Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
File: dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json)
Hash identifier: pJwhMvY+1fAfaRvnSoW/D0MMrUIHM9EzgaP25xIaBlo=
Subject key identifier: 47:5F:78:64:56:98:BE:E5:89:C6:5E:F5:1F:23:E9:6A:89:2D:2F:E0
Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
Certificate issuer: /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Certificate serial: 019D284DC5BACFBA0BC4B2713D50130E65CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 04:01:18 +0000
Manifest this update: Thu 26 Mar 2026 04:01:18 +0000
Manifest next update: Fri 27 Mar 2026 04:01:18 +0000
Files and hashes: 1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: n8xIWIthydsJHT7XgiXi0S5qxD8tPwfisye8CQ0z2Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c5:ba:cf:ba:0b:c4:b2:71:3d:50:13:0e:65:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Validity
Not Before: Mar 26 04:01:18 2026 GMT
Not After : Mar 27 04:01:18 2026 GMT
Subject: CN=475f78645698bee589c65ef51f23e96a892d2fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:22:89:f5:26:75:0c:5b:a2:02:c9:58:eb:
ed:35:23:ca:1f:f2:37:23:18:6e:98:a7:27:e8:08:
77:51:7c:46:2c:c0:42:b4:f5:6d:21:c2:ea:3b:14:
eb:8a:66:05:b8:a0:6c:15:9b:2c:cd:fc:1d:52:a3:
b2:b4:88:a3:e5:e4:59:53:26:be:10:28:12:82:86:
f2:7d:5b:e4:d6:70:d3:28:87:f3:d2:59:64:a0:87:
74:ff:74:9d:5a:9f:da:f1:aa:28:3f:15:6f:e2:33:
f0:3d:34:66:3c:5f:0e:71:30:4e:d2:2f:af:cb:fd:
b5:68:6b:db:98:01:fc:fc:bb:72:37:79:72:c0:0c:
93:16:ad:f2:f8:73:46:57:30:b3:c1:d6:29:2d:ff:
98:ab:61:78:5c:a0:a3:8b:48:c5:21:cf:c9:59:49:
1b:12:a4:37:f2:fe:a6:ca:9a:db:29:c4:97:cd:a8:
73:ca:25:7a:fa:63:fa:6a:4d:99:a2:5f:d3:81:26:
bc:8b:f4:c7:d6:38:bd:12:9e:44:05:45:92:0d:a8:
61:e2:02:f4:86:93:b3:43:72:be:ac:f6:b0:4c:10:
61:df:42:ef:ec:2b:cf:91:5b:ea:7d:3c:33:85:a5:
82:c1:9a:f7:8c:ba:91:3e:61:80:14:8d:b2:9d:ec:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5F:78:64:56:98:BE:E5:89:C6:5E:F5:1F:23:E9:6A:89:2D:2F:E0
X509v3 Authority Key Identifier:
keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3e:cb:5a:69:75:83:96:c3:b0:0e:9e:72:3d:af:6b:6c:5f:
4f:2b:b5:8a:1e:11:e7:1f:c4:a6:de:0d:e7:c7:ec:12:99:c8:
fb:12:a5:9f:2e:37:03:db:e3:33:a7:5f:c8:00:9b:c2:da:a0:
f8:b3:3e:97:75:d8:3f:ec:66:50:0a:a4:2d:18:51:95:76:bd:
1e:3b:f4:d2:01:35:c3:6c:d5:9f:b6:93:24:fc:e3:2d:90:a3:
15:d4:e7:40:ba:69:83:1b:d4:be:5d:2a:1b:e8:31:c0:3c:8c:
4b:42:49:ca:15:09:ec:98:02:ba:02:87:33:fc:cb:39:d8:03:
26:44:38:25:92:a7:9a:40:2b:fe:c6:de:da:b9:e8:fc:ca:f9:
e8:74:d5:8a:5b:50:ca:53:68:bc:4b:ec:71:ab:22:2b:6b:c3:
d1:32:91:6a:b5:b7:d0:7a:5d:ef:4c:b1:a2:93:86:3e:1b:20:
9e:38:14:8b:8e:f9:e5:34:d8:1c:86:94:c4:ae:1d:f7:38:e5:
ae:e1:47:16:57:81:74:4f:56:26:d3:42:96:67:5e:25:da:4e:
10:13:be:b8:e1:3c:08:73:b1:b5:c9:2f:d9:1f:e1:39:78:45:
c8:36:22:4c:2b:9b:d6:81:d2:37:63:a0:58:98:64:d5:07:c6:
99:e9:c2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:33 2026 by rpki-client