Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
File: dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft (raw, json)
Hash identifier: UDvDYt0aQZSiXGFb5FzggUshH3+tdnJAb5ErFHBJRjo=
Subject key identifier: 4A:87:F9:F1:C2:98:6A:8C:D7:FE:6A:FA:11:56:DC:B8:44:74:A6:A6
Authority key identifier: 74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
Certificate issuer: /CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Certificate serial: 019D265FCDBCFE866B0B096151AEA5E0CF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
Manifest number: 01FE
Signing time: Wed 25 Mar 2026 19:01:45 +0000
Manifest this update: Wed 25 Mar 2026 19:01:45 +0000
Manifest next update: Thu 26 Mar 2026 19:01:45 +0000
Files and hashes: 1: dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl (hash: tE8OyhBNaKAN2thxA2g59zSD4RQw3r2nqDtfiWwhrwI=)
2: i5v8Z7TLwK1d1522dak6QJo-ZdI.roa (hash: dORF0I0Mm7ul7rA3/PIS0cDu8jhdXdBq0BX2+YuQ/kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:cd:bc:fe:86:6b:0b:09:61:51:ae:a5:e0:cf:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Validity
Not Before: Mar 25 19:01:45 2026 GMT
Not After : Mar 26 19:01:45 2026 GMT
Subject: CN=4a87f9f1c2986a8cd7fe6afa1156dcb84474a6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:21:a1:a6:ff:25:6e:36:58:51:0d:ff:6c:
39:6e:e5:bc:b0:44:56:b1:2f:0d:2c:cd:2c:b5:59:
65:1e:da:3c:e9:c1:2b:2e:53:42:45:6a:6c:f5:0c:
62:56:c4:0a:48:f5:ad:1a:72:3c:82:20:7c:4e:81:
33:55:ce:c5:c3:9a:95:10:66:24:e5:e3:bd:27:46:
c9:c4:8c:0d:64:a5:56:cf:a8:a5:74:27:d2:cd:1a:
b5:20:b0:a4:3b:ed:77:8c:09:d0:b1:5e:c0:bb:70:
76:a1:12:e1:82:6a:ca:4d:aa:2a:b9:4c:46:0f:06:
72:cf:e7:0b:71:9a:4a:ef:ca:d8:90:71:f8:95:34:
d9:68:03:fc:37:07:c7:83:f4:cb:63:54:41:26:53:
31:cd:19:23:8b:7a:f0:59:58:4f:fe:d4:88:2e:fc:
50:d9:68:d2:cb:00:2e:b0:6b:02:6d:fb:7f:ef:ab:
0f:2a:16:44:8e:5c:59:b6:a6:44:ce:18:5e:e2:b6:
35:60:c9:fd:76:22:45:56:3b:99:b8:f7:65:3d:84:
44:1f:87:4b:e9:00:b0:57:a5:80:09:92:19:97:9a:
28:ad:ce:17:e6:a4:9b:aa:67:87:17:0b:16:37:56:
3a:1b:f5:82:a6:ab:cb:94:71:0c:78:c5:19:c5:b8:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:87:F9:F1:C2:98:6A:8C:D7:FE:6A:FA:11:56:DC:B8:44:74:A6:A6
X509v3 Authority Key Identifier:
keyid:74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2d:ba:a1:89:74:4a:72:92:df:f4:a3:21:ef:a4:cb:50:95:
83:a9:7f:00:bc:e2:5d:b5:94:65:57:8d:d6:fb:f1:55:26:93:
ff:de:48:6e:57:37:21:07:62:85:59:be:31:8c:11:1e:01:c8:
30:3d:6d:a6:77:63:02:60:45:cf:7b:fb:43:6b:30:da:40:09:
ab:03:70:2f:c7:fc:13:9b:6d:95:5e:18:18:c0:a7:32:b5:f4:
b5:db:83:83:05:af:2b:ae:20:ee:6d:8b:bc:b4:d6:39:f6:e3:
25:89:bd:c8:fe:ad:74:f6:94:23:19:35:d0:28:50:79:95:16:
c8:c7:12:45:1a:36:89:9f:37:fa:ca:10:a9:c5:8c:be:68:2f:
d4:43:c7:7b:a4:dc:5a:0b:11:34:f2:68:8b:f3:7b:b5:32:0c:
a1:a5:60:3a:bf:c9:80:dc:0f:d8:04:a0:63:72:92:9e:3d:39:
89:74:a6:56:d6:da:a4:d1:75:81:d5:55:ea:f0:42:44:7e:66:
ec:2f:e2:62:df:b8:b2:e7:df:f0:7e:31:0b:52:28:73:2c:be:
02:5b:d4:3a:4e:89:51:f1:12:b9:db:a4:f3:07:d9:23:ae:82:
7e:38:7e:75:1a:80:f8:d5:ce:fe:04:03:c8:48:f3:c2:22:ca:
52:2f:7d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:06 2026 by rpki-client