Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
File: dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft (raw, json)
Hash identifier: mNDH1uBCL30HKpAWQLwgKG6MbD5K12sDVkF/EzFjhmc=
Subject key identifier: 43:6B:94:19:AF:51:B3:A2:B6:5F:DD:5B:F4:5C:43:9F:48:95:C6:34
Authority key identifier: 74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
Certificate issuer: /CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Certificate serial: 01A1035BAC81C7D009EF22E07D800FDF4C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
Manifest number: 0402
Signing time: Sat 03 Oct 2026 20:01:41 +0000
Manifest this update: Sat 03 Oct 2026 20:01:41 +0000
Manifest next update: Sun 04 Oct 2026 20:01:41 +0000
Files and hashes: 1: 1-mmnoNOS11tga2Q29yD5BQAuFLE.roa (hash: GOq5nJwjD0VCVYVCda8zJe1uGhLFpPTQrRyVuZj7aM8=)
2: dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl (hash: hWE+5DyuWyTviIhjdbZ8vpAH/8wfmuE1+O9uHRQOetw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:ac:81:c7:d0:09:ef:22:e0:7d:80:0f:df:4c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Validity
Not Before: Oct 3 20:01:41 2026 GMT
Not After : Oct 4 20:01:41 2026 GMT
Subject: CN=436b9419af51b3a2b65fdd5bf45c439f4895c634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5c:c2:49:aa:73:81:97:bc:98:f1:95:bc:34:
a5:f7:0c:df:b9:7b:6c:c3:64:02:c2:7b:fe:45:83:
fa:27:16:b5:20:df:29:e8:99:6b:2f:ab:c1:84:68:
b2:fc:3f:c7:b6:f7:d3:78:1a:67:cf:be:eb:1d:70:
b5:5b:25:72:64:7c:cd:30:b6:e7:3f:cc:9d:a3:37:
42:aa:87:6a:f7:d8:ed:9d:f3:58:6f:25:41:2a:d8:
0d:36:11:e3:bb:7a:8a:37:14:3e:37:79:62:ec:09:
90:a1:29:ad:42:65:18:2e:01:94:17:b7:54:5d:91:
41:60:24:21:ea:aa:d0:4f:dc:74:bf:eb:d2:94:a8:
e8:01:48:c5:be:2f:51:c8:71:de:cc:cc:a6:1d:99:
03:90:4f:65:86:d0:d6:cf:21:a1:85:c2:bd:6f:fd:
1a:b2:51:a9:d5:90:67:26:b2:d8:ed:50:e5:38:65:
6f:81:9d:5d:fb:35:2c:0a:f6:bf:66:30:ce:88:00:
1c:7c:1b:7b:54:ff:42:39:79:16:a8:f4:6f:bb:68:
a9:7b:8c:82:1e:cf:d3:1e:2f:05:3e:bf:bc:50:88:
03:6c:51:49:39:b4:e1:81:b6:cc:c0:fa:6a:6f:01:
72:28:87:3d:5a:11:fc:f4:92:05:17:95:19:4a:eb:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6B:94:19:AF:51:B3:A2:B6:5F:DD:5B:F4:5C:43:9F:48:95:C6:34
X509v3 Authority Key Identifier:
keyid:74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b9:4a:ef:11:1f:04:c9:12:8d:18:da:46:cc:b2:cf:29:b0:
32:03:54:65:c4:76:0b:11:86:ad:62:3f:6d:f2:ac:79:e4:d2:
db:77:69:92:24:5b:77:7d:62:f2:35:f2:15:63:4e:c5:65:06:
f8:51:47:58:65:a5:03:1b:21:c0:07:e7:c0:52:ca:a0:45:07:
6c:c8:0a:87:eb:2f:bf:5e:54:d1:a9:8d:73:48:fb:50:28:85:
b0:e6:e6:ea:b7:ff:ed:bd:4c:39:42:b1:4a:44:01:d4:34:86:
0b:c5:9a:b1:29:c3:0d:7a:06:fe:0e:6a:c5:b6:80:db:e4:a0:
c8:e1:bf:78:64:47:5c:07:b7:80:dc:e8:b5:ab:f5:75:83:e2:
8f:b8:03:36:8b:4f:0e:2d:4c:4b:ee:5e:df:d9:07:60:42:af:
30:47:20:7b:1b:18:4e:8c:fd:a9:cb:a2:2b:72:b3:5f:d3:f0:
16:6f:3d:18:f3:7c:ce:ac:04:14:ba:fb:40:16:23:90:f2:5b:
87:9a:d1:df:66:e0:cb:08:c0:61:30:d3:0b:b1:b1:1a:25:92:
03:ce:79:85:97:15:a5:94:51:00:58:e7:11:3f:47:58:a3:a9:
ec:d8:99:10:b6:77:0c:ce:85:d7:37:af:4f:cb:fe:93:81:6f:
0d:a4:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:32:51 2026 by rpki-client