Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
File: dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft (raw, json)
Hash identifier: FGBEZZiszB3bYVnmh28og5fpUvXOBpnrdeoy4sxTlFA=
Subject key identifier: 4C:42:D1:74:39:48:16:7B:4D:4E:D8:2D:7C:01:85:FA:72:82:06:CC
Authority key identifier: 76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
Certificate issuer: /CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Certificate serial: 019D27A91DDD1C7AE249B75E930168B1D721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
Manifest number: 1457
Signing time: Thu 26 Mar 2026 01:01:27 +0000
Manifest this update: Thu 26 Mar 2026 01:01:27 +0000
Manifest next update: Fri 27 Mar 2026 01:01:27 +0000
Files and hashes: 1: 6DOga19N-SJus9fSs8aWod0Yc8s.roa (hash: 6YzaiBJdvsex7JXKRsYEZt98CcuLIqwEZkpbs74D19I=)
2: XE1kOIB75TvdzQX6XL4UIF1VSVU.roa (hash: m19jT0n9FXKgSHyXS7xQh4IgY66LSF6KAUB6MwLyHjw=)
3: dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl (hash: JRPW1bdoOJqc0RDY6kAq1vxgqvQkcyqOTMEyQngIuzk=)
4: in97d_QuA5JBuVN7OnV-KU6w3C8.roa (hash: zwPzJSQ51+tk8t5b6PNsOReOwHPxkeVD+OmohksBsx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:1d:dd:1c:7a:e2:49:b7:5e:93:01:68:b1:d7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Validity
Not Before: Mar 26 01:01:27 2026 GMT
Not After : Mar 27 01:01:27 2026 GMT
Subject: CN=4c42d1743948167b4d4ed82d7c0185fa728206cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:f0:1a:91:96:6c:c1:ed:5a:30:c4:e7:ef:
4e:6b:5b:b4:be:86:2a:97:cc:b4:c4:a7:04:48:53:
77:a2:5f:74:20:7b:81:c7:7c:d8:eb:95:3e:26:54:
eb:eb:9d:8b:db:f4:04:84:69:6d:3e:37:d5:26:47:
52:b0:1a:b3:5c:e7:1c:0a:92:de:dd:6f:e1:a2:b6:
5f:c9:be:d1:7e:21:c3:36:7c:06:71:89:77:16:7f:
61:67:6d:c3:fe:b1:f0:f9:31:15:1b:29:75:46:55:
19:e3:16:d9:d8:69:de:6a:66:84:1f:55:5c:f4:6c:
b8:c0:d5:24:93:65:7d:bf:24:5d:5d:62:44:eb:70:
ab:50:41:eb:94:31:3c:35:cf:df:fd:68:f6:72:8b:
93:76:e0:1d:35:a7:47:63:98:e1:5f:c6:78:16:76:
31:58:52:9b:f3:d8:b7:88:96:57:12:54:27:c5:3e:
5a:e7:20:e3:f5:e1:d1:90:31:af:d9:4a:1c:8a:33:
f9:44:1a:04:51:8a:cb:c0:6f:aa:76:ea:df:83:8a:
58:08:3f:0b:25:71:8d:a5:4c:99:e4:37:f7:59:5a:
79:fb:7a:00:27:5c:36:81:c6:73:ad:9c:70:ee:bc:
ec:98:65:87:16:99:4c:65:f8:c9:5b:25:13:c1:46:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:42:D1:74:39:48:16:7B:4D:4E:D8:2D:7C:01:85:FA:72:82:06:CC
X509v3 Authority Key Identifier:
keyid:76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:cd:f7:f8:90:b2:99:95:50:42:a6:e6:9d:98:b0:21:41:30:
90:97:2a:ba:39:fc:a7:d7:91:ce:ec:ae:66:64:36:83:c0:7a:
53:cc:ca:fc:02:c2:7f:83:34:52:96:ab:d7:7c:46:11:a3:b0:
12:02:0d:bd:18:f3:e0:07:54:df:2e:5a:c0:57:0e:a8:a9:f2:
82:4c:bd:f9:99:b0:88:7f:eb:80:06:83:f8:06:d0:e0:61:7b:
c6:0f:ac:e7:99:dd:cd:fb:5d:72:8f:40:c1:95:f6:9a:1c:8d:
bf:a6:d8:2d:3f:5e:47:06:58:98:d0:e4:62:11:5b:c0:43:66:
79:8b:b3:76:ff:3b:79:cb:55:55:fb:21:7c:e9:e9:da:30:98:
e1:e7:64:e7:a2:2d:6e:bc:ee:d0:83:1a:7e:a6:24:3f:c5:fe:
7b:f0:cb:37:6e:01:91:f3:b1:05:69:01:52:88:05:31:c5:dd:
be:36:8c:77:d4:1c:ae:2b:28:0b:50:89:5b:47:4a:2a:99:09:
db:76:83:61:4b:e0:af:89:3c:bd:13:9d:ac:62:9b:15:33:6d:
50:bd:94:4d:e6:47:40:43:9b:79:a5:47:d1:69:92:36:4c:78:
35:9b:d1:c9:26:ec:00:15:94:ef:05:d8:c4:b7:7a:0a:a8:f8:
f3:a8:f2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:53 2026 by rpki-client