Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: nbiYB/KOuuEEVlgxJCQfd4NcdNH+o9DMQEwvI6q4lrQ=
Subject key identifier: 24:9E:E5:E8:DF:E7:40:50:4B:3F:49:F7:4A:6E:BE:1C:12:D9:13:87
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 019D2696312938F99B05D0D1E5E3530EDC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 164C
Signing time: Wed 25 Mar 2026 20:01:10 +0000
Manifest this update: Wed 25 Mar 2026 20:01:10 +0000
Manifest next update: Thu 26 Mar 2026 20:01:10 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: PXIkB2gKLTAzt1FckZ9RKE9ZT7hiz2kN2Xxym9Y+76o=)
2: mGAQzPjBEuNvLBk4PZVTydQ08Ik.roa (hash: nFMnkaBb6s7S3hBrs96M6UKrx0AkayAu23OFBBKrBXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:31:29:38:f9:9b:05:d0:d1:e5:e3:53:0e:dc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: Mar 25 20:01:10 2026 GMT
Not After : Mar 26 20:01:10 2026 GMT
Subject: CN=249ee5e8dfe740504b3f49f74a6ebe1c12d91387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:f1:75:e4:78:99:74:63:da:d3:8a:40:7c:
68:6d:72:28:04:92:af:64:34:e4:a2:a1:35:25:00:
27:d8:1f:fe:18:5e:19:43:81:1f:6e:f6:66:db:3f:
d2:fc:aa:c9:a2:2a:53:8b:80:5a:b4:a0:89:f3:88:
91:a1:2b:7b:d8:0a:79:6d:41:1b:64:f8:ca:79:70:
b2:c2:af:bf:a5:40:27:81:0b:4e:93:14:27:00:92:
96:2f:c8:e5:23:40:1d:72:22:73:5c:58:4c:da:01:
e7:0b:2f:f7:0b:6c:8b:a9:74:6e:ad:27:c8:bd:20:
d3:64:5b:5b:7c:53:22:70:27:8a:29:ae:6d:d8:b9:
54:82:43:74:be:66:eb:d2:7a:2b:6e:be:69:43:93:
93:bc:89:98:9e:bb:a4:8d:41:fb:88:69:a1:0c:c7:
3c:86:46:db:1b:98:08:6a:a8:8e:c4:c3:4c:6d:37:
e4:7c:6c:49:4b:ae:a4:16:be:be:d1:aa:ed:d1:a9:
62:0c:cb:84:2d:90:c9:25:c7:0e:64:8b:df:13:5b:
13:36:ad:ab:69:7b:d2:8a:ef:3b:d9:cb:f0:a4:aa:
83:ee:98:b7:37:29:12:3c:4b:f3:a4:7a:3b:9f:5a:
b6:87:61:f1:eb:4c:f2:08:27:ce:67:ec:2d:2f:2f:
4c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9E:E5:E8:DF:E7:40:50:4B:3F:49:F7:4A:6E:BE:1C:12:D9:13:87
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a3:7c:04:d9:75:4c:91:6c:7e:36:17:6f:3d:97:6b:dd:96:
fd:3e:19:b9:6b:09:ff:3d:23:88:5c:5d:c6:21:4c:23:66:fe:
73:b1:6e:04:f8:15:c3:d5:a1:7a:01:a9:d3:c3:37:aa:9a:47:
e4:33:11:bf:99:48:7b:af:9d:4b:2f:44:08:b4:cb:93:93:fa:
fb:81:24:c7:b5:46:50:d3:37:d9:a2:9f:7f:37:a2:fc:59:29:
15:9c:9c:4f:ff:9e:0e:40:cc:00:2e:d5:a9:a3:4f:5f:dc:71:
1f:da:4a:fd:e2:89:3e:91:48:3d:60:3c:60:51:41:ad:79:9d:
8c:56:96:d7:6f:91:2d:fe:ea:73:4f:03:91:f8:07:66:64:12:
91:ee:64:e5:ee:7f:7d:80:62:7c:31:72:73:69:5d:15:11:49:
a0:94:7e:17:95:0b:7f:2a:53:8d:76:de:23:60:be:e6:75:c8:
a8:17:10:76:cb:41:cb:d0:98:eb:68:57:c7:2c:7e:46:f1:6c:
20:67:a6:d7:6d:fc:03:18:f5:61:f8:83:7d:0f:3f:df:ce:67:
77:26:d9:99:88:02:48:8c:f1:49:12:7f:af:1e:e1:2e:ba:33:
d2:94:68:f2:83:20:33:a0:87:fd:04:c7:0c:fe:40:c1:2b:bb:
49:57:7a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:56 2026 by rpki-client