Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
File: dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json)
Hash identifier: 3kVStYp8xLrjps9Qm3FmqPuU+Z3ALGkTnpUUhW1HNq8=
Subject key identifier: 2C:AD:20:AC:A1:49:72:0B:E8:D4:2F:87:43:27:10:55:14:83:6C:62
Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
Certificate issuer: /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Certificate serial: 019D2884794A41EEB46FFDA323FA39ECADC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 05:01:03 +0000
Manifest this update: Thu 26 Mar 2026 05:01:03 +0000
Manifest next update: Fri 27 Mar 2026 05:01:03 +0000
Files and hashes: 1: KwctrYLeRKoApU1-lNG2pUzIRFY.roa (hash: 1By8fKUFtlATKn4LhCiJ+z6rFS67TtSuGlxf5SYKGN4=)
2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: DyvPrz5EG0gwbCNSQOLA3FpnP8t4J+aszp3HcDDHC5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:79:4a:41:ee:b4:6f:fd:a3:23:fa:39:ec:ad:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Validity
Not Before: Mar 26 05:01:03 2026 GMT
Not After : Mar 27 05:01:03 2026 GMT
Subject: CN=2cad20aca149720be8d42f874327105514836c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:45:98:7d:d8:fc:91:77:1a:2d:0a:75:0f:45:
f5:7c:b8:7c:f5:2d:72:86:ee:06:65:bd:80:de:99:
9c:04:ad:21:ea:a7:76:97:07:b2:58:6c:f0:9b:b0:
e4:df:46:fe:d0:d4:bc:ae:cf:a0:0e:61:18:81:0b:
0c:56:26:7d:d9:cd:44:df:1c:46:f9:d6:8e:dd:05:
5a:8c:f9:53:62:b8:ba:c8:c7:1e:a9:6e:a4:90:db:
89:7b:78:a4:7e:28:79:bf:7a:c1:50:47:9b:b6:70:
94:aa:55:fe:54:0a:f8:e8:c7:b0:24:c2:73:1f:7b:
2d:b8:7a:35:40:4e:ae:e0:8a:2d:1d:d2:b6:43:ac:
a4:de:76:46:7b:71:26:4e:9e:2c:36:b5:8d:b4:01:
c9:8d:a6:c5:00:dd:43:d9:6a:be:02:0b:56:f7:b3:
9a:50:f3:f5:63:d2:ff:24:8e:17:3c:67:c2:32:ec:
fe:6f:c1:59:62:22:90:87:fd:e2:5b:57:60:56:a2:
87:ba:41:49:4d:11:96:97:36:0d:01:a0:0c:66:24:
db:a4:8a:6c:19:51:12:21:fb:3d:6c:11:d6:2a:90:
00:20:49:d4:64:2d:e6:f0:d8:a8:89:8d:bc:93:35:
c1:31:1c:6a:b9:fc:19:e7:41:a7:bc:6f:2e:77:e4:
40:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AD:20:AC:A1:49:72:0B:E8:D4:2F:87:43:27:10:55:14:83:6C:62
X509v3 Authority Key Identifier:
keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e1:ac:99:49:14:80:04:c4:3b:72:56:5e:05:ac:02:1a:0c:
50:86:8e:6d:f8:82:3d:a9:c0:46:1d:90:99:d2:b6:cb:b2:b6:
2e:d1:83:ff:4f:80:2a:ed:92:09:c4:4f:f3:1e:2a:71:5d:50:
f9:27:56:32:6c:c9:4f:5f:bd:cc:82:65:b2:6a:d5:8a:cc:da:
7b:80:0a:ed:06:ab:5e:68:f1:b8:8e:1f:d1:25:be:a4:87:c1:
6d:35:34:8f:ae:a7:47:cf:dd:93:46:b5:9b:90:74:00:89:d1:
c2:ba:4e:0e:e4:bc:82:18:cd:34:7f:cb:56:77:35:1e:86:43:
d0:57:2e:78:4a:17:f1:01:e3:da:8f:31:a4:54:63:bf:a9:b8:
74:2d:23:1d:22:f2:32:d7:1e:d8:a8:34:72:c4:0f:0b:37:7e:
b2:0a:53:03:cc:a3:86:c9:29:04:9b:30:d0:4c:75:c5:bf:9a:
66:d1:91:0c:1a:27:e8:9a:15:d6:23:64:34:1c:8c:d3:96:88:
88:fa:64:96:07:ff:de:24:13:5b:7c:65:e6:d1:ee:e3:a4:6a:
06:81:fe:fa:9e:b1:95:19:35:f1:62:ef:5b:cd:0b:5c:f5:e6:
ad:26:2f:12:4f:7c:35:65:37:01:50:1b:63:5f:56:e8:2f:60:
ca:77:af:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:43 2026 by rpki-client