Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: dE/MH3sZNWwvil+wSF1Q6FhxZ9zCi24dsAv5LSTSM8w=
Subject key identifier: F2:56:D5:8E:78:DE:9D:30:06:21:E1:B8:2E:03:5D:CE:7E:26:C0:93
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 019D254CC3B6337189FA12B0DAD98101BDA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0E90
Signing time: Wed 25 Mar 2026 14:01:20 +0000
Manifest this update: Wed 25 Mar 2026 14:01:20 +0000
Manifest next update: Thu 26 Mar 2026 14:01:20 +0000
Files and hashes: 1: BCXtQModd3nAhdeMkRMBuZx_cZc.roa (hash: jtOOBxUO8skySjopVxcruyx6WiDS/7xnyuAQI3lDFqk=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: bXplU0bzdvpcdF+rpPfvYX4BDRRSAMPjWn4ucjoDf0U=)
3: L9a6XlmixBDgTngX3OesnHMjCvQ.roa (hash: yfr3OyuPpoSecdibTgJg+ch8pCeShfs+7iwZpZSIKv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:c3:b6:33:71:89:fa:12:b0:da:d9:81:01:bd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Mar 25 14:01:20 2026 GMT
Not After : Mar 26 14:01:20 2026 GMT
Subject: CN=f256d58e78de9d300621e1b82e035dce7e26c093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:32:f1:f6:3c:f9:e9:d6:2a:02:e7:dc:d9:
a4:ac:0f:49:a2:cc:d3:3e:00:3e:3e:2b:80:20:58:
dd:94:6a:22:2a:6e:91:13:71:fe:2d:a5:e8:aa:22:
03:c4:79:4e:60:95:1e:ab:4e:7a:5e:d3:f6:ad:4e:
36:f2:40:59:e7:48:63:5d:f7:0e:1a:bc:95:7e:ea:
2d:99:3b:16:3c:ee:46:3d:e1:1a:3c:a3:db:b9:ff:
02:80:8d:c5:6c:33:d6:b6:d6:94:b5:0b:29:a0:a8:
79:6a:47:1a:4a:bf:f8:73:36:48:03:dc:6b:e8:86:
d3:55:ba:77:78:6f:1b:ef:ac:d0:fe:c2:f0:9f:94:
b8:12:78:30:52:62:0a:c7:08:65:24:49:c7:0c:92:
0a:4a:ca:95:5b:2c:b3:0c:67:45:e2:de:14:f9:0f:
ac:e8:ab:67:90:97:38:c0:82:f3:93:02:9b:f8:f0:
69:4d:25:0f:76:ec:0a:70:ee:10:0f:39:10:e6:f5:
5f:40:3a:28:70:6c:b7:39:32:7d:70:51:f8:0c:ba:
c9:58:c5:c7:a0:c7:ee:8d:ac:f6:91:ca:6e:b7:f9:
8f:d3:ca:ad:51:93:c9:21:02:e9:53:64:45:6f:d7:
94:97:69:89:61:4d:89:45:2d:8a:31:67:b2:69:a8:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:56:D5:8E:78:DE:9D:30:06:21:E1:B8:2E:03:5D:CE:7E:26:C0:93
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:09:4c:af:2e:40:a3:ee:06:53:16:33:1d:47:6e:4d:59:62:
fa:92:de:14:e2:5f:51:0c:ea:fe:72:42:9d:0b:b9:47:22:68:
a8:b4:ec:19:8d:e9:54:6a:eb:8c:d7:e2:e6:d8:be:1b:5e:ef:
2d:3c:fa:5f:c4:e7:68:d4:a0:d0:8b:b5:59:78:74:c7:bc:b6:
19:90:1b:f9:6e:d9:92:c7:81:c1:a8:30:b7:59:9e:00:6b:97:
62:5d:be:a7:15:37:e1:b5:47:44:2e:a1:e7:40:cb:e9:cd:14:
8b:42:05:b8:f9:74:51:14:61:97:65:60:d7:35:31:d5:92:d1:
55:dd:ef:44:d2:dc:48:b8:ca:d6:4d:3e:e2:1f:a2:5b:9e:38:
6e:d1:99:c4:ac:e0:b1:57:6d:f6:e5:42:e0:94:33:8b:21:8e:
95:d0:21:2d:96:5a:6a:92:73:21:27:50:58:e2:0a:50:7d:61:
af:46:20:a1:ac:53:22:d3:5c:26:54:06:80:33:b0:a7:62:45:
4d:65:6f:d1:12:3b:c7:80:4b:68:d8:e4:26:52:1a:65:3d:d0:
23:d1:3c:ea:fd:00:d6:88:74:a4:c1:ad:6f:87:2b:57:b9:c4:
7e:a0:6f:b2:a3:93:ee:ea:b7:0a:2d:23:ff:20:71:5b:e2:19:
ec:8a:66:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:23 2026 by rpki-client