Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
File: dEMndQQU00na3gIjNJfPR2Vc0-Q.mft (raw, json)
Hash identifier: 8sLpWQBfJKND0aR4TIMgk1C2Z+LcgOVN7xpcjo1mLe8=
Subject key identifier: AD:2D:FA:14:73:11:19:B4:91:07:E7:D8:04:4D:E5:F9:65:DE:79:FC
Authority key identifier: 74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
Certificate issuer: /CN=744327750414d349dade02233497cf47655cd3e4
Certificate serial: 019D265FD7C999DBD5AAB5CA2D36A7FFEA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
Manifest number: 1258
Signing time: Wed 25 Mar 2026 19:01:48 +0000
Manifest this update: Wed 25 Mar 2026 19:01:48 +0000
Manifest next update: Thu 26 Mar 2026 19:01:48 +0000
Files and hashes: 1: dEMndQQU00na3gIjNJfPR2Vc0-Q.crl (hash: Yip+9aUy77/J3jXUFFVSX4r+cCdxSRXjp3TaBWoi29M=)
2: qgoIbqs7ffhe71hmB-z1aOesfwY.roa (hash: unpX7d9a/7Ql3d6uX8FBvvq+RxiOD+GU1AIVMyoQ+QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d7:c9:99:db:d5:aa:b5:ca:2d:36:a7:ff:ea:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744327750414d349dade02233497cf47655cd3e4
Validity
Not Before: Mar 25 19:01:48 2026 GMT
Not After : Mar 26 19:01:48 2026 GMT
Subject: CN=ad2dfa14731119b49107e7d8044de5f965de79fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:37:0e:ee:00:e8:66:9b:b2:74:07:a5:55:
95:21:57:90:c4:8a:3d:77:48:f9:9f:cf:5a:39:13:
fe:3a:7f:fd:02:62:69:7a:31:b8:11:fb:32:9c:93:
5a:30:b8:47:27:92:ee:7f:e6:bb:05:61:60:ad:b9:
1a:0c:31:d3:33:6e:63:7f:54:b4:c0:4c:66:12:d3:
b9:92:64:a3:29:eb:88:00:43:73:c7:99:d2:17:c7:
a7:84:c1:31:50:04:13:ff:5b:2c:49:d2:1f:dd:c6:
fb:85:67:01:8c:ab:25:9b:72:df:00:44:f5:28:91:
38:44:b7:ca:c3:22:af:3c:71:f4:c5:6b:35:e6:db:
f7:fc:8d:46:b1:68:e0:ff:65:1e:3b:1b:8f:ca:9c:
e9:08:4b:71:90:d9:24:39:7e:d9:ec:8c:6a:62:63:
97:14:f3:71:f3:56:86:ea:07:c1:c5:9e:dc:97:f7:
8e:80:07:12:76:1b:6e:83:5b:9d:c5:25:85:4c:78:
7c:73:dd:a6:48:f3:13:7c:f8:7c:5d:42:c9:56:de:
96:7d:d3:58:49:5b:8c:d4:93:f2:f3:30:42:0e:20:
d8:77:fb:21:63:75:48:0a:b2:3a:d1:9f:25:d7:cc:
e5:d4:4c:b8:f9:29:eb:e6:11:ef:eb:c0:22:48:49:
b7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2D:FA:14:73:11:19:B4:91:07:E7:D8:04:4D:E5:F9:65:DE:79:FC
X509v3 Authority Key Identifier:
keyid:74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:44:9e:f9:09:ae:87:47:88:ba:8a:f2:38:61:84:b1:a6:63:
38:39:0b:3f:ac:ad:9e:d6:3d:d0:c4:8c:db:6e:3f:ce:eb:77:
aa:8c:b7:b8:b1:a4:1b:e5:28:89:1d:43:12:a3:5c:a5:9b:50:
b8:89:49:3f:f6:a0:2a:b1:46:b8:23:00:a5:9a:1c:d8:5b:86:
41:77:d4:56:4a:73:5b:a5:4b:99:85:47:20:f7:f7:99:92:3a:
d1:80:5d:8a:2e:26:0d:91:26:8b:aa:7e:f5:58:bc:36:7d:d8:
38:38:0c:83:6a:67:00:89:83:ad:2a:bd:ca:74:6c:af:cd:c8:
e5:c7:1b:28:76:26:05:e2:37:60:4a:00:5f:85:ad:a1:1a:e9:
9b:47:bc:b9:04:50:ea:9c:73:73:04:c6:4a:87:57:fb:df:14:
a9:af:48:9c:23:a2:7d:17:bb:32:80:ce:6a:09:27:16:66:92:
3a:b6:81:88:a1:28:7e:7e:8e:4b:05:aa:9e:4a:9d:37:0d:e7:
2e:93:fb:4a:07:c8:32:41:be:28:86:c9:8e:9d:ca:94:e4:ef:
63:07:e8:4e:a0:67:95:3b:f5:46:2e:47:5a:3f:ba:a1:ea:ad:
bc:84:d8:07:1f:69:e7:a3:b7:a9:96:23:f0:21:b4:86:b7:01:
20:ba:07:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:09 2026 by rpki-client