:7f:f7:b9:12:51:ad:
40:d6:ea:95:e8:2e:e1:d8:ef:88:be:3d:2f:29:ea:56:1b:83:
22:f4:f5:78:2a:d0:7e:6b:ba:15:24:bf:15:03:3e:67:2f:71:
13:db:13:2e:90:09:54:2a:f9:46:0f:7b:00:85:0d:15:23:95:
cc:be:cb:9b:e6:19:03:b0:74:75:3f:c7:3c:6e:3a:7c:89:ae:
25:23:07:9f:47:2a:1e:f6:57:f8:37:89:20:51:20:01:cf:03:
5f:8d:a4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:30:00 2026 by rpki-client